Warning: Permanently added '[localhost]:60061' (ECDSA) to the list of known hosts.
2022/09/26 11:42:19 fuzzer started
2022/09/26 11:42:19 dialing manager at localhost:38881
syzkaller login: [   44.563301] cgroup: Unknown subsys name 'net'
[   44.645197] cgroup: Unknown subsys name 'rlimit'
2022/09/26 11:42:32 syscalls: 2215
2022/09/26 11:42:32 code coverage: enabled
2022/09/26 11:42:32 comparison tracing: enabled
2022/09/26 11:42:32 extra coverage: enabled
2022/09/26 11:42:32 setuid sandbox: enabled
2022/09/26 11:42:32 namespace sandbox: enabled
2022/09/26 11:42:32 Android sandbox: enabled
2022/09/26 11:42:32 fault injection: enabled
2022/09/26 11:42:32 leak checking: enabled
2022/09/26 11:42:32 net packet injection: enabled
2022/09/26 11:42:32 net device setup: enabled
2022/09/26 11:42:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/26 11:42:32 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/26 11:42:32 USB emulation: enabled
2022/09/26 11:42:32 hci packet injection: enabled
2022/09/26 11:42:32 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923                                          )
2022/09/26 11:42:32 802.15.4 emulation: enabled
2022/09/26 11:42:32 fetching corpus: 50, signal 21463/23293 (executing program)
2022/09/26 11:42:33 fetching corpus: 100, signal 31350/34839 (executing program)
2022/09/26 11:42:33 fetching corpus: 150, signal 42139/47170 (executing program)
2022/09/26 11:42:33 fetching corpus: 200, signal 49596/56103 (executing program)
2022/09/26 11:42:33 fetching corpus: 250, signal 55626/63546 (executing program)
2022/09/26 11:42:33 fetching corpus: 300, signal 58365/67764 (executing program)
2022/09/26 11:42:33 fetching corpus: 350, signal 60992/71811 (executing program)
2022/09/26 11:42:33 fetching corpus: 400, signal 63337/75549 (executing program)
2022/09/26 11:42:33 fetching corpus: 450, signal 65908/79454 (executing program)
2022/09/26 11:42:33 fetching corpus: 500, signal 70173/84936 (executing program)
2022/09/26 11:42:34 fetching corpus: 550, signal 74319/90235 (executing program)
2022/09/26 11:42:34 fetching corpus: 600, signal 79346/96197 (executing program)
2022/09/26 11:42:34 fetching corpus: 650, signal 81952/99969 (executing program)
2022/09/26 11:42:34 fetching corpus: 700, signal 84686/103798 (executing program)
2022/09/26 11:42:34 fetching corpus: 750, signal 85891/106255 (executing program)
2022/09/26 11:42:34 fetching corpus: 800, signal 87203/108772 (executing program)
2022/09/26 11:42:34 fetching corpus: 850, signal 89564/112205 (executing program)
2022/09/26 11:42:34 fetching corpus: 900, signal 91022/114826 (executing program)
2022/09/26 11:42:34 fetching corpus: 950, signal 94809/119384 (executing program)
2022/09/26 11:42:35 fetching corpus: 1000, signal 97484/122951 (executing program)
2022/09/26 11:42:35 fetching corpus: 1050, signal 99044/125488 (executing program)
2022/09/26 11:42:35 fetching corpus: 1100, signal 101342/128646 (executing program)
2022/09/26 11:42:35 fetching corpus: 1150, signal 104899/132859 (executing program)
2022/09/26 11:42:35 fetching corpus: 1200, signal 106257/135145 (executing program)
2022/09/26 11:42:35 fetching corpus: 1250, signal 107869/137666 (executing program)
2022/09/26 11:42:35 fetching corpus: 1300, signal 110157/140712 (executing program)
2022/09/26 11:42:35 fetching corpus: 1350, signal 111516/142954 (executing program)
2022/09/26 11:42:35 fetching corpus: 1400, signal 112289/144727 (executing program)
2022/09/26 11:42:36 fetching corpus: 1450, signal 115579/148445 (executing program)
2022/09/26 11:42:36 fetching corpus: 1500, signal 117661/151228 (executing program)
2022/09/26 11:42:36 fetching corpus: 1550, signal 118672/153099 (executing program)
2022/09/26 11:42:36 fetching corpus: 1600, signal 119928/155188 (executing program)
2022/09/26 11:42:36 fetching corpus: 1650, signal 121201/157238 (executing program)
2022/09/26 11:42:36 fetching corpus: 1700, signal 122976/159657 (executing program)
2022/09/26 11:42:36 fetching corpus: 1750, signal 125354/162448 (executing program)
2022/09/26 11:42:36 fetching corpus: 1800, signal 127088/164778 (executing program)
2022/09/26 11:42:36 fetching corpus: 1850, signal 128449/166789 (executing program)
2022/09/26 11:42:37 fetching corpus: 1900, signal 129095/168331 (executing program)
2022/09/26 11:42:37 fetching corpus: 1950, signal 132202/171598 (executing program)
2022/09/26 11:42:37 fetching corpus: 2000, signal 133862/173816 (executing program)
2022/09/26 11:42:37 fetching corpus: 2050, signal 135032/175613 (executing program)
2022/09/26 11:42:37 fetching corpus: 2100, signal 135800/177180 (executing program)
2022/09/26 11:42:37 fetching corpus: 2150, signal 136899/178918 (executing program)
2022/09/26 11:42:37 fetching corpus: 2200, signal 137698/180430 (executing program)
2022/09/26 11:42:37 fetching corpus: 2250, signal 140076/182991 (executing program)
2022/09/26 11:42:37 fetching corpus: 2300, signal 141087/184524 (executing program)
2022/09/26 11:42:38 fetching corpus: 2350, signal 142740/186546 (executing program)
2022/09/26 11:42:38 fetching corpus: 2400, signal 143743/188146 (executing program)
2022/09/26 11:42:38 fetching corpus: 2450, signal 144397/189539 (executing program)
2022/09/26 11:42:38 fetching corpus: 2500, signal 145756/191305 (executing program)
2022/09/26 11:42:38 fetching corpus: 2550, signal 148076/193730 (executing program)
2022/09/26 11:42:38 fetching corpus: 2600, signal 149057/195217 (executing program)
2022/09/26 11:42:38 fetching corpus: 2650, signal 149612/196466 (executing program)
2022/09/26 11:42:38 fetching corpus: 2700, signal 150390/197769 (executing program)
2022/09/26 11:42:39 fetching corpus: 2750, signal 152922/200117 (executing program)
2022/09/26 11:42:39 fetching corpus: 2800, signal 153781/201477 (executing program)
2022/09/26 11:42:39 fetching corpus: 2850, signal 155436/203273 (executing program)
2022/09/26 11:42:39 fetching corpus: 2900, signal 156661/204802 (executing program)
2022/09/26 11:42:39 fetching corpus: 2950, signal 157819/206288 (executing program)
2022/09/26 11:42:39 fetching corpus: 3000, signal 159347/207992 (executing program)
2022/09/26 11:42:39 fetching corpus: 3050, signal 160082/209201 (executing program)
2022/09/26 11:42:39 fetching corpus: 3100, signal 161049/210539 (executing program)
2022/09/26 11:42:39 fetching corpus: 3150, signal 162102/211931 (executing program)
2022/09/26 11:42:40 fetching corpus: 3200, signal 163339/213379 (executing program)
2022/09/26 11:42:40 fetching corpus: 3250, signal 164026/214519 (executing program)
2022/09/26 11:42:40 fetching corpus: 3300, signal 164923/215740 (executing program)
2022/09/26 11:42:40 fetching corpus: 3350, signal 166453/217295 (executing program)
2022/09/26 11:42:40 fetching corpus: 3400, signal 167230/218387 (executing program)
2022/09/26 11:42:40 fetching corpus: 3450, signal 168332/219662 (executing program)
2022/09/26 11:42:40 fetching corpus: 3500, signal 169208/220862 (executing program)
2022/09/26 11:42:40 fetching corpus: 3550, signal 169849/221872 (executing program)
2022/09/26 11:42:41 fetching corpus: 3600, signal 171300/223265 (executing program)
2022/09/26 11:42:41 fetching corpus: 3650, signal 172195/224415 (executing program)
2022/09/26 11:42:41 fetching corpus: 3700, signal 173325/225602 (executing program)
2022/09/26 11:42:41 fetching corpus: 3750, signal 174149/226668 (executing program)
2022/09/26 11:42:41 fetching corpus: 3800, signal 175030/227723 (executing program)
2022/09/26 11:42:41 fetching corpus: 3850, signal 175367/228559 (executing program)
2022/09/26 11:42:41 fetching corpus: 3900, signal 175985/229495 (executing program)
2022/09/26 11:42:41 fetching corpus: 3950, signal 176489/230418 (executing program)
2022/09/26 11:42:41 fetching corpus: 4000, signal 177086/231340 (executing program)
2022/09/26 11:42:42 fetching corpus: 4050, signal 177726/232285 (executing program)
2022/09/26 11:42:42 fetching corpus: 4100, signal 178653/233308 (executing program)
2022/09/26 11:42:42 fetching corpus: 4150, signal 179106/234227 (executing program)
2022/09/26 11:42:42 fetching corpus: 4200, signal 180004/235220 (executing program)
2022/09/26 11:42:42 fetching corpus: 4250, signal 180539/236113 (executing program)
2022/09/26 11:42:42 fetching corpus: 4300, signal 181397/237060 (executing program)
2022/09/26 11:42:42 fetching corpus: 4350, signal 182134/237947 (executing program)
2022/09/26 11:42:42 fetching corpus: 4400, signal 182492/238702 (executing program)
2022/09/26 11:42:43 fetching corpus: 4450, signal 183206/239540 (executing program)
2022/09/26 11:42:43 fetching corpus: 4500, signal 183975/240483 (executing program)
2022/09/26 11:42:43 fetching corpus: 4550, signal 184250/241176 (executing program)
2022/09/26 11:42:43 fetching corpus: 4600, signal 184852/242014 (executing program)
2022/09/26 11:42:43 fetching corpus: 4650, signal 185689/242919 (executing program)
2022/09/26 11:42:43 fetching corpus: 4700, signal 186339/243721 (executing program)
2022/09/26 11:42:43 fetching corpus: 4750, signal 186718/244435 (executing program)
2022/09/26 11:42:43 fetching corpus: 4800, signal 187396/245214 (executing program)
2022/09/26 11:42:43 fetching corpus: 4850, signal 187992/246013 (executing program)
2022/09/26 11:42:44 fetching corpus: 4900, signal 188849/246827 (executing program)
2022/09/26 11:42:44 fetching corpus: 4950, signal 189418/247552 (executing program)
2022/09/26 11:42:44 fetching corpus: 5000, signal 189942/248270 (executing program)
2022/09/26 11:42:44 fetching corpus: 5050, signal 191629/249271 (executing program)
2022/09/26 11:42:44 fetching corpus: 5100, signal 192055/249909 (executing program)
2022/09/26 11:42:45 fetching corpus: 5150, signal 192528/250570 (executing program)
2022/09/26 11:42:45 fetching corpus: 5200, signal 193582/251418 (executing program)
2022/09/26 11:42:45 fetching corpus: 5250, signal 194225/252101 (executing program)
2022/09/26 11:42:45 fetching corpus: 5300, signal 195665/253006 (executing program)
2022/09/26 11:42:45 fetching corpus: 5350, signal 196014/253593 (executing program)
2022/09/26 11:42:45 fetching corpus: 5400, signal 196924/254313 (executing program)
2022/09/26 11:42:45 fetching corpus: 5450, signal 197325/254930 (executing program)
2022/09/26 11:42:45 fetching corpus: 5500, signal 197858/255566 (executing program)
2022/09/26 11:42:46 fetching corpus: 5550, signal 199079/256316 (executing program)
2022/09/26 11:42:46 fetching corpus: 5600, signal 199817/256927 (executing program)
2022/09/26 11:42:46 fetching corpus: 5650, signal 200505/257740 (executing program)
2022/09/26 11:42:46 fetching corpus: 5700, signal 201475/258372 (executing program)
2022/09/26 11:42:46 fetching corpus: 5750, signal 201802/258900 (executing program)
2022/09/26 11:42:46 fetching corpus: 5800, signal 202384/259466 (executing program)
2022/09/26 11:42:46 fetching corpus: 5850, signal 202672/259969 (executing program)
2022/09/26 11:42:46 fetching corpus: 5900, signal 203140/260499 (executing program)
2022/09/26 11:42:47 fetching corpus: 5950, signal 203648/261024 (executing program)
2022/09/26 11:42:47 fetching corpus: 6000, signal 204098/261587 (executing program)
2022/09/26 11:42:47 fetching corpus: 6050, signal 204522/262083 (executing program)
2022/09/26 11:42:47 fetching corpus: 6100, signal 205093/262607 (executing program)
2022/09/26 11:42:47 fetching corpus: 6150, signal 205470/263100 (executing program)
2022/09/26 11:42:47 fetching corpus: 6200, signal 206122/263626 (executing program)
2022/09/26 11:42:47 fetching corpus: 6250, signal 206842/264119 (executing program)
2022/09/26 11:42:47 fetching corpus: 6300, signal 207536/264578 (executing program)
2022/09/26 11:42:48 fetching corpus: 6350, signal 208003/265077 (executing program)
2022/09/26 11:42:48 fetching corpus: 6400, signal 208629/265578 (executing program)
2022/09/26 11:42:48 fetching corpus: 6450, signal 209362/266123 (executing program)
2022/09/26 11:42:48 fetching corpus: 6500, signal 209883/266652 (executing program)
2022/09/26 11:42:48 fetching corpus: 6550, signal 210278/267110 (executing program)
2022/09/26 11:42:48 fetching corpus: 6600, signal 210730/267575 (executing program)
2022/09/26 11:42:48 fetching corpus: 6650, signal 211046/267642 (executing program)
2022/09/26 11:42:48 fetching corpus: 6700, signal 211280/267645 (executing program)
2022/09/26 11:42:48 fetching corpus: 6750, signal 211608/267653 (executing program)
2022/09/26 11:42:49 fetching corpus: 6800, signal 212093/267654 (executing program)
2022/09/26 11:42:49 fetching corpus: 6850, signal 212618/267664 (executing program)
2022/09/26 11:42:49 fetching corpus: 6900, signal 213015/267664 (executing program)
2022/09/26 11:42:49 fetching corpus: 6950, signal 213415/267671 (executing program)
2022/09/26 11:42:49 fetching corpus: 7000, signal 213863/267693 (executing program)
2022/09/26 11:42:49 fetching corpus: 7050, signal 214275/267700 (executing program)
2022/09/26 11:42:49 fetching corpus: 7100, signal 214880/267700 (executing program)
2022/09/26 11:42:49 fetching corpus: 7150, signal 215463/267700 (executing program)
2022/09/26 11:42:49 fetching corpus: 7200, signal 216098/267702 (executing program)
2022/09/26 11:42:50 fetching corpus: 7250, signal 216548/267702 (executing program)
2022/09/26 11:42:50 fetching corpus: 7300, signal 216966/267714 (executing program)
2022/09/26 11:42:50 fetching corpus: 7321, signal 217152/267714 (executing program)
2022/09/26 11:42:50 fetching corpus: 7321, signal 217152/267714 (executing program)
2022/09/26 11:42:52 starting 8 fuzzer processes
11:42:52 executing program 3:
r0 = socket(0xa, 0x800, 0x4)
getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = socket$inet6(0xa, 0x6, 0x18d7)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@private1}, &(0x7f00000000c0)=0x14)
perf_event_open(&(0x7f0000000140)={0x954223ce9bebccad, 0x80, 0x20, 0x4, 0x81, 0x75, 0x0, 0x3, 0x58a0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x4040, 0x100000001, 0x8, 0x9, 0x0, 0x6, 0x3f, 0x0, 0x7, 0x0, 0x81}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8)
sendmmsg$sock(r0, &(0x7f00000025c0)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x4, {0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)="26b96a9232ddd91c8ef7f0a55832d4319beff7137efaa8df879cc99f73ad028d2f6e92d89e51f804abdb7d09baa0fe28eecd2a56fe36b2", 0x37}, {&(0x7f0000000280)="b2ca5cd061281c27ef94cf2cd3965a581fe96cd8e4aa1d802c81b7207fbe17a1ea39cbf3ae901c4c83360773054156d405c44fb820d75d59af32d60843228a399dab7cdd1bac8ded5057ccb31c28e371f55041406b6c421595d871936cce848412646cdefdc79389424c3bfc6735e1c84165fab9ec95ac333217f7b5c39e14dbdceb6d0c84a6a1c01203", 0x8a}, {&(0x7f0000000340)="366eebd0b580d4e69b7ff9bafb35b4917ed25273c75c0133c554b220da3962dba6bfeb433ad3197af418b1cb3e91dfd8686120ac41457f6c4c59", 0x3a}], 0x3}}, {{&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)="f0904e004e1896276f50d7a1f11a4d6c36b54f385db9aa5ebbb39697d0374d1d4957fd3ce1fb5c2fd54209a868eb309a71c1f8a35f231be77f489114b3ce927aeff85926eec8f8476efe8e9e5f132ba8da5b32da7434b8b2fe437e137cb2827edf3952babfb4cc02199a97ebe8cd2f5b350f831ce303b3888fbc63d52d4b903346ba1821c8fd", 0x86}, {&(0x7f0000000500)="0180d6c79d5ed84bb2313a3d3145beb8e67f8f7326a9b3705f23330b4d3e4e93f81497f9fa8be9e04a2f96362bfd7c3977c22ea43c5ad2523a968ab2e8e4187c4e287b333d885998c6bee1449634850d19206d2ba1c12c5cf6f6dd9f7094975462e0705004292ea64dcfc40c00e4402e3a1621ed0ca7922855910e264e392d4ac7acb8e7db4014a5ba5f2bf541d39039206ebe093e0ccbc337", 0x99}, {&(0x7f00000005c0)="2649b580ed556207bf55496f75a12e6f0b3cfacdc1474d261d4b313cf28c68efbc704e238bd89d062727d22f653080e0585b2b25471a1c9650b883dbae8dceca6b4737aca62205", 0x47}, {&(0x7f0000000640)="f52ce1c68229528d6b54129e43c765d7eafc333772e90d5ab1be42305c5fdf15ec04a7e33448b792e9cd6d97da2ee686cbb02f5c4eba69b3fdde37a496305e6074a71eef3f808e8445c298396a6bffbeda", 0x51}, {&(0x7f00000006c0)="8defe55dd3847d994d6741e7d7b06de72377033fb1cc98770bed298eca99043301", 0x21}, {&(0x7f0000000700)="a51979e7a4f23e052d0b59bd8a67e2bcd094bc97c138916924e792e27cf83e17dcf5f1d82bfdc9f7149eacfb32ce3951d0f085fd1aa3b791c1e98b55de24b03d0944ca9f40117c0669cdf7fd25c2680183185b94154e4afa2862ea6abae03b4acddaa529a96ed25e90b1a93ee549", 0x6e}], 0x6, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xf03}}], 0x48}}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)="423df33dfd649b4d2a1ea87e868162ae5dbb062ef70048abf4d7979505f4d9f95057e32bf15a04e55eced2fc41ff00e75c0cf6ed5a8f6126e30ad182721bb2405c4b2148b3dd40adfad9aef34d909edf598422379b5af3e9251d0591a26eed90e852c698f7752d92c88eb02191a4d8b24c6f3ea94b01d97ccb3e70333c98268b98095bcb9bf1758d2e8dc8d7a5304fc9a85390bcc37b4a6f172818a7f5ba5053b81f7c67589b494f3437ae1ab352ce1f180131582c102988a76d997458364a226537cae2d2a9625fc4d49d9657ff55e5f8cbe5197879a07632ae76bac57b7808f1c716b5166586e643b8", 0xea}, {&(0x7f0000000a00)="8868c6bf147374b67952d1c2a85ac06c07b9ebeabbf14b43af80260b3b2d11d12a4bf040a544b39247d310ee588eb3ba804e24f5abe12479293d3b375dc65306531864d1ee5e0a52c4896916deae2a586c25470179a246a6de6b0fb4b2d43dcaa9c8586362fc679aa80922747c020080b8e5b07e9c4c880f85562720970713eb532d", 0x82}, {&(0x7f0000000ac0)="b2a6ade479d575fdd768b37a724649279d243017b209d919f8d9e739765e302f39ba2c1098947c6e0d565ceaf2e80212be907a9d1d4b91a518fe05c93fceed0587be4e304c", 0x45}, {&(0x7f0000000b40)="aeb15a641e669624ee5ae6f6aa2ebba96374e3fe4fc40a0a2a09e800b5bb1d4e3b7f522894117cba0477839d603358aea7b4d1a1716ae11cc5dfac2b0433e176869f855278edc4dab82b057762de26a0cc0bfd754b848a2bcc6e51ad7d782331fe96135443a78555f48fadbbaabd7aa839c9fd885bf34e9f1ab4820adbe7791da62170056774f16b63c3b7692706ce957725aa23e821300eb18603961896f59f394908cd940b96569ff9cb35f633401cfb8881e367426c85ca448857304bfeb82d0d07c44d7d88a370a401b2cad8a447fa1867b361cf524014f7b4913e9614aa9c6bf59979d3aa5177ed976cbe926e2a615ae7fbca4c6d244a59ea6e8742689636ba6cf3592721b39e7f347cc21446e879405532166bd6d5ce3a5cc072756c2cdd9f0c0a89e8cd66d5c5fa5e8de349e626e0b0a2f13d640d76c8f2cd0c785b71569c6f22f4298a5e831d7bf67a386a90913af1547291eef533e53c2f000a4cc01525424898b1bc550d9e18b30c414cc0c75596683a3b736b6e6d084d31dc6cf162fe4576914cbb6454301909f01f9fdf5128aad8cc268965e0193c0a3beaaf2956e42c640ed2dc2259f53684bc23d123b10b7354bed4b1db0a32419f46e48cced0b509cf075dee4da9446ec69368a8c50b336120291f6ce6aec2688a1be0b6527252848cfb6349f587bbd61fa0f248e9e86715bdf2dc35a6b91295a18e320f712ae213ccac48e8baac59de4195a8da6fa9210e99231a6cd35a4c63ae5238121e502dbbc8795f9273fafe510fca4c8f6505c4d88368b917072002d693f30952563d83cba28bf350239df06510189d1d746f5c66aff0e12f111dd24ec7aeb2911941eb9e10bb08b6dc5019dce65ebcb4af34f823910ca3bbe65ef59fcd6f2a8f88401a7d2a7ab6f577e2f10a69808a8b13a634a0b6e072688044015b1d3dd295267ed77b23c591014190e6919fe9628b7b35545a78e899fda990aaa2b3fce055cfb9c460b7fb442aa56bb7eeeb5dc18dc598ce3d64c356fc08022c4e49ad0c854fe77b39c8941a8acfa9662c9091ea762e781d756dae2b71fa7c8a51eeb596928232f135a9c98833d5a085488cd4cf4f0bfaacc67a0f18ceb3fe35b10f8d9460087db1e55c17abbddd785bfe2e86f6800c36b8e01d97cca0a76bae908fa5def62bd1fb5d5257130b8ff4b86e94266134b4b1257e96eff8189a7d885fed538134532edc4fc0d71295cd90514f10dcf49a0b59971eb47c91de8416adda4f5ccae8914f4103ac79da0a91ac59532db1b810b569f0bc6e67dfc46c40d5bf17e1dcfbe1b0155794df6ad1ec9ec0f7d656a7622660702bedb4b3863527cd1692a93522a0a1779df32aa4ef0b48a85eaff449a11c254f2d9af26eaf981374051fc8c9b2f0c4de44cfb07fba50391c363e684decd777915405ef1e7f6ae9e670687a4013cd13a581843f8b4dcaf0b20f0e1187b9438da645f47e7a643e07e2248e70619e1fc0037cced7fe6677f76cfb4478365a6b3bded10f7b83926ba0e0e61a0e3d49f25ebb45db80e1c2276341cd3181edc7df92e6b9502f8dbac5a18a59fdc736d35f96c4f22adfd7b3c5f45cc9f4952ef1de743d7673da43e6f01af4ffa149ee12ea38155f97140f04d88367bca49beb30ee5528c56c6691e12a9382ed4637030f4e3934934762b702615da5e5d8b5fe506b3e17c547760e7beebfed87a688e8c0a312ff81e6f66a90d74e03b3744e5de55799c409aa97e58b4e01e775cdd984d1e136a379a751e8e6928a1edd85aa53dd5924649424411900ff52953a7310fe736aaef3b51997f06010517b855aca05bc49216e1d6a1e3d34dd7592660bef66577308ed5d4038a920cff5f5cd8250fe2637edfe683f24d40768a345b6a851fd8542e775a6662906533cd2cc717804846bc10fd428f306f2db3fb2b53083c8136ffad0c79082d863625b4ae9162dcc1741cd0b5d3e0143ad8bb1faa66b5788f5366e8f5a998d1f97215e4b18228598c9fb49a21832f764b5b7708614f66283921601e9b37b1c7f7220d6e2011713a86bb7c073b7cb82407b527fe9bc923859e9527f478ed79c5a0cdc0b400efd649a22f31a3a30b4fe77d4efa68429520f3e37ee34999c718284a17637a855152686ea3a3ad2f212e187155526674935bf62a5358e6e7bf9748f12069fbf4a6b911a7324d4dbd9e069cd1d2587dd670d2e90eda65ec0bf61470f0e497c86d3415a5590837cc2358850afe8413343fa15954b03eeeb1532cd19bfdf244085da841ff53dd5fdd33b7b9585a9713c224334ecb918527f669159687f53bdcbf1c1c4420a8157fda115bb0ffc3ca1693d6f78878e6a3702d1882b1600aa25821ef5ebe48de360714c61691511b203c13f323330c2e1bb5a04e8f4b3d826dc1ab25445784f4b71a8e7a303aaa93938c1603cffdf497bcb4e8465e2aa5af34047dbb3b028674bc8c7bdbd01b1e040fcf7ff3faf4653ad0d2b2f9ac8c90d7cac720e41ceeefa6f25445d5e08d81466cc09ba959c4c2a9638736f653a74998a77b2cc4d21eabdb31073a534c370830b01c58c47f0f479db1636d35cc0d7d45ef5748b91db5c8c76454023ca69f82d9a5c4a64fca11bdf2672b91f3cddd939967acc512080bfe8295c1350a9570f33bfde77d5bf4d951d69a883f088551286e5bac2b7a89dfff1766273ed84fc77a6b331325e58cdb3a961f55febfe56f4b81c0c975f0af1c985b5a225003ac74fea0713c9c7d49e3ce2132548e7f2c8931c64eed58eb0aa38b52ea3cb2e2ddbfba6b4658fd0e2d70d8cbf4542707725dc0e0c9583ab7769cbf68b49d7abc3672658e5a53aed470b391d9dba5822574b2149019e480f22c5480f4ff7b04462922c7ec4ec338604a3518011700ff7d87b884b343caf0bd2a845b8e156ac2a3ae87aefec09606e5f867bd4103258017cd01e7c601741d38aac8b176cf65167885a37abc3047a9edea11a937aabdedc944ded9aa3d204a079222806196044ac321e64ef8ebce11587dfe3651db8cb8f491ee622395e9ec141506808423e845dd0f22330ab6d9729c5d72eec98d423324fcc0b85ef30b806a0b222432cdeb794734f06dcf9504f9274a03dcd73a1b757ce53862e0f4798a34cf4947ab710f98362874d3d8da01019c39c645007ae095d87955b4f638057519424e18fe3bde6582c872219b075d2f224fef8362e8d1a5fd6da67d07d67c330d82b991d7e0f06b98b6c5cd34dc2de7a43528729cba9fb9839166b535bde9e87cc7cf39cf2ba58b2fb8325c283f59deb0ab2f2c08330db110de5426e2f33e5141f87edc79cd7ef16032eb05e7957178183d00038249826ec2f5168b3583612bc6ccc9c89b9bf083de56d615466ad8d993cc54dbe3e8ccfa9e7a6b8ee6640892e37729d9676905dff53b9a1f123feeae6b135c9441f7912e01da8c7812520f829042163a431d8f7ed9b48f9a6e23a94b4a7bb9249b5e6fef4714d889c56c5a270123489672986f160aedd86460d861d58f0e111fe233a0082d8740d32f74f58b8b6c28edab37b9b8e59ff3c0e8096deaf1f47ce428443a8e5ae203f3f2547d5dce4ed83aed8538e542726c46ee3462f98cf150dac42c6f6f9811f88c0c123508e257b08b6cc97d7297434bc1fb9eaaf815eda09b3e2342ad0d8d891315707a11455d6a97e0a5adb9f79333d28136a202d1f59a58a81f4f946612477b1fdc1663946cbe04f2fd5dd887e5ccf2ca08bbd1760bd4dadf9c8b7e0b96eb9959016b96042827d2f14ebb70a916296a4f8c7afe8b5b346adc8ce92dad07136010965d274923c4d363a70e09a3b54538b86a0bfd7ca1eb5de4f0fb58c3a89e29d78e7db0ed7cfc1abaaf9933013d63c165838db2a4ff599a61ff5153a7e9500c0a4ab475fa858e9543ca797d175fca4b9a08e791e8fe5ae26afd6aeeb5a64852b3e389c7e62418bfa213cd81b34b4fc399074d94a7d22baf74f8faa5ca8ae54d4b67ce97b8c638fc4bd3c495981cf5c1661d23c132b89cc1064d6f45fbfcf831f9f113b43a63f6aec70c98c5757faf142a729fac5134d0dd70b25bab279e004ba8fd79bf959b876239988ae85b3bef8c474db3caa8bcef5acf82b6d169fe9af2a0b3f128a94535a3f68527ab264de303d8b2e01c3123542015ff0fcc5efd4d0c6d7dedbce70a27be385b8e4950880cfb05820e65545927571cf615d10eba408acc2985c2ba366a86e9d574d9bf99bdd494a068117d3248e00387aa37bd6cbc4a257e267139ced8b10377df568f4208723be8f91f895729d08cd4e88b5793c7dcada99b87e40f389dfffa6c34a33530b6866d3ed443af58b41e11f314a68bc5053fe32e4ec7e0689e47d40f059392ff4625bd4d4d95c9e62b2ffbebe22cd8f025366ba8af3d6b9647f8b00644e5ffbde04b67dc15a8b7482ef2f18ae3b77963a16897c06deb396fce62a997ae1d83e4fe800bf6f6a0e6765b9e9908230a43c7eb9e7c56961259485c244d055e14b5b096915bac170649d073c739322538af60f87442c43579abbb34d5c3a8f76f82cfce431f80bfb27152cfcd87efe45ba8032cc71bf592d2026e2a446ace9dc6cbad0a9377fb0bce8f114a13654380609b3306e600466c39a5153a2ebef8435dd6d6fbc6906ca1cc6e39b54deca57c6d92b21908991032435e2a8d779aee9c30acdc7036b9970829df5d1d9efb533fdd315f1834f41e1c414fca0353a754f4420a4d3a98cda5c34e218aca9da937b6fee3aef990da2337c3246f29f5a978f331f7249a2e2dfd81ad884e0135539ebbeb3e4271c3d53fc249c166fa32b0734e2ef74cfca8b63c783006d8d4b76d5f5228f2d120564e93afcce9e2c22f533e903ff0152e08c23d895ebf1a4e998382f14b1cf7ba87a50fd67b0cf89780500ea794d7c38b7b13ef256a4a793be7216ed0856fde68cbcccf165b49e39c6858603b203b244a6a8ad69e5fb15d3dad0b4c388c61ce5dbe84a0a441043307cf3b1079de539f0bb9c61c779f8dc52b292e8b47409ae33469a45d43bbe41c6200cc35f6046a9db79b070e649b7aa547838d6bed46812798a9cc7c514e945646e313d502d98b15f3c8ad059b5e8a2fdd9afdef0260fe4472a8bf3edf9216d29e426d0fc7090755dae289f9bc8efcf4ebfeee24c09709c3d243b9a5d180d6264e0b919831e12be4c8df02a983619275751c25d519d9f40c7cefd6f4f468a8a520b8c662e2f51848f6eda39c3979a31502be1b356b6930155b89b1716af4f4f712feafd878e108fd331263cab89dc33beb991b43b61108892c134b81da5eda18dbd58ecf7c547a6e5e64b2c37ffcc1957235607b6a8ee826c2c6b120f8e7980d817aa26960ee4cf85fa96a9bb6fe1187fa30f16049293f5c134e8e0b86234ab2aaeed225eada00692643ea640fc51eb3e9e9e0b0919e079764c39099d0770994f9a2422b32b8f38bcb1094c84ad05fde79bc36a435ae0c820bf40f194f3063c45e9c83313cd937fa1b0305610b4dcbcc207ae7e96d69bb105e73f2cc4d0aa98a7c76ed7a656d738a0a8beac1dfa0edf3b5495ec16573404429ccfd2eeac33ba5d92c612a2724272ea53a859a4315f36332d9f08d61d69401d9d100eb5f5dd8dd0abc270e77529dca437987331ef333062c769d5bc3a7337ac11852260479f4bd6eac1c5972bd5df521e24fb3b1d137bed03934e0e87f35aac49cf8628069df83c4c573f0bb6aa4163f85044a7fa801d6a7050d93b47dd5f78004a94116c3e6b9085a3f98f520ecbac7372da365d0ac76a9cc5da2a", 0x1000}], 0x4}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001b80)="0bf59a8ab1c425a2be0dcb251f1efaa2ee981d43731f4fe8ab79477414a4fc149195f13579da4cca072894d084bd2108", 0x30}, {&(0x7f0000001bc0)="59eed8d27da71d7bc6c53bf60592cef6a2dccfca0ededc7f762bb65725767b7bfe10e09e2cab0e6851c23d7083c00640734e6c91e619af099340cc6d2887d74f30930c71b638b156899c75479652c59f881b59fd9b786693c7ef463cacd6a5c52c4dbe8d0e7a57126701e0d2f68c3f5198101ce0edf4cff8bfc59c3c1d597a6ff79d99471362366b9dae4f8e7341c5a865867a6ac17e600c82c88682931ec337ee231d00adf69fb8fffafe0f67f3f64af24d546dd7684bd6b1909e3df61ded9ffc25213adf5ba0daa08de02b8f7f23ff", 0xd0}, {&(0x7f0000001cc0)="88bda0725b906ddd7b682fd70ef1ae08ccdc4bad9037528b300a316819f55a1e46e5f68f48cd6eab4eb78372ad70d989f1515c9a1d55046c9dda6a9f39fa08dcfa312b48230e2b04e23601e3ba35417bdbd427bf56f6c364bff42ce614ca99340251583a462502cc8af530c603270e11d6d440fa78295380bd011c8e1395195c408484cc31f73acdcc574a2f82618fcad89371141899af2e73007d813d6df4bb953364528fb30fbf8ceff09b1e8ceca609f64528d33a5c946e2aca8c34cc8a63ace9", 0xc2}, {&(0x7f0000001dc0)}], 0x4}}, {{&(0x7f0000001e40)=@l2tp6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x4}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001ec0)="8ee723207c5d36927240562726adb9b72a2a11db8383c215c19e3ebd3975e6e6e7d10a307f2dbfb2dc67ad929eec9b1811974593cc07d93d64a46ecdd04b3e0548d793f5eef32fa2d0d804b2868465aaf8812cd4efc0ceb93f6023c1de3ef67d8281a46b66cac97746d3387467a397cdb725e6d6cfb55d5c35ed2b9c6e6cf9671e99e1f3e57615be07ae8d492988eae91caeca9faf5bc9ffe01b8a21fb7d025bdcdefdd4cafce67488278eece7026debd9e8a2ff93f63330d25e2640d15f315ad8b770f18b434f0653e97cf8804d4d92e84141cda351f080424df6310e6cf97d8d23a64ebc13", 0xe6}, {&(0x7f0000001fc0)="f60219bdc7d9fb19e49bdc2e45cb38edfcf84428183590c1fba872af90705c856bdd4e289dc527f5093e35877d3d0988ff80a7c037c999a41ef90a9b481ffe331a18adb4d70f2df94a0875cd2d7c4d261d2d56f8256606da8ff85116948e5cd08267a6bcf4693eb33e764bf4e8f23f09c4ce4fa4d4d8d38160cc0385805f0baf5d4ec2bd0360305cdd217e0bf3aaf407c6f7370cec66208b579742663d93d9c565c53a8e1c74c5446946712b370146c83817a73f83a630ce133e136d1d", 0xbd}], 0x2, &(0x7f00000020c0)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xa04b}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x78}}, {{&(0x7f0000002140)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x80, &(0x7f0000002240)=[{&(0x7f00000021c0)="13fa581c7ecf52cd1d1e770f94c4cad98415afd723197f9db1ccd36812988f372b7ba6b8e30e23320fc00b5fbee35d02ed1bbb1c595b5a5a5bcde9973ccaf9799a9e34acddd390e947cc45f7dd8e29fda74c7a3e3abb177eefb1cbbe84267fcbbe2a328b4be948b977997c366d2295597eb8ad", 0x73}], 0x1, &(0x7f0000002280)=[@timestamping={{0x14, 0x1, 0x25, 0x1f}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @mark={{0x14, 0x1, 0x24, 0xe10}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002300)="38a4e94802660ea0abcba5875cb5599623a80577b8d0eb644a407bf77d34329686cc22bc9dd75f35655bd9d21ecdeb9d2ba52e9fb1fbe72dd43bd74679da246c778952897450a4dfe5f346b05786672e6b7ebe958d03db007b6c1b3103926fb04d6f7bf9a510f45c3cfd0dafbd89caf919ac039effafdf2be4bca5fd9500950f775a785aae50a2e8", 0x88}, {&(0x7f00000023c0)="1dec59c66c181cc2fd01229d44c30798e5f7b678fddad713bcc594249a045a6512cdd9fa6e6809af419d9c28fe1fd9187e17efaaa90b2d2a6af7363804e04cc09b842c176513533a54a0b35a1df797f67122770fe743681b0ce4f02c272aed92f28e73a8a656737dd001640de670e53504640006ac2cc6f82f22f79dd798a647c93bc19b", 0x84}], 0x2, &(0x7f00000024c0)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x2be6}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xe0d}}], 0xf0}}], 0x7, 0x4)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000002780)={0x2, 0x7, @status={[0x0, 0x1ff, 0x3, 0x5, 0x100000001, 0xe5]}, [0x800, 0x6f, 0x8, 0x3, 0x2, 0x833d, 0x401, 0x7, 0x20, 0x2, 0x1, 0x189a, 0x7fffffff, 0x3, 0x7, 0x401, 0x7fffffff, 0xffffffffffffff57, 0x4cc, 0xfffffffffffffff9, 0x8e0a, 0x100, 0xda0b, 0x62, 0x8001, 0x6, 0x7fffffff, 0x1, 0x10001, 0x10001, 0x7ff, 0x800, 0xf5e, 0x100000000, 0x1f, 0x7fffffff, 0x101, 0x8, 0x3ff, 0x8, 0x7, 0x7fffffff, 0x1, 0x5, 0x9, 0x1, 0x4, 0x6, 0x0, 0x6, 0xe, 0x2, 0x1ff, 0x7, 0xfffffffffffff000, 0x9, 0x9c7d, 0x3f, 0x3ff, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffcdc, 0x20]})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000031c0)={'netpci0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000003200)={0x14})
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000003240))
r2 = openat(0xffffffffffffffff, &(0x7f0000003280)='./file0\x00', 0x8000, 0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000032c0)='net/sctp\x00')
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000003300)={0x2c, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x81}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x48, {0x0, 0x10, 0x4, 0x7, [0x4, 0x1, 0x6, 0x1, 0xc1, 0x6, 0x80000000, 0x8537]}}]}, 0x58)
ioctl$TUNSETOWNER(r3, 0x400454cc, 0xee01)
creat(&(0x7f0000003380)='./file0\x00', 0x0)
ioctl$FIONCLEX(r2, 0x5450)
socket$inet6(0xa, 0x6, 0x2)
recvfrom(r1, &(0x7f00000033c0)=""/38, 0x26, 0x80e0, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x6)
writev(r4, &(0x7f00000036c0)=[{&(0x7f0000003400)="aa6378d239a7b4f4f06ba2b107e9d25169de379fc43c9903541ea860d40f5b8371f59f772f717863fc4c8f3b34ac72e1c70672869a6d018e23241df3072b6e336501aca515028218401b87c3dea58559d502e0f71cec25be6f166ebe025deb1d1d39534b98fd2b5e5cbb4d0535b262a2cb995f48c8afbf2461e31b1fb9848819786f469331c4e1de626dd374c1269b4922429f34849aeb59f32bdc20814effaae0c29ad051db14e86552aa784578fc4e2c0771d2ef8497d8fb30932a33d850df679e9e9ada53bc5c20c01c9266aaef59a828fde48ec16454f9ed507b6ffa0a1d", 0xe0}, {&(0x7f0000003500)="54c2baa3277922154f4bb4f0a72366e2d497bb4b9be8b16f186d7616bda4d42dd4019e36b026fcde219d786057e86cd9b1d98b68b2292ac51b939516eddd7cc216d12755b7f376b1d04bb86de831fb475010c77c6fbf2336edd0b816ff6a214ad4cca4454cc80db2a42e6988ac1810cf87a285101aaa3e00c3383888848e43", 0x7f}, {&(0x7f0000003580)="602244ad96539009cfeb9e00580db7da4e90175afa853def2c20d593380eb1a4197f554f290144c864ec0c8e092f9801d5f371f01c0ab2bde38fe337c7df5dd437d97b1e643a836b79f4f8be38aa5f76c666e040f0f9f8173975be84179c2b1367354c761c4add5942b7370c900b7fad4280b969b1722c1f15c848975af0ef359365f899b6bb609d1167d51efd", 0x8d}, {&(0x7f0000003640)="4424c32cf9ca060634f8c66c9c4e9becd6fa61ec8f012f7a51d63d1803e1fada1a6a0658fb13b28a9d00cc3e57c31f9a", 0x30}, {&(0x7f0000003680)="ffd4b3dd0890f5e15258b5eb37409ab4b7", 0x11}], 0x5)

