syzkaller login: [   42.878049] sshd (244) used greatest stack depth: 24640 bytes left
Warning: Permanently added '[localhost]:10033' (ECDSA) to the list of known hosts.
2022/09/26 16:32:07 fuzzer started
2022/09/26 16:32:07 dialing manager at localhost:38881
[   44.866075] cgroup: Unknown subsys name 'net'
[   45.008771] cgroup: Unknown subsys name 'rlimit'
2022/09/26 16:32:22 syscalls: 2215
2022/09/26 16:32:22 code coverage: enabled
2022/09/26 16:32:22 comparison tracing: enabled
2022/09/26 16:32:22 extra coverage: enabled
2022/09/26 16:32:22 setuid sandbox: enabled
2022/09/26 16:32:22 namespace sandbox: enabled
2022/09/26 16:32:22 Android sandbox: enabled
2022/09/26 16:32:22 fault injection: enabled
2022/09/26 16:32:22 leak checking: enabled
2022/09/26 16:32:22 net packet injection: enabled
2022/09/26 16:32:22 net device setup: enabled
2022/09/26 16:32:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/26 16:32:22 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/26 16:32:22 USB emulation: enabled
2022/09/26 16:32:22 hci packet injection: enabled
2022/09/26 16:32:22 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923                                          )
2022/09/26 16:32:22 802.15.4 emulation: enabled
2022/09/26 16:32:22 fetching corpus: 50, signal 25544/27361 (executing program)
2022/09/26 16:32:22 fetching corpus: 100, signal 36735/40217 (executing program)
2022/09/26 16:32:22 fetching corpus: 150, signal 43053/48104 (executing program)
2022/09/26 16:32:23 fetching corpus: 200, signal 49643/56149 (executing program)
2022/09/26 16:32:23 fetching corpus: 250, signal 54759/62685 (executing program)
2022/09/26 16:32:23 fetching corpus: 300, signal 58518/67855 (executing program)
2022/09/26 16:32:23 fetching corpus: 350, signal 65926/76435 (executing program)
2022/09/26 16:32:23 fetching corpus: 400, signal 72764/84375 (executing program)
2022/09/26 16:32:23 fetching corpus: 450, signal 75566/88462 (executing program)
2022/09/26 16:32:23 fetching corpus: 500, signal 78927/93027 (executing program)
2022/09/26 16:32:23 fetching corpus: 550, signal 82248/97475 (executing program)
2022/09/26 16:32:24 fetching corpus: 600, signal 85214/101575 (executing program)
2022/09/26 16:32:24 fetching corpus: 650, signal 87653/105166 (executing program)
2022/09/26 16:32:24 fetching corpus: 700, signal 91832/110277 (executing program)
2022/09/26 16:32:24 fetching corpus: 750, signal 94001/113536 (executing program)
2022/09/26 16:32:24 fetching corpus: 800, signal 96033/116609 (executing program)
2022/09/26 16:32:24 fetching corpus: 850, signal 98004/119613 (executing program)
2022/09/26 16:32:24 fetching corpus: 900, signal 99692/122313 (executing program)
2022/09/26 16:32:24 fetching corpus: 950, signal 103192/126582 (executing program)
2022/09/26 16:32:25 fetching corpus: 1000, signal 105237/129568 (executing program)
2022/09/26 16:32:25 fetching corpus: 1050, signal 107723/132898 (executing program)
2022/09/26 16:32:25 fetching corpus: 1100, signal 109116/135311 (executing program)
2022/09/26 16:32:25 fetching corpus: 1150, signal 110316/137479 (executing program)
2022/09/26 16:32:25 fetching corpus: 1200, signal 112892/140813 (executing program)
2022/09/26 16:32:25 fetching corpus: 1250, signal 113629/142541 (executing program)
2022/09/26 16:32:25 fetching corpus: 1300, signal 117287/146611 (executing program)
2022/09/26 16:32:25 fetching corpus: 1350, signal 118969/149111 (executing program)
2022/09/26 16:32:26 fetching corpus: 1400, signal 121842/152482 (executing program)
2022/09/26 16:32:26 fetching corpus: 1450, signal 122798/154322 (executing program)
2022/09/26 16:32:26 fetching corpus: 1500, signal 124290/156584 (executing program)
2022/09/26 16:32:26 fetching corpus: 1550, signal 125121/158269 (executing program)
2022/09/26 16:32:26 fetching corpus: 1600, signal 125701/159756 (executing program)
2022/09/26 16:32:26 fetching corpus: 1650, signal 126976/161837 (executing program)
2022/09/26 16:32:26 fetching corpus: 1700, signal 129020/164388 (executing program)
2022/09/26 16:32:26 fetching corpus: 1750, signal 130611/166587 (executing program)
2022/09/26 16:32:26 fetching corpus: 1800, signal 131719/168447 (executing program)
2022/09/26 16:32:27 fetching corpus: 1850, signal 133431/170693 (executing program)
2022/09/26 16:32:27 fetching corpus: 1900, signal 134057/172201 (executing program)
2022/09/26 16:32:27 fetching corpus: 1950, signal 135511/174213 (executing program)
2022/09/26 16:32:27 fetching corpus: 2000, signal 136998/176285 (executing program)
2022/09/26 16:32:27 fetching corpus: 2050, signal 137993/178006 (executing program)
2022/09/26 16:32:27 fetching corpus: 2100, signal 138834/179535 (executing program)
2022/09/26 16:32:27 fetching corpus: 2150, signal 139966/181290 (executing program)
2022/09/26 16:32:28 fetching corpus: 2200, signal 141473/183247 (executing program)
2022/09/26 16:32:28 fetching corpus: 2250, signal 142471/184886 (executing program)
2022/09/26 16:32:28 fetching corpus: 2300, signal 143986/186863 (executing program)
2022/09/26 16:32:28 fetching corpus: 2350, signal 145510/188777 (executing program)
2022/09/26 16:32:28 fetching corpus: 2400, signal 146685/190406 (executing program)
2022/09/26 16:32:28 fetching corpus: 2450, signal 147862/192075 (executing program)
2022/09/26 16:32:28 fetching corpus: 2500, signal 150053/194363 (executing program)
2022/09/26 16:32:28 fetching corpus: 2550, signal 151036/195844 (executing program)
2022/09/26 16:32:28 fetching corpus: 2600, signal 152792/197790 (executing program)
2022/09/26 16:32:28 fetching corpus: 2650, signal 153900/199308 (executing program)
2022/09/26 16:32:29 fetching corpus: 2700, signal 154589/200575 (executing program)
2022/09/26 16:32:29 fetching corpus: 2750, signal 155781/202094 (executing program)
2022/09/26 16:32:29 fetching corpus: 2800, signal 156729/203481 (executing program)