11:42:52 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r0=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20040814)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=@srh={0x2b, 0xe, 0x4, 0x7, 0x2, 0x10, 0x8, [@private1, @remote, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x78)
sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="09d200f22b63e41470e3390e2d5f74e49bc22d28c936585c3cf99031cb0fd087316e92d282aa69ad6cced32a01665c64b7f766051b7932aa26b1c9a20a1742dd3a59c9e85160448c52a73efb08e36ae12ba3f2bbcab073d5043eea93734001ec3855a9b97c37050e124933398b9d2d9911b607706760970f66e041e59858b12f54049c5ec8f9f6e2658bff3701f38c1c50ff7c139ae39073164896f1c37e68ded5e839cb094e45ad889566ddf56b1395c2c05fe28d8409eb799b93321cd211764bfea56170ccbae7a0e386e0ab056a347869e5b8eb21", 0xd6}, {&(0x7f0000000380)="b5936b3062ba6e275a1eba414270c23cee5a31ec61022da0377e95923e81554a12d6945090332f4eb36e3b9051433b67a77e9e284bfe722d35e3cf8bda6236fda71267b2174a8927e6f102dc816d6c48", 0x50}, {&(0x7f0000000400)="e22278600cd942466b28ed91def8e9fde1f8ac36ec2e2ac5f94bd6cc561f414665a0aa", 0x23}, {&(0x7f0000000440)="b77c17cd807ee169a69bcab470548002108665a7a72af21ea96f145275116ec617d03104ab3c938cbb7cd0db8f7b0b30e2e06cd34d2e233d0029477f9cf368db66c74bf42cbb8d9f1820415dc83c9e3e9cba35e7dfdea628f02eac820d61c327bfd0bcdc9ada9473bf5b8289a02b2c817b24a73b56c36ec744a260a59cfbbe0be5e3830d5eefed4288782e6b94752097097c17393c52e15a26cfe55e91b59677ba20", 0xa2}, {&(0x7f0000000500)="97e87ff8345648871f2bb8193be9df11af9ecae38e4c1c434ab015c8f2169e545330452c727854106144d5ea39ce3808edbfc86003d9cf2c40b100e1f6b50f83b259107745a7718829ee6f24a03214ffe4c03b757203f969210bcb35bdf9035dc46bcc668ecc6476b376de94e3e0fce1f0", 0x71}, {&(0x7f0000000580)="d4fa3e980c16ae2adabdbd03e3238350747ee4d9a78000999a7b9bb1170a66b7bce32c4046737236fe5a9f7d74e0eddf0a418a5cd74c31c4b8288f807f63cb9a2003ab3ef3df91f9666aa9bde31c90bb646eae6f46b66ce13c07c2eaac23c7ac4bf8b022b1e233f2e2853e4bbda4afacddfa12d5f0005a6a", 0x78}, {&(0x7f0000000600)="f0c37bed798a6cba88e4759caaa45fa7ac529b774ce94e4d3d669dcf42c46fc3a3f92c4e5cee9f6ade49e08b9ba7c0f3ca8b4b32fd00615d928f49557739bfd086f436b726d877e28889ca2a8dd65bb4e758a253349166943d549acfba233826d1c0a0b44264a7aa9f29606c04b6dfb46a49f797d0c6023628b8", 0x7a}], 0x7, &(0x7f0000000700)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x2e, 0xc, 0x0, 0x8, 0x0, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @private2, @mcast2, @mcast2]}}}, @hoplimit_2292={{0x14}}], 0x90}}, {{&(0x7f00000007c0)={0xa, 0x4e21, 0xdfdf, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000800)="eb2e3a7a04aedc86a80d62e9096665d47300bff6f0175f0e11d3b002c6ffcfb6e4bfdd0cce3d1240b2fe7d39de447c27872b2de2c4135fb5d36c6efaa5d9f35c97053dcc6722b5a209357d63930dbbe735f726231157e08c3e85537a8ba5f86c5baf018e5c9fffa0099d386ceca9df7840950acb5baf42e217b638528fd45da5fd59519b2e39fa461dc07437bf3054430c58a820d4a6a40f9706c8b3c82219f0f849d3cb55f03818aabdb9", 0xab}, {&(0x7f00000008c0)="99ac2fcacae17aa8ee96f1630814da251ce24680d8cd9c6c1c64638f700b985ce3e3ea2c1a79d3937c58c630f2a8f9785cf9188679bfd3ff6616dfdc835d9cd84ea41f203355a5637a19c24dedcc856667921eb06ef7aa5b3033a8f4d69ffab000a9229ea5180ee78ed867986f7d61dd61a36c80166d20cad51c12f5f733533b7eb4908b3fdea569b8aef2ca09e4f19b27a967ce9f9f18c26dfe33474d5bdab01a7db96e526f90204a4523899848feb411672629d7b81d78c1894922a2e436ef14a6dba1666d6f99a6c28bb6c1001937a2909af2773ebe3e35802dd45be8fe6dce707aee59ab06db16", 0xe9}], 0x2, &(0x7f0000000a00)=[@dstopts={{0x38, 0x29, 0x37, {0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0xc, 0xe, 0x1, 0x0, 0x0, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @mcast2, @private1, @mcast2, @local]}}}], 0xc0}}], 0x2, 0x90)
sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000001140)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001100)={&(0x7f0000000b80)={0x57c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1f}, @ETHTOOL_A_EEE_MODES_OURS={0x558, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x71, 0x5, "60bf0b8a8acb7fc688ffc62fa6d10b4731e4ff8bc9a76b2c721e1e2726ff465e1a8ad986d276f9760d0326aa2c21db83d9fd488a50b70c93433cd7480d9e6a06da6f8f1f5b05acf3e8561e6ca6f2538572a2ae63888567e51fc7d07c86d35cf92569e305a6f966b9ae35ab82d9"}, @ETHTOOL_A_BITSET_MASK={0x48, 0x5, "965e2abbc7d43c511df308ed9ccf00c1f1c96575b8bac1cdbc7d20aab344cf6e6c31d206f215df9cab0445d20f652de5f81ecd172eee44420dba6999f510d5b17c00c999"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xf8\xdb\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "bb10d303443b403154f282cdabdddffb732c7278d37eb4522ae8c140cef59480d2ed595e43f2f87671d948d24dda5ea73622ad478f9aaecc8634aa7ca0aa3c38286e64a71db02853b040c631fa3232a485e8c3eaf77f08bf26c20aa96af0b6d9e7eedf45068274c88cd444ccb53b4cbc4f4d2d663e551226a65a035bb7e3216f3a19cc250ea9cf46fab34eecabcc4cd845ed63895e0274ed22f300"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "55bda6026049b77121789c7166b9a4e0f7e3de06ff77d9b3ad92a9befecb850c50fdc7356b8b244c5a3c973e340c5e862d2aa988ca0be11c77bd1f46b8870a54261ce5aaa60b053a3d1aa67aaede319147"}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "05b21eb347e0b743904f10fa3ac16c7ec8638f4d252038442ece23f343be754355b32eee3f34519e5e066fb82fadffc79b72e7cdf5094737ca85d7072ecb6ba775d62466f0554a0348c297095cf8a174d5cd6c746a67202fc0ed7f7fd5a07ab7066bf7e02b2913c8b51fb647622e1ed1d5ee7ab9cbf1bf09acd15f6fadc2301387c688c3671a4e385cc9867125946592e47e6415156d00dd62d219d2f9a6da7b6b6dea0eb8a432d071d09aed1ca1cd1e53e28288e517af52805044e8035ee52be4560dbfbaf6a4bf81abb39a412e2a6970e07945105fc2b9f4d5a05d2ae589f98cc8e52a2e46afc1f1c6d300c9189389856e83"}, @ETHTOOL_A_BITSET_MASK={0x9a, 0x5, "1729f166baac000ab8905938204876fae57405823a5bfb78ab4a7252ab1183675b3df235a601327723ca7c4ce53d5f9469c6cda31f2ef8171ddb7acf5735f248a101b23baf8057c3791d1a25533d959f3e797225286a6417f3728244da259024a2b7c117b1043c2fe6a070b9a6a85283b36f4c2ab27f762b32dd6fb3a9dd66f29ee0f71657c39ea4c347d9fcbee9357b861932bc8820"}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x34}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#[([\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}]}, 0x57c}, 0x1, 0x0, 0x0, 0x1}, 0x24044880)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000001180)={{0x1, 0x1, 0x18, <r4=>r1, {0x4, 0x1f}}, './file0\x00'})
fchmod(r4, 0x7c)
ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f00000011c0))
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001200), 0x2422c0, 0x0)
ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000001240)={0x9, 0x2, 0x1})
pipe(&(0x7f0000001280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
accept4$inet(r6, &(0x7f00000012c0)={0x2, 0x0, @local}, &(0x7f0000001300)=0x10, 0xc00)
r7 = openat(r5, &(0x7f0000001340)='./file0\x00', 0x200000, 0x48)
ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f00000013c0)={0x11, 0xd, &(0x7f0000001380)="f205d3f074d9f890dd6e1492c0"})
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000001400)={@private0}, &(0x7f0000001440)=0x14)
syz_io_uring_complete(0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000001640)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x10c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc233}, {0x6, 0x11, 0x92}, {0x8, 0x13, 0x6c}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x60}, {0x8, 0x13, 0x81}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7ff}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd8}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x9}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40040}, 0x8080)
syz_io_uring_complete(0x0)

11:42:52 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x1c]}, 0x8)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x1)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffff8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', <r4=>0x0, 0x4, 0x81, 0x2, 0x4, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x7fffffff, 0x5}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8804800}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000801)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r5=>r2, {0x6}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bond_slave_1\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000006c0)={r6, 0x1, 0x6, @remote}, 0x10)
mknodat$loop(r5, &(0x7f0000000700)='./file0\x00', 0x1, 0x1)
socket$packet(0x11, 0x2, 0x300)
r7 = openat(r5, &(0x7f0000000740)='./file0\x00', 0x6080, 0x89)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0x3f, 0x800}}, './file0/file0\x00'})
setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f00000007c0)={0x8, [0x38, 0xc521], 0x7}, 0x10)
syz_open_dev$vcsn(&(0x7f0000000800), 0x100, 0x319ac0)
ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000c80)={{'\x00', 0x1}, {}, 0x182, 0x0, 0x0, &(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', &(0x7f00000008c0)="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", 0x143, 0x0, &(0x7f0000000a40)={0x2, 0x106, {0x1, 0xc, 0x13, "6bd01666c5421977e8a5a51a8da8e37e0317dc", 0xe6, "3ff598667b0f1ea380c4f252bb0aa9edf273620cff75a01c79dd7501aaf34d7f6cb91bfac186f68ed5b00d4ba5b6e58597f4562e2fb65848353f1dfc1951865b01a31d32efef5b81c53ac686366aab6560760f4c1feb26533b8c13d5d90764a8e398f026e889e26c5b29e1cbd7633d513ac40aef7cda97809a485a2fd138f12341e6547dd57fe66e104cb78c5ceca700f495799f0e717189441d52b586b1190a0edb3e989b80d5f962d7fce5356b25d0d4960736a98ca1244ce42cf0b1e34610be677358077949bc656efec35d4ef76fc93d60666b03b66f87ef16c33b22f9b94916e5407900"}, 0xfa, "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"}, 0x20c})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xbc, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3180}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3286}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x18090}, 0x80)