2022/09/26 16:32:29 fetching corpus: 2850, signal 157926/205035 (executing program)
2022/09/26 16:32:29 fetching corpus: 2900, signal 158541/206202 (executing program)
2022/09/26 16:32:29 fetching corpus: 2950, signal 159872/207783 (executing program)
2022/09/26 16:32:29 fetching corpus: 3000, signal 160221/208791 (executing program)
2022/09/26 16:32:29 fetching corpus: 3050, signal 160940/209989 (executing program)
2022/09/26 16:32:29 fetching corpus: 3100, signal 161518/211081 (executing program)
2022/09/26 16:32:29 fetching corpus: 3150, signal 162582/212482 (executing program)
2022/09/26 16:32:29 fetching corpus: 3200, signal 163253/213587 (executing program)
2022/09/26 16:32:29 fetching corpus: 3250, signal 164145/214795 (executing program)
2022/09/26 16:32:29 fetching corpus: 3300, signal 165073/216101 (executing program)
2022/09/26 16:32:30 fetching corpus: 3350, signal 166322/217488 (executing program)
2022/09/26 16:32:30 fetching corpus: 3400, signal 166892/218563 (executing program)
2022/09/26 16:32:30 fetching corpus: 3450, signal 167891/219795 (executing program)
2022/09/26 16:32:30 fetching corpus: 3500, signal 168642/220909 (executing program)
2022/09/26 16:32:30 fetching corpus: 3550, signal 169088/221867 (executing program)
2022/09/26 16:32:30 fetching corpus: 3600, signal 169952/223025 (executing program)
2022/09/26 16:32:30 fetching corpus: 3650, signal 170835/224158 (executing program)
2022/09/26 16:32:30 fetching corpus: 3700, signal 171848/225283 (executing program)
2022/09/26 16:32:30 fetching corpus: 3750, signal 172513/226316 (executing program)
2022/09/26 16:32:30 fetching corpus: 3800, signal 173019/227296 (executing program)
2022/09/26 16:32:30 fetching corpus: 3850, signal 173599/228223 (executing program)
2022/09/26 16:32:30 fetching corpus: 3900, signal 174103/229144 (executing program)
2022/09/26 16:32:31 fetching corpus: 3950, signal 175053/230194 (executing program)
2022/09/26 16:32:31 fetching corpus: 4000, signal 176024/231332 (executing program)
2022/09/26 16:32:31 fetching corpus: 4050, signal 176529/232275 (executing program)
2022/09/26 16:32:31 fetching corpus: 4100, signal 177732/233413 (executing program)
2022/09/26 16:32:31 fetching corpus: 4150, signal 178301/234342 (executing program)
2022/09/26 16:32:31 fetching corpus: 4200, signal 179037/235283 (executing program)
2022/09/26 16:32:31 fetching corpus: 4250, signal 179715/236225 (executing program)
2022/09/26 16:32:31 fetching corpus: 4300, signal 180388/237126 (executing program)
2022/09/26 16:32:31 fetching corpus: 4350, signal 181321/238109 (executing program)
2022/09/26 16:32:31 fetching corpus: 4400, signal 182042/239009 (executing program)
2022/09/26 16:32:31 fetching corpus: 4450, signal 183052/240011 (executing program)
2022/09/26 16:32:31 fetching corpus: 4500, signal 183787/240950 (executing program)
2022/09/26 16:32:32 fetching corpus: 4550, signal 185175/242043 (executing program)
2022/09/26 16:32:32 fetching corpus: 4600, signal 185635/242810 (executing program)
2022/09/26 16:32:32 fetching corpus: 4650, signal 186137/243645 (executing program)
2022/09/26 16:32:32 fetching corpus: 4700, signal 186660/244424 (executing program)
2022/09/26 16:32:32 fetching corpus: 4750, signal 187505/245272 (executing program)
2022/09/26 16:32:32 fetching corpus: 4800, signal 188375/246146 (executing program)
2022/09/26 16:32:32 fetching corpus: 4850, signal 188802/246895 (executing program)
2022/09/26 16:32:32 fetching corpus: 4900, signal 189494/247698 (executing program)
2022/09/26 16:32:32 fetching corpus: 4950, signal 189884/248423 (executing program)
2022/09/26 16:32:32 fetching corpus: 5000, signal 190451/249177 (executing program)
2022/09/26 16:32:33 fetching corpus: 5050, signal 191146/249947 (executing program)
2022/09/26 16:32:33 fetching corpus: 5100, signal 191556/250637 (executing program)
2022/09/26 16:32:33 fetching corpus: 5150, signal 192077/251354 (executing program)
2022/09/26 16:32:33 fetching corpus: 5200, signal 192824/252097 (executing program)
2022/09/26 16:32:33 fetching corpus: 5250, signal 193549/252806 (executing program)
2022/09/26 16:32:33 fetching corpus: 5300, signal 194358/253550 (executing program)
2022/09/26 16:32:33 fetching corpus: 5350, signal 195098/254292 (executing program)
2022/09/26 16:32:33 fetching corpus: 5400, signal 195639/254948 (executing program)
2022/09/26 16:32:33 fetching corpus: 5450, signal 196024/255600 (executing program)
2022/09/26 16:32:34 fetching corpus: 5500, signal 197105/256505 (executing program)
2022/09/26 16:32:34 fetching corpus: 5550, signal 198347/257254 (executing program)
2022/09/26 16:32:34 fetching corpus: 5600, signal 198818/257872 (executing program)
2022/09/26 16:32:34 fetching corpus: 5650, signal 199606/258501 (executing program)
2022/09/26 16:32:34 fetching corpus: 5700, signal 200015/259095 (executing program)
2022/09/26 16:32:34 fetching corpus: 5750, signal 200702/259718 (executing program)
2022/09/26 16:32:34 fetching corpus: 5800, signal 201419/260346 (executing program)
2022/09/26 16:32:34 fetching corpus: 5850, signal 202175/260948 (executing program)
2022/09/26 16:32:35 fetching corpus: 5900, signal 202636/261506 (executing program)
2022/09/26 16:32:35 fetching corpus: 5950, signal 203428/262091 (executing program)
2022/09/26 16:32:35 fetching corpus: 6000, signal 203943/262621 (executing program)
2022/09/26 16:32:35 fetching corpus: 6050, signal 204396/263137 (executing program)
2022/09/26 16:32:35 fetching corpus: 6100, signal 205059/263702 (executing program)
2022/09/26 16:32:35 fetching corpus: 6150, signal 205537/264207 (executing program)
2022/09/26 16:32:35 fetching corpus: 6200, signal 206162/264726 (executing program)
2022/09/26 16:32:35 fetching corpus: 6250, signal 206586/265229 (executing program)
2022/09/26 16:32:35 fetching corpus: 6300, signal 207024/265743 (executing program)