11:42:52 executing program 1:
r0 = syz_io_uring_complete(0x0)
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x170, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x761}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfad8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa2800000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xabe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000080}, 0x48040)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x79}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010)
r3 = syz_open_dev$vcsn(&(0x7f0000000440), 0x7, 0x600c1)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0)
sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8041}, 0x20000010)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000d80)={&(0x7f00000005c0), 0xc, &(0x7f0000000d40)={&(0x7f0000000600)={0x724, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x62, 0x3, "6b65731e42ba0c5324f3e106591183f6b381acd70a0326232e84f1544e33582338e0a28cbd72ca844efa1929d0bd1dd7cee6d14ccbc6be8c4dba01839af40b8e256bfc19d8a14852c3eb7d60fdbfd76a45d1bc22704f975a89996d795646"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "dc00f4f4b89da51b26da81f73dde4230647d2ef85ca0acd46b1f6674051a"}}, @TIPC_NLA_NODE_ID={0xfc, 0x3, "2117e16b7f6ca1c700bc021087e6e1d926599de8d29d7cc06672b1709a05a8221fc7c3e685235d62d7a9a21ee51381569729b84dedc7c30777d7a95e581ccbd83afb49b7db7761d53a0c0b65e3b847ba3f038e0e24ec7209532f142d3132b8b8329995e782cbf555e75da5eb0f85b6f8ca9e3185f9b46058d856eb9423fa3aea0941962c65ae1ed686697bbd14be3e3e9a238e0d36ba526c2323dfe7c3b9f84c7dd37ca8a83646b08bf1b7a4ca9c1536e72c7586eb5e7a21f1a7d88be76606cc1d0d4a240a00bfa67396dd6e7cc7aa0bd6f2369969e3059a376e94d1d0ec8465b060021654eba11726d8d218e4cc8acb15ca654154b1d82b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe2}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "01ead41313f779183b408dd3f969676372a85bb6ebc58d0f93c5defc2664"}}, @TIPC_NLA_NODE_ID={0x12, 0x3, "31a6fc1d4ef6141cebf424201898"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1e0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2a, 0x3, "53129e5892787f14d25714c62120983bdba7a82b28db7197878f99f2d52aa49cf629772e0672"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "387c8e0ee3cc1be8bd92031b261c90ae0ee0cfc2"}}, @TIPC_NLA_NODE_ID={0x82, 0x3, "88aea609b194db780dd61cde0992cd79f301b5cd50f1e871c11a96a7d4fc31aa9f7e52820e57f30ddcf90cfc5476333edef519a2d1fa5ac369322081cc0482766532c5b650e9c2a1ba8b113003b9901d64b1714171baf5ff7175bafe935a3a8ccb44a4e44a9c9c33c7a4f5e68782192298a977567eb0ec415e06f403a689"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a4b68cd7b20903e44f593fe4553ccb1e10d87329"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "3975d0961428d266507d151b62b6b2f7b3ad38fe3530e8f1f1a549761e742a80c3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "15f03a148b956fd78af04916dfdebad325389b1a09af809a7af3cf7be9cad9b80abd"}}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_MEDIA={0x128, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66f0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6aad0f62}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffb637}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2a7}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}}}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0xd2, 0x3, "152b1d01d31b04fd0ba763e322731003b1a720e7b14b35ae150950a866b4d028bb0d2574fc00e6b8da874760912628bc43b42e730b354877d76262173ed1d7f39ae4ac13f54b75dc7b92844cb35c6a21225543c2bc84e9e3372f47cb4d8dcd55473aa6892fb57549e736a5111d905d993b116bb00d92f449a389d7c48ba793fc36bff5bf43ede369d28e49514501018d735420a6701b9266b936c46d864b60ae05c28011f844473f290cd869f186f09a00e041fadaab805b8afa2940a912aa7757ae6c2a4e27da870621b375cb70"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x43, 0x3, "91e5cdc2853b5f2c80f39d9f89c24becf3f587df9763f90d5eeeb3759db269d299fdd92d8c956a394087b00f60661157cad79c0ae43165084d4bf0da6c86e8"}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x724}, 0x1, 0x0, 0x0, 0x804}, 0x40080)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e80)='net/fib_trie\x00')
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20004800)
sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40010)
ioctl$CDROMREADAUDIO(r5, 0x530e, &(0x7f0000001140)={@lba=0x401, 0x3, 0x44, &(0x7f00000010c0)=""/68})
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001180), 0x1c200, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001200)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000001480)={&(0x7f00000011c0), 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1d0, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x6d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x14b, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0xb3, 0x1}}, @dsss={0x3, 0x1, 0x7}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x20, 0x1, 0x2, 0xff80}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x1, 0x7, @device_b, 0x0, 0x1, 0x6}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xff, 0x2}}, @chsw_timing={0x68, 0x4, {0x8, 0x95}}, @random={0x4, 0xcd, "c068eb8bf0dc1ccd4e9e53d00e6979db06092a775422b01cb06a3889a2c96a526d38a47788aabc3b14335bdeaa934c803239506661c47cf5243acffd3a603d2f4999e9645330cf5e04a3d3cab4315734b28e8ca15fd58525e8983bf56ff0b6fdb99b307acc598eb3f4c768d719e4efe44f3ed6588778286e1f7463e1283726b091a8c97fca150e655ece1407f02685c7e1102dd22fb534ad88739325347caf18e81213268de1876c2ff50ed24cef1fc3580942236b40828dba8b9c114fe9edf15868163c9b06511b1f83ebda0d"}, @prep={0x83, 0x25, @ext={{}, 0xef, 0x1, @device_a, 0x1, @broadcast, 0x9, 0x8, @device_a, 0x6}}, @mic={0x8c, 0x10, {0xe0d, "b9aa10047576", @short="d01606b6c3118c66"}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x1d0}}, 0x40008001)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/crypto\x00', 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001580)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x30, r9, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1440, 0x68}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4882}, 0x4)

11:42:52 executing program 4:
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000280))
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={<r1=>r0, 0x0, 0x7ff80, 0x623})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000016c0)={0xe8, 0x0, &(0x7f0000001540)=[@decrefs={0x40046307, 0x2}, @increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/181, 0xb5, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000440)={0x0, 0x18, 0x40}}}, @increfs_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001480)={@fda={0x66646185, 0x4, 0x1, 0x9}, @flat=@handle={0x73682a85, 0x200, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/4096, 0x1000, 0x0, 0x3a}}, &(0x7f0000001500)={0x0, 0x20, 0x38}}, 0x1000}, @acquire_done={0x40106309, 0x2}, @dead_binder_done, @increfs_done={0x40106308, 0x2}], 0x75, 0x0, &(0x7f0000001640)="90529bc0a4ede9f1326bf1cb317d3a918c1446914ff6dd28c5ffa428794bceb392cf849475aa14135b0b4654a41e11219105081bb217f9d89a659cbbaa4b76e3efadab3419041b85f8c342c3fba1811a55c5fb3312ba2003cf7eddd9a3f525f3269f8fda576847918c0898e5d7c1e2afb41f002b61"})
recvmsg$unix(r1, &(0x7f0000001c00)={&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000001b40)=[{&(0x7f00000018c0)=""/155, 0x9b}, {&(0x7f0000001980)=""/20, 0x14}, {&(0x7f00000019c0)=""/163, 0xa3}, {&(0x7f0000001a80)=""/142, 0x8e}], 0x4, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}], 0x60}, 0x3)
r5 = clone3(&(0x7f0000001c80)={0x200080, &(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780), {0x3e}, &(0x7f00000017c0)=""/61, 0x3d, &(0x7f0000001800)=""/31, &(0x7f0000001c40)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, r4], 0x4, {r1}}, 0x58)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d00), 0x200040, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000001d40)={0x1, 0x3, 0x10000})
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002f00), 0x0, 0x0)
clone3(&(0x7f0000002f40)={0x0, &(0x7f0000001d80), &(0x7f0000001dc0), &(0x7f0000001e00), {0x16}, &(0x7f0000001e40)=""/123, 0x7b, &(0x7f0000001ec0)=""/4096, &(0x7f0000002ec0)=[r5], 0x1, {r7}}, 0x58)
r8 = openat(r1, &(0x7f0000002fc0)='./file0\x00', 0x2000, 0x81)
openat(r6, &(0x7f0000003000)='./file0\x00', 0x100, 0x38)
r9 = fcntl$getown(r0, 0x9)
r10 = clone3(&(0x7f00000043c0)={0x1000000, &(0x7f0000003200), &(0x7f0000003240), &(0x7f0000003280), {0x11}, &(0x7f00000032c0)=""/175, 0xaf, &(0x7f0000003380)=""/4096, &(0x7f0000004380)=[r5, r2, 0x0], 0x3, {r1}}, 0x58)
r11 = fcntl$dupfd(r8, 0x406, r1)
clone3(&(0x7f0000004480)={0x40000, &(0x7f0000003040), &(0x7f0000003080), &(0x7f00000030c0), {0x24}, &(0x7f0000003100)=""/112, 0x70, &(0x7f0000003180)=""/65, &(0x7f0000004440)=[r4, r9, r3, r4, r10], 0x5, {r11}}, 0x58)
read$hiddev(0xffffffffffffffff, &(0x7f0000004500)=""/6, 0x6)
r12 = fsmount(r8, 0x0, 0x41a5ba4c6c06b753)
ioctl$SG_SET_DEBUG(r12, 0x227e, &(0x7f0000004540)=0x1)