2022/09/26 16:32:36 fetching corpus: 6350, signal 207256/266246 (executing program)
2022/09/26 16:32:36 fetching corpus: 6400, signal 207548/266716 (executing program)
2022/09/26 16:32:36 fetching corpus: 6450, signal 208204/267190 (executing program)
2022/09/26 16:32:36 fetching corpus: 6500, signal 208962/267666 (executing program)
2022/09/26 16:32:36 fetching corpus: 6550, signal 209342/268147 (executing program)
2022/09/26 16:32:36 fetching corpus: 6600, signal 209763/268619 (executing program)
2022/09/26 16:32:36 fetching corpus: 6650, signal 210735/269022 (executing program)
2022/09/26 16:32:36 fetching corpus: 6700, signal 211100/269026 (executing program)
2022/09/26 16:32:36 fetching corpus: 6750, signal 211573/269026 (executing program)
2022/09/26 16:32:37 fetching corpus: 6800, signal 211950/269027 (executing program)
2022/09/26 16:32:37 fetching corpus: 6850, signal 212329/269027 (executing program)
2022/09/26 16:32:37 fetching corpus: 6900, signal 212747/269028 (executing program)
2022/09/26 16:32:37 fetching corpus: 6950, signal 213323/269028 (executing program)
2022/09/26 16:32:37 fetching corpus: 7000, signal 213852/269034 (executing program)
2022/09/26 16:32:37 fetching corpus: 7050, signal 214187/269034 (executing program)
2022/09/26 16:32:37 fetching corpus: 7100, signal 214985/269034 (executing program)
2022/09/26 16:32:37 fetching corpus: 7150, signal 215325/269034 (executing program)
2022/09/26 16:32:38 fetching corpus: 7200, signal 215711/269098 (executing program)
2022/09/26 16:32:38 fetching corpus: 7250, signal 216042/269138 (executing program)
2022/09/26 16:32:38 fetching corpus: 7300, signal 216583/269140 (executing program)
2022/09/26 16:32:38 fetching corpus: 7350, signal 216882/269145 (executing program)
2022/09/26 16:32:38 fetching corpus: 7400, signal 217333/269158 (executing program)
2022/09/26 16:32:38 fetching corpus: 7408, signal 217356/269158 (executing program)
2022/09/26 16:32:38 fetching corpus: 7408, signal 217356/269158 (executing program)
2022/09/26 16:32:40 starting 8 fuzzer processes
16:32:40 executing program 0:
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'wlan1\x00', {0x401}, 0xfffc})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @empty}, 0x286, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='batadv_slave_0\x00', 0x6, 0xffffffffffff8001, 0x5})
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"})
r0 = dup(0xffffffffffffffff)
r1 = openat(0xffffffffffffffff, &(0x7f0000001100)='./file0\x00', 0x400540, 0x80)
getsockname$inet(r1, &(0x7f0000001140), &(0x7f0000001180)=0x10)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001200)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x12, 0x0, 0x0, 0x0, 0x223a, &(0x7f00000011c0)='veth1\x00', 0x100000000, 0x6, 0x4})
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000001280)={@empty, @multicast1, 0x0, 0x4, [@multicast2, @empty, @local, @dev={0xac, 0x14, 0x14, 0x22}]}, 0x20)
recvfrom(r0, &(0x7f00000012c0)=""/211, 0xd3, 0x101, &(0x7f00000013c0)=@in6={0xa, 0x4e22, 0x44a, @remote, 0x9}, 0x80)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$binfmt_aout(r2, &(0x7f0000001680)={{0x107, 0x1f, 0x0, 0x32e, 0x3f, 0x400, 0x33, 0x8001}, "0692afe1203eda3f6369909e38ca2c5c06760b3440f84ee484b0d75afc31c51cbef44e4ff0e6417623a4e1ef545462aa6a42b26d88dadccec4bc8354a4d1e44c7f05e66fa5d32b56579256197452fb56e2a05f70a1a34ecb8e7be73b91f36fe93888482f01e20da3aefd89a9bf35f87b3af08f6483b2b9c1380dcb2f447db854a5153872c719cb99bd08db9620f3bc9fd4e2bde7cd1faee1a2a22edbd832183891faa3759b51558ec1746538d81bb31e0af81f307f51b6c8439ba0ae839e53302f24aa3f05bd35714947df4a3b554e9c4f65eb39bbbb374cb874dbc77b67a67c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb00)
r3 = creat(&(0x7f0000002180)='./file0\x00', 0x42)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000021c0)={'bridge0\x00', {0x2, 0x0, @remote}})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000002200)=0x10001)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000002240)='syzkaller0\x00')
timerfd_gettime(r3, &(0x7f0000002280))
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000022c0)={<r4=>r3, 0x0, 0x8c9, 0x5})
pidfd_getfd(r4, r1, 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002300)={'nat\x00', 0x0, [0x8, 0xa401, 0x0, 0x9, 0x1f]}, &(0x7f0000002380)=0x54)
accept4(0xffffffffffffffff, &(0x7f0000005880)=@generic, &(0x7f0000005900)=0x80, 0x100000)

16:32:40 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="0eedd8cdf123ba9312877b58f4dc95dc0ec8141ddc2d92a82a8cbbbffb0eb2a003a4496ddff7a3deb663bd3f35caef52af1d9a3cd0191b923dedb7239b96b4d870e39349936388406c72afc81c316c2b99d7f1eecdb52c77d68487f7a87e503f8eafef4742a41ba1d5cc73aeeead6e39da3c102974f21cfd8b8fec890b113af62a1c4597430e3d48855e00ba8256b03f23696eb353fca069e5475e833e0236c2c70b16826698168a9d9ff27031a9c11c2f737e8f20bb8c4d451d47c307f07d03a199d4cb031fc15aa6fa569b9f534badc846f2a0aaaac52e7cbc46a16e504105", 0xe0, 0x200}], 0x10001, &(0x7f00000001c0)={[{}, {@noblock_validity}, {@nogrpid}, {@acl}], [{@fowner_lt}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-@c-]'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xee00}}]})
r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0xa0000, 0x104)
inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x40000000)