11:42:52 executing program 2:
pkey_alloc(0x0, 0x1)
r0 = pkey_alloc(0x0, 0x2)
r1 = pkey_alloc(0x0, 0x0)
pkey_free(r1)
r2 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, r2)
r3 = pkey_alloc(0x0, 0x2)
r4 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, r4)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000e, r0)
r5 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x4, r3)
pkey_mprotect(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x3000005, r1)
pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, r2)
pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, r0)
pkey_alloc(0x0, 0x2)
pkey_free(0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x200000f, r5)
pkey_mprotect(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3000006, r4)

11:42:52 executing program 5:
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8)
statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2000, 0x200, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@msize={'msize', 0x3d, 0x9}}, {@dfltuid}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@access_any}, {@cachetag={'cachetag', 0x3d, '%\xc2\xd2-'}}, {@privport}, {@msize={'msize', 0x3d, 0x9}}], [{@obj_user={'obj_user', 0x3d, '['}}, {@euid_lt={'euid<', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x38, 0x63, 0x39, 0x66, 0x61, 0x63, 0x62], 0x2d, [0x63, 0x36, 0x65, 0x65], 0x2d, [0x36, 0x36, 0x37, 0x30], 0x2d, [0x65, 0x35, 0x6c, 0xd], 0x2d, [0x0, 0x0, 0x61, 0x30, 0x31, 0x5a, 0x32, 0x35]}}}, {@obj_role={'obj_role', 0x3d, '/]@!&!('}}, {@hash}]}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', r0, 0x4, 0x7f, 0x53, 0x7fffffff, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x10, 0x401, 0xffff}})
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540))
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat2(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x210000, 0x8c, 0x4}, 0x18)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000600)={{r4}, 0x5, 0xfffffffffffffffe, 0x451})
r5 = pidfd_getfd(r3, r3, 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000640)=0x5)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x4002, 0x0)
r7 = openat(r5, &(0x7f00000006c0)='./file0\x00', 0x101000, 0x109)
r8 = socket(0x5, 0x1, 0x5)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, r8, {0x8001}}, './file0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
mount(&(0x7f0000000740)=@sg0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='ext3\x00', 0x8c480, &(0x7f0000000800)='\x00')
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000cc0)={'team0\x00', 0x714e})

11:42:52 executing program 6:
ioctl$sock_ifreq(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'rose0\x00', @ifru_addrs=@can={0x1d, <r0=>0x0}})
r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x800)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f00000000c0)={0x6, 'bridge0\x00', {0x8}, 0x8})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x410, 0x108, 0x108, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000340), {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xffffffff, {0x5}}}}, {{@arp={@private=0xa010101, @local, 0xffffff00, 0xffffff00, 0xe, 0x4, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x6, 0x2, 0x8, 0x1, 0xe39, 0x6, 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1d}, 0xffffffff, 0xffffffff, 0xe, 0xd, {@mac=@random="d13c1bed333a", {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x9eec39afb3fbaeed]}}, 0x81, 0x3, 0x3, 0x0, 0x9, 0x3ac, 'veth0_to_bridge\x00', 'erspan0\x00', {}, {0xff}, 0x0, 0x114}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="cf95213becde", @empty, @loopback, @rand_addr=0x64010101, 0x6751bd26a5315230, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460)
getsockname$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x0, @multicast2}, &(0x7f0000000840)=0x10)
ioctl$FIONCLEX(r3, 0x5450)
syz_genetlink_get_family_id$fou(&(0x7f0000000880), r3)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x8804)
getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f00000009c0)={@broadcast, @multicast2, @dev}, &(0x7f0000000a00)=0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3)
r4 = syz_open_dev$vcsu(&(0x7f0000000a80), 0x5, 0x4a8000)
ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000ac0)={0x0, 0x40000000, @start={<r5=>0x0, 0x0, "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", "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"}, [0x5, 0x3, 0xfff, 0x8001, 0x4, 0xbe, 0x3, 0x6, 0xaa6b, 0xca, 0x3, 0x0, 0x2, 0x81, 0x8001, 0x48d6, 0x0, 0x5, 0x1, 0x6, 0x80, 0x8001, 0x5, 0x5, 0x7f, 0x3f, 0x101, 0x10000, 0x8, 0x6, 0x4, 0x101, 0x4, 0xf106, 0x1f, 0x8, 0x0, 0x0, 0x1, 0x5, 0x1, 0x1, 0xf7, 0xffffffffffffff00, 0x8000, 0x8, 0x9, 0x74ff, 0x8, 0xa0cb, 0x7, 0x1, 0x770, 0x421, 0x80, 0x0, 0x8, 0x3, 0x3, 0x0, 0x6, 0x9, 0x10001]})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001500)={<r6=>0x0, 0x2, 0x63e})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001900)={0x11, 0x0, {0x835, @usage=0x3ead8cf3, r5, 0x4, 0xfffffffffffffff9, 0x58, 0x81, 0x4, 0x43, @struct={0x1c000000, 0x1a}, 0x7, 0x7, [0x7, 0x7fffffff800000, 0x3, 0x9, 0x77b700, 0x4]}, {0xba8e, @struct={0x8000, 0xfffffff8}, r6, 0x7, 0x7fffffff, 0x1, 0x1d75fd3a, 0xfffffffffffffffe, 0x39, @usage=0x6, 0x6, 0xff, [0x20, 0x2, 0x9f, 0x7fffffff, 0x6, 0x54]}, {0x0, @struct={0xffff, 0x8}, 0x0, 0x3, 0x2, 0x4, 0x9, 0x80, 0x40, @usage=0xffe0000, 0x6, 0x401, [0x8c24, 0x10001, 0xbee6, 0x1e40, 0x6]}, {0x1000, 0xad, 0x177}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000001dc0)={'ip6_vti0\x00', &(0x7f0000001d40)={'syztnl1\x00', <r7=>r0, 0x2f, 0x3f, 0x9, 0xe1, 0x64, @mcast1, @local, 0x1, 0x7801, 0x7fff, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000001e80)={'ip6gre0\x00', &(0x7f0000001e00)={'ip6_vti0\x00', <r8=>r0, 0x2f, 0x0, 0xd4, 0x3f12, 0x0, @private0, @empty, 0x7, 0x700, 0x5, 0x8}})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002100)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0xcfc1188bd2a7d58c}, 0xc, &(0x7f00000020c0)={&(0x7f0000001ec0)={0x1e8, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2d08, 0x8, 0xa0, 0x101}, {0x8, 0x2, 0x1, 0x3}, {0x1, 0x1, 0x6, 0xffffff3a}, {0x5cc, 0x64, 0x0, 0x5}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000002740)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000002700)={&(0x7f0000002340), 0x80, &(0x7f0000002600)=[{&(0x7f00000023c0)=""/159, 0x9f}, {&(0x7f0000002480)=""/203, 0xcb}, {&(0x7f0000002580)=""/82, 0x52}], 0x3, &(0x7f0000002640)=""/141, 0x8d}, 0x0, 0x40002000}, 0x1)