r2 = syz_mount_image$nfs4(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x7, &(0x7f0000000840)=[{&(0x7f00000003c0)="5deba9faa592fbaf216cb0f5c2b44daea9d369e5d15e68ecb6c458923c697e4af376b019518954b3e8bff418ee4bdd8bc086a531811ad46fc0334965969e8ad34a93b372cdb0cf22527f1db2d7330a2493117714c3763c46c004dfc40f69f966ba697284ae507a35765f36bedeb7007d3f954ffee64fad8a5d6850f601761845c00e1272fda775acd69b9c3e512f788d0e280655e045634e6eec0488e974dc93add17e8e4a8bde1b4082c848b418c388d7b243946bc6f6ce0948b96ce7f203ba981963797cf245", 0xc7, 0x8}, {&(0x7f00000004c0)="f1b4b5ef05ff8cf2b927e5b96d29ec7e7f035a27085d317d83f935c691c2cfbdff99863c6a019b310fa08515ea5986766f7d3649d38b94633969f8e9205cdf3827a7686090f36884899e8ed7cf6e34f77f3c0159f00321a278847ff4b10fb6d7003222645a4463e4eddcf35532a4e10b7c4ab7595e96204fd000e697b7d15c3f1ddb12d943a3ba1055ebc4274c9160c6e1795e6d4d883d376958434c94cc4d1a7a345ce586b81cf25eb8", 0xaa, 0xfffffffffffffffe}, {&(0x7f0000000580)="bd63ffbdb13a4b4df342afae7a3f794f08871a29f564408c36733b8eae82d83aa93d9c84e50001ef9cb4094c4cf0655a964e6b52594daa9f76e67d1fe3546b0f359ff835341670bbfd8504000e554244bf1a090ce8941dde0850236336b065616c5f2553d3ce55efb5d44f32badda260cd7ae97fb95e6c69af0706de18335cb73b4d6bff052a7364e677320c7bfba0fc2b194d9dafe140c3cb1e68ebe2f233b884a4a8a5fa37ae439ad4b6e11fdd2fc0a1", 0xb1, 0x5}, {&(0x7f0000000640)="7f5498a9de5a7d2eae4c32993049d6f03fd183b437c965b7552ed0e5a2f79f8f9587b6f4ea52067ac7bcd3e935b5bf7757751d0e45ad748a4cc7521fe7a624201c9bded036cb656eab0cfed74170a547787114ac8156ecce38639480d885a90c803da7454d0413c4e3bbfae8dac487920c53", 0x72, 0x5}, {&(0x7f00000006c0)="21515ffb2146c1f47b7818b546571fc408d319a2d48221feaca55bd6e4d1aba4849ddf84e1a0ce234d7c0577269b0253d28d07b45d40f47aa48e7592ae3e738a73b50598361cc4dbb95d38", 0x4b, 0x1ff}, {&(0x7f0000000740)="977aacec7850baf7dbbb", 0xa, 0x4b15}, {&(0x7f0000000780)="e419fe7eb639158e93c990f5eeba7485fe6095d3a7e9a889a33598b35e93fc07fda25f9fe18ae7a9ceb221ab29f43910176866ddf3036b194ecdca40e95b06292b092ba7469b0028b96549dc609779b6e3952c12fa6fda57b03b6dbe544d4e26e35106c4ea76e43dca74c15f2aa315ceab94a836fd88d3055161bc2f4c989caa16f6b7fea0a42796fab5cfa88590a3380e04856adf259d265fb4f82fb04bba58", 0xa0, 0xc5ff}], 0x10, &(0x7f0000000900)={[{'noblock_validity'}, {'$^'}, {'%--'}, {'{/:}#+'}, {'-@c-]'}], [{@subj_role}, {@euid_gt={'euid>', 0xee00}}, {@fowner_gt}]})
renameat2(r0, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000980)='./file0\x00', 0x3)
close_range(r2, r2, 0x2)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x105102, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
mount(&(0x7f0000000a40)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='virtiofs\x00', 0xa0, &(0x7f0000000b00)='([)\x00')
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000001400)=0xc)
statx(r2, &(0x7f0000001440)='./file0\x00', 0x0, 0x100, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
syz_mount_image$tmpfs(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x80000001, 0xa, &(0x7f00000012c0)=[{&(0x7f0000000bc0)="fdaa731b02ee210507022f35858ce665e0f2a580d2aaf8ad7789ef2565acd4069f81aa93208c691f5e4ebf1cb6f5d3f87b9cac6e381b175a2df8568be4a6e270109469b8a707c1d7672a344e2d80cc2db99136bb859624ec597e90999f25c00323035fb048057132686574a9b2cef2a3231bd4c2ddb0d0b81949fb58b459608456d547", 0x83, 0x8}, {&(0x7f0000000c80)="f69fd734090386f2bb4c5c1a35f1febcef802db60f72b6403804d6359d38c56e19e10e8f75714239f88c05da457eb8171a0a441648e0264fd99ea24e9a990c7be34f6ec087fdd375ad20b27ecec584e24ff05231fa0e04331f8a3a01524dfae60b57f6ffac32addf4ff2ba5270b8523524bb04b9004817575e344414b1b442389930497307b6b9955dd1affef51fa766a110c06c35b517029ecf750bba0f16de67e229d1c522d36ac194ef27b5952989f505b7b71e8c5dc5780c06b2d1faf0590b50fbbffe92ac7d53bd05f62ea4296def1fc412bd96a17bf0615e9a65d08102b58e21722b1164df32ac49e5af88282063144dda", 0xf4, 0x8a}, {&(0x7f0000000d80)="debd9eb4da7e5180bf384f05f73e404faf14a29729a4b1ceb3921d5734d66aa37db632ec6a333101d161c241c504f4f280568253af701d32b7bf5b09272016ae4174fd0890aece8443639244c4150a04cdd604e6cc381fe77e97d910d3d92b63d46faeef41f7f1ce987286e8567bcd6bea810949f547c96260499a1706e9bc0410acc176e83158d89cc47505322b4fac9ae95333cf449241e52dbc8300e6184b2fd82768a1bfc53d5e3c288fb3a9714ba93eb1a1fc107aa8df76cca86764c260ec3b2f5598776d04e5f6a44f1838bc9474c079bad6ce0e42fb3c1f9955ab27fb36a758a374abaa779e", 0xe9, 0x7ff}, {&(0x7f0000000e80)="70271a3af678ca920f735239b3050ed6e73c1a0a21d2e0890562fc756bdb16d7132a998160c29053a207acffff18b7da49f0c5a970de8745c8d9ddcbfb57fcfb47cb8c90f43524d4c17389ca76265ae6ca2b067e63c156d294", 0x59, 0x200}, {&(0x7f0000000f00)="bce90e52db19aa84cabbe098cdc2cda3bd0141226d7152266ced0f1c62905f2e1cf7076385d9aa8abf8c190531599bea5784bd3aa59a41271de12e3bbc27c6ccbafe7a38feeb9e14a880c5e8b916cca3a28fcb90155b", 0x56, 0x7}, {&(0x7f0000000f80)="112718bbd2bad442925cb3c9b5fbbe4690490897fbbdad56bfc6bf63b9d47bb22160ea595178b51c3d55d9932dea71d6ac5aa9044ad6c5fb919af14954a147a39d496963e1e1608fa0271671cfc6665ebbc15251eb00194c3454a4627aef482e98cbedf4d129ad30a5021169af4766cc70e264255880f26e0da65f0da32da44124ca68b4d7670780033629377730cbd8feb1d5edffbb059904076ebc6e7afe4e7a49df79e0e24f1a4996ee7168c1ce8c663f4ad40e69ce8a2b1fa2c30b0b90ad705af7486fcff5b58bc987fcd6918c", 0xcf, 0x7f}, {&(0x7f0000001080)="471a708eb37e9a5cb4ad4b5b75b775fa00a46947339070afba30577b8883be9c902f6229b28592bfbdfc98dbc2764a28ee6badb761e2894d7e01680faca15346c87bb22e9721e6404fd93f50615e1ef6f0d6cca820bee5277498481cb12a147a92438704e2d9845a2adf29ed968bbbf2b8159ad7629fd01fcb05ea29281f409db730dbbfe31a6fa5105cbd63cc94df8f19ddbb0825dadb835ded646561d60fa4d4f41b4a2543bb27452ab933339b7c2f8ea7fb0b359e634b9ac73f135f4e0590c8fff9358e", 0xc5, 0x8}, {&(0x7f0000001180)="e3788698a9775aa76f7388d536b764ea", 0x10, 0x3}, {&(0x7f00000011c0)="64dd44d7a6a091d8cc35d0f9212c33cca1c324c26bf6601fa1b84e573a7e64a653f82d8d881a60095957831cad86baa43a04d9d88026e0b3c9be370d488e1f8b41370358fb1f10ec4089db5fd84715fa1e0a4b53558d61ba991de5e4bc7b15d79bc67d4519acac1d5f1710262cf0533a3e479c533fdc3a30c40e9b03b83818f3aed75b7b0dee40534797ea290018a6eb08c9cb", 0x93, 0xfffffffffffffc01}, {&(0x7f0000001280)="cc964b198c406fe247e3c1bde4fc62d2f96af991bba2", 0x16, 0xd99d}], 0x20000, &(0x7f0000001580)={[{@huge_never}, {@gid={'gid', 0x3d, r5}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, 0xee01}}, {@nr_blocks={'nr_blocks', 0x3d, [0x34, 0x70, 0x25, 0x33]}}, {@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}, {@gid={'gid', 0x3d, r6}}], [{@smackfshat={'smackfshat', 0x3d, '$^'}}, {@smackfshat={'smackfshat', 0x3d, ':'}}]})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r1)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c0}, 0x10)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8bf3099e10413c13}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x64, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x30}}}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="abdcc58f"}, @NL80211_ATTR_PMKID={0x14, 0x55, "ef7d9d0d067f2d5341355c95d5949e53"}, @NL80211_ATTR_PMKID={0x14, 0x55, "454cf08cde97a956ffae713a000d0688"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x12)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