[   77.795204] audit: type=1400 audit(1664192572.811:6): avc:  denied  { execmem } for  pid=286 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   79.107901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.110486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.112026] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.113488] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   79.115141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.116687] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   79.118180] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   79.120630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.121946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.123213] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   79.124286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.125639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   79.126770] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   79.128323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.129511] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.133297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   79.134535] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.135632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   79.136716] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   79.144564] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.146047] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.147142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   79.148408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.149489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   79.150592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   79.153421] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   79.154707] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   79.156209] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   79.157360] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   79.158581] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   79.159739] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   79.160933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.162194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.163363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   79.164545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.165655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   79.166915] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   79.172522] Bluetooth: hci1: HCI_REQ-0x0c1a
[   79.175344] Bluetooth: hci3: HCI_REQ-0x0c1a
[   79.178041] Bluetooth: hci4: HCI_REQ-0x0c1a
[   79.183537] Bluetooth: hci5: HCI_REQ-0x0c1a
[   79.191972] Bluetooth: hci0: HCI_REQ-0x0c1a
[   79.193182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.194457] Bluetooth: hci6: HCI_REQ-0x0c1a
[   79.211608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.238680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.241749] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   79.243197] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.250180] Bluetooth: hci2: HCI_REQ-0x0c1a
[   79.252741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   79.255392] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   79.258835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   79.270029] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   79.274581] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   79.275916] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   79.290866] Bluetooth: hci7: HCI_REQ-0x0c1a
[   81.204188] Bluetooth: hci5: command 0x0409 tx timeout
[   81.204260] Bluetooth: hci3: command 0x0409 tx timeout
[   81.205486] Bluetooth: hci1: command 0x0409 tx timeout
[   81.206333] Bluetooth: hci4: command 0x0409 tx timeout
[   81.267947] Bluetooth: hci2: command 0x0409 tx timeout
[   81.268950] Bluetooth: hci6: command 0x0409 tx timeout
[   81.269898] Bluetooth: hci0: command 0x0409 tx timeout
[   81.359573] Bluetooth: hci7: command 0x0409 tx timeout
[   83.252606] Bluetooth: hci4: command 0x041b tx timeout
[   83.253283] Bluetooth: hci1: command 0x041b tx timeout
[   83.253733] Bluetooth: hci3: command 0x041b tx timeout
[   83.254208] Bluetooth: hci5: command 0x041b tx timeout
[   83.315919] Bluetooth: hci0: command 0x041b tx timeout
[   83.316365] Bluetooth: hci6: command 0x041b tx timeout
[   83.317123] Bluetooth: hci2: command 0x041b tx timeout
[   83.379899] Bluetooth: hci7: command 0x041b tx timeout
[   85.300606] Bluetooth: hci5: command 0x040f tx timeout
[   85.301084] Bluetooth: hci3: command 0x040f tx timeout
[   85.301487] Bluetooth: hci1: command 0x040f tx timeout
[   85.302364] Bluetooth: hci4: command 0x040f tx timeout
[   85.363866] Bluetooth: hci2: command 0x040f tx timeout
[   85.364277] Bluetooth: hci6: command 0x040f tx timeout
[   85.364673] Bluetooth: hci0: command 0x040f tx timeout
[   85.427904] Bluetooth: hci7: command 0x040f tx timeout
[   87.348257] Bluetooth: hci4: command 0x0419 tx timeout
[   87.348712] Bluetooth: hci1: command 0x0419 tx timeout
[   87.349147] Bluetooth: hci3: command 0x0419 tx timeout
[   87.349571] Bluetooth: hci5: command 0x0419 tx timeout
[   87.411898] Bluetooth: hci0: command 0x0419 tx timeout
[   87.412312] Bluetooth: hci6: command 0x0419 tx timeout
[   87.412704] Bluetooth: hci2: command 0x0419 tx timeout
[   87.476281] Bluetooth: hci7: command 0x0419 tx timeout
11:43:48 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000001300), &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d9f535a74cf32c8dddee680c874656661756c743df2656c21746976653a2c362d352c00"])

[  133.742094] tmpfs: Bad value for 'mpol'
[  133.755299] tmpfs: Bad value for 'mpol'
11:43:48 executing program 5:
r0 = syz_io_uring_setup(0x68dc, &(0x7f0000007b00), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000007b80), &(0x7f0000007bc0)=<r1=>0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x8000000)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
getdents64(r3, &(0x7f0000000180)=""/70, 0x18)
getdents(r3, 0x0, 0x0)
syz_io_uring_setup(0x6f61, &(0x7f0000000100)={0x0, 0x4739, 0x0, 0x3, 0x29b, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r4, 0x0, 0x0)
fcntl$dupfd(r4, 0x406, r0)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x5, 0x28, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]})
syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1}, 0x1)

11:43:49 executing program 5:
r0 = syz_io_uring_setup(0x68dc, &(0x7f0000007b00), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000007b80), &(0x7f0000007bc0)=<r1=>0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x8000000)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
getdents64(r3, &(0x7f0000000180)=""/70, 0x18)
getdents(r3, 0x0, 0x0)
syz_io_uring_setup(0x6f61, &(0x7f0000000100)={0x0, 0x4739, 0x0, 0x3, 0x29b, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r4, 0x0, 0x0)
fcntl$dupfd(r4, 0x406, r0)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x5, 0x28, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]})
syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1}, 0x1)

11:43:49 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
getdents64(r1, &(0x7f0000000180)=""/70, 0x18)
getdents(r1, 0x0, 0x0)
pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="e6", 0x1}], 0x1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x4, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r2, r0, 0x0, 0x80000001)

11:43:49 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000500))
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, 0x0, 0x0)
fadvise64(r1, 0xfffffffffffffffe, 0xfff, 0x0)