pwritev(r8, &(0x7f0000001b80)=[{&(0x7f00000018c0)="e94fb3050031819bf5c6980f9ce6873dd95e0b2ef0f5476fe7720372e16e37d9ad2f5013371acca47992bdc48b9c2aeb05ef23cf256278c14e19d42b560adcbadb6b39a0d066ef749d5c29eb9be6c8956220e89ff054dd89cb2523e8e2972b96432a46298645b7292dcdcf2a9adae9e1b118b25159c82913c0caa55916142b412f3a9a020f0a7e8563337e88e9e02d06e0bf", 0x92}, {&(0x7f0000001980)="78f11af8a9f369d158bbafcfb642e773fde30af2ab2c7b8a7b36b4541812c96496ed2fdcb8e66f7de4935e5fe5f1c73c114fa30755ffcf255af5446b89491a5c21bf368fe2b6d81e33a03c6e1e4954bd6625fe70e666e63fb0d29fcfec45a14541e365d6204ea01343f450334704d997673424b30976cb32d820fe5bcfec2cbd122e4656e21472e4339d295e7a82b763043e2bd9c2a318b58db148213634064583420bab411ffe345a0390d23b4e39c62e23481cbfc17149dacee347155b87a9e5c30d955251a0fe50eaf0e92c2642339d6230e0aaa2b4dbe59eba557e942c25309e1db425b7a931c375e2a4619c5c7bc3dbc4", 0xf3}, {&(0x7f0000001a80)="b70843677b1ac6b1aa6e67fa53f3aa946077a6c2270dcde681b06ffb871e544a52910fa0c6e60cfcfec33e5369c42226fc1918d8c104ebd7bd0e939a3cbf5e32331c79fa214b4495e5369a4992cf55019960d8fbd8f544b8b36f736030110405373853f6683d034baf4d9e58b784006818526169c4e417972267d507ceb5fa83a5f402c0915e39c7312cd89c91b9889d151e1543bb2e8273eb710902bb24ed8b6a7293a5d82a6b810bc56f282be337b920533af51c9e93786cf1124d99da5b04b674428db69180b1c1ad0d3b74", 0xcd}], 0x3, 0x4, 0x2)
r9 = creat(&(0x7f0000001bc0)='./file0\x00', 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c40)={0xf8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x58, 0x3, "6781105edc98b01c9530473f3b2547f56dd7d68ef8c7ad423c2deabca6e4f12d3682447b678137944dc1d702fa89dab63c318537a75a0664b8494848ba295ce646a4f0b41facc64ddeea7a8ededc97e14eac2c61"}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x850}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), 0xffffffffffffffff)

16:32:40 executing program 4:
getrusage(0x1, &(0x7f0000000000))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r0=>0x0})
wait4(r0, &(0x7f0000000140), 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r1 = clone3(&(0x7f00000003c0)={0x203190100, &(0x7f00000001c0)=<r2=>0xffffffffffffffff, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0, {0x23}, &(0x7f0000000280)=""/49, 0x31, &(0x7f00000002c0)=""/155, &(0x7f0000000380)=[r0], 0x1}, 0x58)
waitid(0x2, r3, &(0x7f0000000440), 0x1, &(0x7f00000004c0))
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000007c0), 0x440a82, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r6=>r2, {0x1}}, './file0\x00'})
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000840), 0x210000, 0x0)
r8 = signalfd4(r2, &(0x7f0000000880)={[0x8]}, 0x8, 0x0)
r9 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000b80), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, <r10=>r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
r11 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r12 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000c00)={{0x1, 0x1, 0x18, <r13=>r2}, './file0\x00'})
getresuid(&(0x7f0000000c40)=<r14=>0x0, &(0x7f0000000c80), &(0x7f0000000cc0))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc, &(0x7f0000000780)=[{&(0x7f00000005c0)={0x12c, 0x15, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0xc, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="78fbcac479aa9c2d6ddf81cbe429b6d6143bc80d23172075cd4bdae2bb6411a524dd6066c1d585c2ab3f4a905fdfd307b1f5ce345f63f295e4c9ea5c7f1314d9894aa86ac480071f8ed586c4424c2bc47840e1f4480ea8366919c912d57813745c6c5eb3fbdcac3aebcf1a7223ea5ec540caa673d28ee16bf68ecf69c5aeef3635a9d6e47228f2359c77e1aa93effad43301a42e0d11cb6b084769228cc9f1c00a18ac75c7efe93c09a263acdc2d656277518c4dce3937d7ced1e49c641320425db662aa0e3f7a833f07ddcd03d053de575f46049dfae5a1a232914dd36734b392e538413298ff563d156828da7cf51512833b", @typed={0xa, 0x6b, 0x0, 0x0, @str='&/\'\\.\x00'}]}, 0x12c}, {&(0x7f0000000700)={0x6c, 0x21, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@generic="d2641d2207bf4b63d2a2809531679f3d238834812451aaa5ab4760fa41ac056b52a013723081871ba04e895501adde0012c085328cd9c75dc14fbcef1e617751112d450ed9452370838d9db81c96d3b978345a3bd8332bc3d78e9be2"]}, 0x6c}], 0x2, &(0x7f0000000d00)=[@rights={{0x28, 0x1, 0x1, [r2, r2, r2, r5, r6, r7]}}, @rights={{0x28, 0x1, 0x1, [r2, r2, r8, r9, r2, r10]}}, @rights={{0x1c, 0x1, 0x1, [r11, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r2, r13, r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, r14}}}], 0xd8, 0x40004}, 0x4000)
ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000e40)={0x0, 0xfffffffffffffff7, 0x1, [0x6, 0x9, 0x6, 0xffffffff, 0x2], [0x8, 0x9, 0x100000001, 0x8, 0xfffffffffffffff8, 0x6, 0x3ff, 0x4, 0x6, 0x5, 0xf, 0x4e, 0x1ff, 0xa10, 0x401, 0x100, 0x1, 0xdbd, 0x3, 0x100000000, 0x1, 0x40, 0x1000, 0x98cb, 0x1, 0x7fff, 0x4, 0x2, 0x81, 0x8, 0x1, 0x0, 0xfff, 0x8, 0x94b, 0x5, 0x8, 0x7, 0x0, 0x6b, 0x8, 0x8, 0x6c5, 0x2, 0x1ff, 0xfff, 0x20, 0x1, 0x4, 0x7fff, 0x8001, 0x7, 0x3f, 0x6, 0x0, 0x100000000, 0x7ff, 0x6, 0x401, 0x0, 0x80, 0x4, 0xd9, 0x1, 0x2, 0xffff, 0x7fffffff, 0x0, 0xfffffffffffffffd, 0xffff, 0x9, 0x8, 0x2400, 0x101, 0x4800000000000, 0xb15, 0x2, 0x3, 0x1, 0x7f, 0x8001, 0x400, 0xfffffffffffffd31, 0xdf, 0x6, 0x8, 0x2, 0x6, 0x6, 0x1, 0x4793, 0x7f, 0x4f2, 0x80000001, 0x73d, 0x101, 0x7, 0x0, 0x2, 0x0, 0x2, 0x7, 0x4, 0x81, 0x1, 0x5, 0x6, 0x6, 0x8, 0x5, 0x36c, 0x8, 0xc7f, 0x4, 0x101, 0x48db, 0x7, 0x40, 0x4, 0x80000001, 0x7]})
fallocate(r11, 0x40, 0x0, 0x4)
ioctl$sock_inet6_tcp_SIOCINQ(r13, 0x541b, &(0x7f0000001280))

16:32:40 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xb91]}, 0x8)
ioctl$KDMKTONE(r0, 0x4b30, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/69)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
vmsplice(r2, &(0x7f0000000300)=[{&(0x7f0000000140)="ab7ea2f630cc64c15e5e1529c752a61b5cffa79b6ed6703851700057c016cb39b7d3df10ff34cf163fd93f6b921d95e9b8c15f260ee04d91aeb8b32c9ef747c2669ba02139fa05fd24e6c102ebe8aa94f418eb925bed5e059fe77962073d43a4acba7b66de035ad321443fcda48610a3a0aa34548f382eee35234c287136f6ffacd1c43198fe", 0x86}, {&(0x7f0000000200)="154757544e4157b3ddacc11eba40aa4f6402552258b95eaad290b1675f5ea20201c36cbe1b937345cd6b9f327ef92f56ec79d02618b370eb64575583e54767f8e51d334fc37cedef619fbab5c32028bacd5f726d864cc089cd507b8d70b51d1ac8c84e69b1788335b300886603079a1ea224ebdf7be2c5a8870576823382f7f52926d7fbcd00579ad75211c9e31aa3dc89449cfc4e8f9d532c3df80f5528e8d60f54883d29124eeabdf2364ca2c4a8c731fed3cb0b379264f51c71534f9134d938b690483154144d554b06be0f02b1261ebebaa8836e6eafa2f04752", 0xdc}], 0x2, 0x13)
ioctl$TCGETA(r3, 0x5405, &(0x7f0000000340))
r4 = open(&(0x7f0000000380)='./file0\x00', 0x202000, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x20010, r4, 0x0)
ioctl$TCFLSH(r4, 0x540b, 0x0)
write$tcp_congestion(r3, &(0x7f00000003c0)='hybla\x00', 0x6)
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000400))
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000440)='highspeed\x00', 0xa)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000480)=0xf)
r6 = syz_io_uring_setup(0x6704, &(0x7f00000004c0)={0x0, 0xeea7, 0x1, 0x2, 0x1e4, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000005c0), &(0x7f0000000600), 0x2, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000680)=[r3, r1, r0, 0xffffffffffffffff, r7, r1], 0x6)

16:32:40 executing program 3:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00', <r0=>0x0})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan0\x00'})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3f}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xdd5924bc4be0f300}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000841}, 0x44001)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc4880)
sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4800)
sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004041)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', <r7=>0x0, 0x29, 0x8, 0x3, 0xffffffc1, 0x2b, @remote, @local, 0x8000, 0x20, 0x1ff, 0xd51}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001e80)={'sit0\x00', &(0x7f0000001e00)={'syztnl2\x00', <r8=>0x0, 0x29, 0x6, 0x40, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x700, 0x0, 0xaa1}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001ec0)={'batadv_slave_1\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001f80)={'syztnl2\x00', &(0x7f0000001f00)={'syztnl1\x00', <r10=>0x0, 0x29, 0x20, 0x4, 0x4, 0x31, @empty, @mcast1, 0x80, 0x8000, 0x4, 0xffffffff}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000780), 0xc, &(0x7f0000002140)={&(0x7f0000001fc0)={0x178, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000021c0)={r9, 0x1, 0x6, @random="0951dbba1a46"}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

16:32:40 executing program 5:
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0x1)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0x8000)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080))
r1 = syz_io_uring_setup(0x1f18, &(0x7f00000000c0)={0x0, 0x4388, 0x0, 0x0, 0x3be}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6)
r2 = fsmount(0xffffffffffffffff, 0x1, 0xb)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000001c0)=0x6)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x100, 0x3, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x12}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x50}, 0x1, 0x0, 0x0, 0x80080}, 0x40000)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000340)={0x0, 0x5, 0xc37b, 0x912})
r3 = openat$incfs(r2, &(0x7f0000000380)='.log\x00', 0x82040, 0x110)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/class/drm', 0x0, 0x64)
renameat2(r3, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000440)='./file0\x00', 0x2)
ftruncate(r4, 0x9)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800002, 0x8010, r3, 0xeb197000)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r0)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x164, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5838}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x23f2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2a}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0xc5, 0x0}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4040}, 0x800)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000780)={0x83, 0x0, &(0x7f0000000740)=[r2, 0xffffffffffffffff]}, 0x2)

16:32:40 executing program 6:
umount2(&(0x7f0000000000)='./file0\x00', 0x2)
connect(0xffffffffffffffff, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x3ff, @empty, 0x94d3}, 0x80)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x224, r0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x91, 0x5, "5f5775c5bf76c2c3d854b714aae61582726615e178e6441574e98891b73a64d99cd1ac994d67b755ffa2deadecd44ec3fb95b0f65068a1418721e97af12fac0cded3a8774083d2feada71f876a49030e5ab9cb02dedea88db483ed722bef22e2f813f92afa0fcb8c099832397b07b3b4715694d1b2f905906b4a5110ae2165981bb95fda01bd623a7cc6cf384a"}, @ETHTOOL_A_BITSET_MASK={0xe5, 0x5, "9b1c38fcc496b5f1a54ba08337f8eff4de8ccdafc67c5ee29ec94cce88845e3a75f5756b42ec9646f4599e5de2cbb04cd40aaf81dfa5c25af260df5ce79bfd573c02a375a246c088120b371d43ed6c6186f3dccf3fe8c78bc17a40ff77b7c61703aeca93c868a49afcdafe5e07d3f1cec68d139f77a4aec63e911e875667bcbade35d3c4348aa6cec2c5b4640bffbe9c120dc825e0de7bc8a6ce82ee3265ebc333a410c45f3a4fadeb580f7d9a3b1793bd67bb2d1f82f227e6641e43ef4e26f2f84556c8828af3a69e1660128678cc99e17d4dcd7639fc69d0788f63c54b386a07"}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x8814}, 0x4000)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x301000, 0x0)