11:43:49 executing program 5:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0xfffffff7)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x3514, &(0x7f0000000040), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r2, r4, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0)
recvmmsg$unix(r5, &(0x7f0000003280)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000002480)=[{&(0x7f0000000280)=""/40, 0x28}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/42, 0x2a}], 0x5, &(0x7f0000002500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002580)=""/213, 0xd5}], 0x1, &(0x7f00000026c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002880)=""/150, 0x96}, {&(0x7f0000002940)=""/136, 0x88}, {&(0x7f0000002a00)=""/37, 0x25}, {&(0x7f0000002a40)}, {&(0x7f0000002a80)=""/191, 0xbf}], 0x5, &(0x7f0000002bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002c80)=""/163, 0xa3}, {&(0x7f0000002d40)=""/111, 0x6f}], 0x2, &(0x7f0000002e00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000002f00), 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002f80)=""/7, 0x7}, {&(0x7f0000002fc0)=""/39, 0x27}, {&(0x7f0000003000)=""/213, 0xd5}, {&(0x7f0000003100)=""/78, 0x4e}, {&(0x7f0000003180)}], 0x5, &(0x7f0000003240)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x5, 0x2000, &(0x7f00000033c0)={0x0, 0x989680})
write$binfmt_script(r7, &(0x7f0000003400)={'#! ', './file1', [{}, {0x20, '*(,'}, {0x20, '\x00'}], 0xa, "fed88e7c9bf169facca56aead6056c6e9333737dd71f34627a076eb5c8b070c38ae2b2a3fb74d955d77e7c48b2523d3e9d"}, 0x43)
sendfile(r5, r6, 0x0, 0x100000001)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8)
syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, r8}}, 0xb6)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  134.944250] audit: type=1400 audit(1664192629.959:7): avc:  denied  { open } for  pid=3854 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  134.947261] audit: type=1400 audit(1664192629.960:8): avc:  denied  { kernel } for  pid=3854 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  134.965525] ------------[ cut here ]------------
[  134.965558] 
[  134.965563] ======================================================
[  134.965570] WARNING: possible circular locking dependency detected
[  134.965577] 6.0.0-rc6-next-20220923 #1 Not tainted
[  134.965589] ------------------------------------------------------
[  134.965595] syz-executor.5/3857 is trying to acquire lock:
[  134.965607] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  134.965675] 
[  134.965675] but task is already holding lock:
[  134.965680] ffff88804043b820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  134.965732] 
[  134.965732] which lock already depends on the new lock.
[  134.965732] 
[  134.965738] 
[  134.965738] the existing dependency chain (in reverse order) is:
[  134.965744] 
[  134.965744] -> #3 (&ctx->lock){....}-{2:2}:
[  134.965771]        _raw_spin_lock+0x2a/0x40
[  134.965812]        __perf_event_task_sched_out+0x53b/0x18d0
[  134.965837]        __schedule+0xedd/0x2470
[  134.965863]        schedule+0xda/0x1b0
[  134.965888]        exit_to_user_mode_prepare+0x114/0x1a0
[  134.965910]        syscall_exit_to_user_mode+0x19/0x40
[  134.965934]        do_syscall_64+0x48/0x90
[  134.965966]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  134.965990] 
[  134.965990] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  134.966017]        _raw_spin_lock_nested+0x30/0x40
[  134.966062]        raw_spin_rq_lock_nested+0x1e/0x30
[  134.966086]        task_fork_fair+0x63/0x4d0
[  134.966118]        sched_cgroup_fork+0x3d0/0x540
[  134.966145]        copy_process+0x4183/0x6e20
[  134.966165]        kernel_clone+0xe7/0x890
[  134.966183]        user_mode_thread+0xad/0xf0
[  134.966203]        rest_init+0x24/0x250
[  134.966225]        arch_call_rest_init+0xf/0x14
[  134.966257]        start_kernel+0x4c1/0x4e6
[  134.966287]        secondary_startup_64_no_verify+0xe0/0xeb
[  134.966313] 
[  134.966313] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  134.966340]        _raw_spin_lock_irqsave+0x39/0x60
[  134.966376]        try_to_wake_up+0xab/0x1930
[  134.966401]        up+0x75/0xb0
[  134.966428]        __up_console_sem+0x6e/0x80
[  134.966457]        console_unlock+0x46a/0x590
[  134.966488]        do_con_write+0xc05/0x1d50
[  134.966510]        con_write+0x21/0x40
[  134.966530]        n_tty_write+0x4d4/0xfe0
[  134.966555]        file_tty_write.constprop.0+0x49c/0x8f0
[  134.966579]        vfs_write+0x9c3/0xd90
[  134.966612]        ksys_write+0x127/0x250
[  134.966646]        do_syscall_64+0x3b/0x90
[  134.966677]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  134.966701] 
[  134.966701] -> #0 ((console_sem).lock){....}-{2:2}:
[  134.966728]        __lock_acquire+0x2a02/0x5e70
[  134.966760]        lock_acquire+0x1a2/0x530
[  134.966791]        _raw_spin_lock_irqsave+0x39/0x60
[  134.966826]        down_trylock+0xe/0x70
[  134.966855]        __down_trylock_console_sem+0x3b/0xd0
[  134.966886]        vprintk_emit+0x16b/0x560
[  134.966917]        vprintk+0x84/0xa0
[  134.966948]        _printk+0xba/0xf1
[  134.966968]        report_bug.cold+0x72/0xab
[  134.966999]        handle_bug+0x3c/0x70
[  134.967030]        exc_invalid_op+0x14/0x50
[  134.967062]        asm_exc_invalid_op+0x16/0x20
[  134.967084]        group_sched_out.part.0+0x2c7/0x460
[  134.967105]        ctx_sched_out+0x8f1/0xc10
[  134.967125]        __perf_event_task_sched_out+0x6d0/0x18d0
[  134.967149]        __schedule+0xedd/0x2470
[  134.967175]        schedule+0xda/0x1b0
[  134.967200]        exit_to_user_mode_prepare+0x114/0x1a0
[  134.967221]        syscall_exit_to_user_mode+0x19/0x40
[  134.967245]        do_syscall_64+0x48/0x90
[  134.967276]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  134.967300] 
[  134.967300] other info that might help us debug this:
[  134.967300] 
[  134.967305] Chain exists of:
[  134.967305]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  134.967305] 
[  134.967334]  Possible unsafe locking scenario:
[  134.967334] 
[  134.967338]        CPU0                    CPU1
[  134.967343]        ----                    ----
[  134.967347]   lock(&ctx->lock);
[  134.967358]                                lock(&rq->__lock);
[  134.967370]                                lock(&ctx->lock);
[  134.967382]   lock((console_sem).lock);
[  134.967394] 
[  134.967394]  *** DEADLOCK ***
[  134.967394] 
[  134.967397] 2 locks held by syz-executor.5/3857:
[  134.967411]  #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  134.967467]  #1: ffff88804043b820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  134.967522] 
[  134.967522] stack backtrace:
[  134.967527] CPU: 1 PID: 3857 Comm: syz-executor.5 Not tainted 6.0.0-rc6-next-20220923 #1
[  134.967551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  134.967565] Call Trace:
[  134.967571]  <TASK>
[  134.967578]  dump_stack_lvl+0x8b/0xb3
[  134.967613]  check_noncircular+0x263/0x2e0
[  134.967645]  ? format_decode+0x26c/0xb50
[  134.967676]  ? print_circular_bug+0x450/0x450
[  134.967709]  ? enable_ptr_key_workfn+0x20/0x20
[  134.967741]  ? format_decode+0x26c/0xb50
[  134.967774]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  134.967808]  __lock_acquire+0x2a02/0x5e70
[  134.967851]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  134.967894]  lock_acquire+0x1a2/0x530
[  134.967927]  ? down_trylock+0xe/0x70
[  134.967960]  ? lock_release+0x750/0x750
[  134.967999]  ? vprintk+0x84/0xa0
[  134.968034]  _raw_spin_lock_irqsave+0x39/0x60
[  134.968071]  ? down_trylock+0xe/0x70
[  134.968102]  down_trylock+0xe/0x70
[  134.968132]  ? vprintk+0x84/0xa0
[  134.968165]  __down_trylock_console_sem+0x3b/0xd0
[  134.968199]  vprintk_emit+0x16b/0x560
[  134.968235]  vprintk+0x84/0xa0
[  134.968269]  _printk+0xba/0xf1
[  134.968291]  ? record_print_text.cold+0x16/0x16
[  134.968322]  ? report_bug.cold+0x66/0xab
[  134.968356]  ? group_sched_out.part.0+0x2c7/0x460
[  134.968379]  report_bug.cold+0x72/0xab
[  134.968415]  handle_bug+0x3c/0x70
[  134.968448]  exc_invalid_op+0x14/0x50
[  134.968483]  asm_exc_invalid_op+0x16/0x20
[  134.968507] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  134.968534] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  134.968556] RSP: 0018:ffff888041007c48 EFLAGS: 00010006
[  134.968573] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  134.968588] RDX: ffff888015dcd040 RSI: ffffffff81564fb7 RDI: 0000000000000005
[  134.968603] RBP: ffff8880174e0000 R08: 0000000000000005 R09: 0000000000000001
[  134.968618] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff88804043b800
[  134.968633] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002
[  134.968654]  ? group_sched_out.part.0+0x2c7/0x460
[  134.968680]  ? group_sched_out.part.0+0x2c7/0x460
[  134.968706]  ctx_sched_out+0x8f1/0xc10
[  134.968732]  __perf_event_task_sched_out+0x6d0/0x18d0
[  134.968763]  ? lock_is_held_type+0xd7/0x130
[  134.968789]  ? __perf_cgroup_move+0x160/0x160
[  134.968813]  ? set_next_entity+0x304/0x550
[  134.968847]  ? update_curr+0x267/0x740
[  134.968883]  ? lock_is_held_type+0xd7/0x130
[  134.968910]  __schedule+0xedd/0x2470
[  134.968942]  ? io_schedule_timeout+0x150/0x150
[  134.968978]  schedule+0xda/0x1b0
[  134.969007]  exit_to_user_mode_prepare+0x114/0x1a0
[  134.969031]  syscall_exit_to_user_mode+0x19/0x40
[  134.969057]  do_syscall_64+0x48/0x90
[  134.969091]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  134.969116] RIP: 0033:0x7f1350ed3b19
[  134.969132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  134.969154] RSP: 002b:00007f134e449218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  134.969175] RAX: 0000000000000001 RBX: 00007f1350fe6f68 RCX: 00007f1350ed3b19
[  134.969190] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1350fe6f6c
[  134.969204] RBP: 00007f1350fe6f60 R08: 000000000000000e R09: 0000000000000000
[  134.969219] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f1350fe6f6c
[  134.969233] R13: 00007ffcaefd81bf R14: 00007f134e449300 R15: 0000000000022000
[  134.969258]  </TASK>
[  135.079021] WARNING: CPU: 1 PID: 3857 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  135.080332] Modules linked in:
[  135.080801] CPU: 1 PID: 3857 Comm: syz-executor.5 Not tainted 6.0.0-rc6-next-20220923 #1
[  135.081943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  135.083541] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  135.084339] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  135.086935] RSP: 0018:ffff888041007c48 EFLAGS: 00010006
[  135.087701] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  135.088725] RDX: ffff888015dcd040 RSI: ffffffff81564fb7 RDI: 0000000000000005
[  135.089801] RBP: ffff8880174e0000 R08: 0000000000000005 R09: 0000000000000001
[  135.090822] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff88804043b800
[  135.091841] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002
[  135.092862] FS:  00007f134e449700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  135.094017] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.094870] CR2: 00007efe5aee0000 CR3: 000000000dd98000 CR4: 0000000000350ee0
[  135.095904] Call Trace:
[  135.096291]  <TASK>
[  135.096628]  ctx_sched_out+0x8f1/0xc10
[  135.097215]  __perf_event_task_sched_out+0x6d0/0x18d0
[  135.097983]  ? lock_is_held_type+0xd7/0x130
[  135.098637]  ? __perf_cgroup_move+0x160/0x160
[  135.099305]  ? set_next_entity+0x304/0x550
[  135.099944]  ? update_curr+0x267/0x740
[  135.100534]  ? lock_is_held_type+0xd7/0x130
[  135.101163]  __schedule+0xedd/0x2470
[  135.101720]  ? io_schedule_timeout+0x150/0x150
[  135.102422]  schedule+0xda/0x1b0
[  135.102938]  exit_to_user_mode_prepare+0x114/0x1a0
[  135.103661]  syscall_exit_to_user_mode+0x19/0x40
[  135.104353]  do_syscall_64+0x48/0x90
[  135.104918]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  135.105678] RIP: 0033:0x7f1350ed3b19
[  135.106235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  135.108824] RSP: 002b:00007f134e449218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  135.109921] RAX: 0000000000000001 RBX: 00007f1350fe6f68 RCX: 00007f1350ed3b19
[  135.110951] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1350fe6f6c
[  135.111972] RBP: 00007f1350fe6f60 R08: 000000000000000e R09: 0000000000000000
[  135.112997] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f1350fe6f6c
[  135.114002] R13: 00007ffcaefd81bf R14: 00007f134e449300 R15: 0000000000022000
[  135.115021]  </TASK>
[  135.115362] irq event stamp: 2060
[  135.115852] hardirqs last  enabled at (2059): [<ffffffff8133e999>] exit_to_user_mode_prepare+0x109/0x1a0
[  135.117167] hardirqs last disabled at (2060): [<ffffffff84259645>] __schedule+0x1225/0x2470
[  135.118358] softirqs last  enabled at (1892): [<ffffffff8116fa8b>] __irq_exit_rcu+0x11b/0x180
[  135.119575] softirqs last disabled at (1867): [<ffffffff8116fa8b>] __irq_exit_rcu+0x11b/0x180
[  135.120791] ---[ end trace 0000000000000000 ]---
11:43:50 executing program 4:
read$hiddev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="00010000dead292f89cb8d47d567c02202f7bd4800000000c0ee11125d4d121b5f8159dc6d07efa63650f6c46eec8ed1445fe60cdbf8c22db93cc9479b6000000000000000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="e200330080800000080211000001080211000000505050505050"], 0x100}}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008804}, 0x800)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x7, &(0x7f0000000000))
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9)
io_setup(0x6, &(0x7f0000000380))
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
getdents64(r5, &(0x7f0000000180)=""/70, 0x18)
getdents(r5, &(0x7f0000000300)=""/123, 0x7b)
syz_mount_image$nfs4(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x1000, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="5cc56afefd0948996f88560af3e0cf88c5bcdafb4ac36a5f61809ef321b04dfe75814c745df272ea452f6707f9748272c404ee37fb1b8a06bd77cbb776d668c8ece8c8d88556c38df0d63cacba5013ec4772a42a7f630704fdbc5486a627ec7a816aaedbdf563043a92c9e60785e98957ccb1ce49cbbde053536dd81abfabf998a67eada5937f99d8bad022655d9b6e19eacc4d49759b10c7e6040603596d19649ed79d4a9975c3a7bad61ec6ce95410aef5ba52c8f1c0ee243e4a6bf6489b24f22462d130f063a5573070643e3f8dab0794cab5b5", 0xd5, 0x1ff}], 0x1000404, &(0x7f0000000680)={[{}, {'personality\x00'}, {'attr\x00'}, {'*{'}, {}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]})
fcntl$dupfd(r1, 0x0, r3)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220)
sendfile(0xffffffffffffffff, r2, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x0, 0x4, 0xe1, 0x9, 0x0, 0x800000000000fff, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffffff9, 0xfffffffffffffffa}, 0x415c0, 0x4, 0x1, 0x0, 0x7, 0x1, 0x8000, 0x0, 0xa6cc, 0x0, 0x48}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8161317f64c884f4)

[  135.643812] hrtimer: interrupt took 18715 ns
[  135.698742] loop4: detected capacity change from 0 to 8
[  135.699344] nfs4: Unknown parameter 'personality'
11:43:50 executing program 5:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0xfffffff7)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x3514, &(0x7f0000000040), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r2, r4, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0)
recvmmsg$unix(r5, &(0x7f0000003280)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000002480)=[{&(0x7f0000000280)=""/40, 0x28}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/42, 0x2a}], 0x5, &(0x7f0000002500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002580)=""/213, 0xd5}], 0x1, &(0x7f00000026c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002880)=""/150, 0x96}, {&(0x7f0000002940)=""/136, 0x88}, {&(0x7f0000002a00)=""/37, 0x25}, {&(0x7f0000002a40)}, {&(0x7f0000002a80)=""/191, 0xbf}], 0x5, &(0x7f0000002bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002c80)=""/163, 0xa3}, {&(0x7f0000002d40)=""/111, 0x6f}], 0x2, &(0x7f0000002e00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000002f00), 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002f80)=""/7, 0x7}, {&(0x7f0000002fc0)=""/39, 0x27}, {&(0x7f0000003000)=""/213, 0xd5}, {&(0x7f0000003100)=""/78, 0x4e}, {&(0x7f0000003180)}], 0x5, &(0x7f0000003240)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x5, 0x2000, &(0x7f00000033c0)={0x0, 0x989680})
write$binfmt_script(r7, &(0x7f0000003400)={'#! ', './file1', [{}, {0x20, '*(,'}, {0x20, '\x00'}], 0xa, "fed88e7c9bf169facca56aead6056c6e9333737dd71f34627a076eb5c8b070c38ae2b2a3fb74d955d77e7c48b2523d3e9d"}, 0x43)
sendfile(r5, r6, 0x0, 0x100000001)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8)
syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, r8}}, 0xb6)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  135.966198] loop4: detected capacity change from 0 to 8
[  135.966830] nfs4: Unknown parameter 'personality'
[  136.288002] audit: type=1400 audit(1664192631.304:9): avc:  denied  { create } for  pid=3940 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1

VM DIAGNOSIS:
11:43:50  Registers:
info registers vcpu 0
RAX=000000008000001f RBX=0000000068747541 RCX=00000000444d4163 RDX=0000000069746e65
RSI=00007ffe41fad768 RDI=00000000000000bc RBP=0000000000000004 RSP=00007ffe41fad690
R8 =0000000000007fff R9 =0000000000000000 R10=fffffffffffff988 R11=00007f97e0b23d40
R12=00007ffe41fad768 R13=00007f97e0b365c0 R14=0000000000000000 R15=0000000000000000
RIP=00007f97e06ccbe8 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f97e05fc540 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f97e07848f0 CR3=000000001b30a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 2d0065626f727064 6f6d2f6e6962732f
YMM02=0000000000000000 0000000000000000 00ff000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000ff00000000ff
YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff888041007698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001
R12=0000000000000037 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0
RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f134e449700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efe5aee0000 CR3=000000000dd98000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f1350fba7c0 00007f1350fba7c8
YMM02=0000000000000000 0000000000000000 00007f1350fba7e0 00007f1350fba7c0
YMM03=0000000000000000 0000000000000000 00007f1350fba7c8 00007f1350fba7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000