mknodat(r1, &(0x7f0000000440)='./file0/file0\x00', 0x8000, 0x101)
lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
r4 = getuid()
lchown(&(0x7f0000000540)='./file0\x00', r4, r3)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000014)
lchown(&(0x7f00000006c0)='./file0\x00', r2, 0xee01)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000c00)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000d00)=0xe8)
syz_mount_image$iso9660(&(0x7f0000000700), &(0x7f0000000740)='./file0/file0\x00', 0x5, 0x4, &(0x7f0000000a40)=[{&(0x7f0000000780)="bbea2cfa61b24888636ce83ce445bca43cb38a8a05343ed9865eb8f941b8c79fece4d41103edf829b0116f881d97944de47dd17424638ac623e3e9438bd67d6709e4bae1b1be0bd02a3b315d348145382a57d91f6b8fbbd719761b3e0ab45090a6da64ea8c424c344c8c73e95480f711769073110fb83ce02cb01e8504a36eda6c16ca04905e8b8fa94ea0c8eba1b035f862b34dcc10d381f37346610402fa2171d6ebc7dafa79e8b37ea55f92e9da7545833544fbcc9352f7f8af2d70adec47f59c8e4098c07a75e566e2567f5cb349c7472c5f8b7d057f711e", 0xda, 0x6}, {&(0x7f0000000880)="135f02a22185323ca446a504cd05ea38e24389a0bbdaeda241bd29695ca3fa0fceea5a2a76c8346c8e", 0x29, 0x9}, {&(0x7f00000008c0)="f701c0b7c86d76a7e55f1022496300938bda7c824b8b065c10515e985819d92565b06df3803ac59fea0ed8599527f7132fb63c7b7a60c796c76aa99517ce6cff534f1cc198e0f1977ca584ea2cb21aef0ce5ced972176ce7f33068bca692daabecdb73030d65a920e837df8f7f827dcff18adc8d", 0x74, 0x38f6}, {&(0x7f0000000940)="3fb8f7d7165af85c76b57273ecbd33ec56b7f3424a41efcdd66246b051692544f279c711da13836ea6ab2ddab6202972f962b362b32d32c7119a5f894f7c907eb3bfb6f756bc27dc7e685d2a6757724a4cc73f31838b91d303783007374b3c882b98b257d81532bc17142424485bce9ab31b571c412273ead443f0efd4b1d988c13863fc0a0c93c67328100ed5594c2fdf06bbf1b297c3e82efe2d813fd71b0fa3db4fc62ef053a5a6335359af1d84fc5e13f35e7ebb429d0600ad9cfa647291f7aa2788f3eb88b304084a9f56bcf28a572c4db0ce0920435d80b88ac9a6d1eece", 0xe1, 0x9}], 0x2000000, &(0x7f0000000d40)={[{@hide}, {@uid={'uid', 0x3d, r5}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x31}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ethtool\x00'}}]})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/tty/ldiscs\x00', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000e40)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000f40)=0xe8)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000f80)={r8, 0x1, 0x6}, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001000), r7)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, r9, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000091}, 0x81)
sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x20, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x20, 0x34}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000)

16:32:40 executing program 7:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x2, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2741}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe89d}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x9}}, './file0\x00'})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe0000000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x481, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000440)={0x548, r3, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x6a}}}}, [@NL80211_ATTR_TX_RATES={0x520, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x158, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x7}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x1}, {0x7}, {0x4, 0x2}, {0x2}, {0x0, 0x8}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x6}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x4}, {0x0, 0x2}, {0x7, 0x5}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x9}, {}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x4, 0x4}, {0x2, 0x9}, {0x1, 0xa}, {0x6}, {0x6, 0x7}, {0x6, 0x4}, {0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x2}, {0x5, 0xa}, {0x5, 0x6}, {0x6, 0x2}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x7}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x6, 0xa}, {0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x5, 0x3}, {0x7, 0x9}, {0x1, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x3, 0x5}, {0x7, 0x4}, {0x0, 0x2}, {0x1}, {0x7, 0x9}, {0x5, 0x2}, {0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x6, 0x4}, {0x1}, {0x5, 0x4}, {0x5}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x1, 0x1, 0x3, 0x0, 0xff, 0x1]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x2}, {0x6, 0x8}, {0x5, 0x4}, {0x4, 0x5}, {0x0, 0x9}, {0x0, 0x1}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x9}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0x4}, {0x4}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0xa}, {0x6, 0x4}, {0x6, 0x1}, {0x6, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x7, 0x2}, {0x4, 0x4}, {0x4}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x7}, {0x6, 0x5}, {0x4, 0x8}, {0x4, 0x9}, {0x3, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x5, 0xa}, {0x0, 0x4}, {0x3, 0x5}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x9}, {0x5}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x4}, {0x7, 0x8}, {0x4, 0x9}, {0x6, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6}, {0x4, 0x3}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x6, 0xa}, {0x3, 0x7}, {0x5, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x6, 0x5}, {0x4, 0xa}, {0x7, 0xa}, {0x0, 0x6}, {0x3, 0x3}, {0x3, 0x3}, {0x0, 0x8}, {0x2, 0x5}, {0x4, 0x7}, {0x6, 0x9}, {0x1, 0x4}, {0x0, 0x7}, {0x2, 0x6}, {0x6}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x16, 0x2, 0xc, 0x6c, 0x24, 0x36, 0x1b, 0x9, 0x36, 0x1b, 0x46, 0x30, 0x6, 0x9, 0xc, 0x6, 0x18, 0x4, 0x18, 0x1b, 0x1b, 0x30, 0x1, 0x1, 0x1, 0x9]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x18, 0x6, 0xc, 0x5, 0x30, 0x18, 0x6, 0x60, 0xc, 0xc, 0xc, 0xc, 0x12, 0x2]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x3, 0x18, 0x2, 0x18, 0xc, 0x6c, 0x9b632c1b823e79ca, 0x6, 0xb, 0x5, 0x6c]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x7}, {0x4, 0x7}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x9}, {0x4, 0x3}, {}, {0x4, 0x6}, {0x7, 0x6}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x7, 0x2}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x8}, {0x4, 0x9}, {0x5}, {0x4, 0x5}, {0x2, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x1}, {0x6}, {0x4, 0x1}, {0x4, 0x5}, {0x3, 0x5}, {0x7, 0x5}, {0x6, 0xa}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0xa}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x3}, {0x6}]}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x7}, {0x3}, {0x5, 0x7}, {0x0, 0x7}, {0x3, 0x6}, {0x2, 0x9}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x4}, {0x2, 0x1f}, {0x3, 0x4}, {0x5, 0x2}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0x4}, {0x3, 0x16}, {0x5}, {0x5}, {0x2, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x7, 0x5}, {0x3, 0x4}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x8}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x5}, {0x7, 0x3}, {0x6, 0x2}, {0x1, 0x9}, {0x0, 0x5}, {0x3, 0x1}, {0x6, 0x4}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x3}, {0x4, 0x3}, {0x4, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0x1}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x36, 0x5, 0x1b, 0x60, 0x48, 0x0, 0x1, 0x30, 0x48, 0x30, 0x6c, 0x6c, 0x6c, 0x1b, 0x3, 0x60, 0x18, 0x1b]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x7}, {0x6, 0x9}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0x3, 0x6}, {0x5, 0xa}, {0x5, 0x7}, {0x3, 0x9}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x1}, {0x2}, {0x7}, {0x4, 0x8}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x8}, {0x7}, {0x3, 0x9}, {0x5, 0x4}, {0x4, 0x1}, {0x3}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x0, 0x3}, {0x1, 0x5}, {0x3, 0x9}, {0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x0, 0x1}, {0x6, 0x2}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0x2}, {0x7, 0xa}, {0x0, 0x5}, {0x6, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x2, 0x2}, {0x1, 0x2}, {0x3, 0x5}, {0x4, 0x5}, {0x1, 0xa}, {0x2, 0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x5, 0x3}, {0x6, 0x5}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x4, 0x3, 0x95d, 0xcba1, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x148, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x1194, 0x9, 0x4, 0x8, 0x18a, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x1, 0x0, 0x0, 0x8000, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x5}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x18, 0x7c, 0x60, 0x30, 0x9, 0xc, 0x4, 0x24, 0x6c, 0x12, 0x24, 0x30, 0x3, 0x3, 0x6, 0xf, 0x12, 0x36, 0x5, 0x1, 0x30, 0x3, 0x18, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x9}, {0x1}, {0x0, 0x8}, {0x7, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {}, {0x6, 0x3}, {0x3, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x6, 0x4}, {0x7, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x2, 0x3}, {0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x4, 0x8}, {0x4, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x6}, {0x4, 0x5}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x5}, {0x2, 0x8}, {0x7, 0x6}, {0x0, 0x4}, {0x7, 0x1}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x5, 0x6}, {0x4, 0x8}, {0x7, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x3, 0x1}, {0x6, 0x6}, {0x2}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x60, 0x1, 0x2, 0x60, 0x9, 0x1, 0x0, 0x1b, 0x24, 0x36, 0x6c, 0x3, 0x30, 0xb, 0x5, 0x1b, 0x9, 0x2]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x1}, {0x4, 0x3}, {}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x4}, {0x7, 0x3}, {0x6, 0xa}, {0x1}, {0x3, 0x6}, {0x4, 0xa}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x6, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x6, 0x2}, {0x0, 0x7}, {0x3}, {0x0, 0x9}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0x5}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x8}, {0x0, 0x3}, {0x6, 0x5}, {0x7, 0x1}, {0x2, 0x7}, {0x2, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x2, 0x1}, {0x5, 0xa}, {0x2, 0x3}, {0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x7}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0xa}, {0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x9}, {0x1, 0x8}, {0x7, 0x2}, {0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x4}, {0x2, 0x5}, {0x5, 0x3}, {0x7, 0x3}, {0x4}, {0x5, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x1, 0x4}, {0x4, 0x8}, {0x5, 0x3}, {0x1, 0x13}, {0x7, 0x6}, {0x7, 0x7}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x4}, {0x7, 0x7}, {0x5}, {0x3, 0x1}, {0x3, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x7d, 0x1, 0x9, 0xb, 0x31, 0x12, 0xc, 0x12, 0x24, 0x9, 0x60, 0xc, 0x9, 0xb, 0x5, 0x1b, 0x24, 0x16, 0x18, 0x18, 0x1b]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e5, 0x3, 0x4ff, 0xffff, 0x1, 0x400, 0xd]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x30, 0x1, 0x36, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x7, 0x1, 0x81, 0x9, 0xfff9, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x7fff, 0x7, 0x400, 0x12, 0x7, 0x53]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x9, 0x30, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x6, 0x0, 0x316, 0x7f, 0xff01, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x36, 0x2, 0x9, 0x9, 0xb, 0x1, 0x30, 0xc, 0x36, 0x6c, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xccb, 0xff, 0x8, 0x5, 0x89, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x6, 0x4, 0x66, 0x8, 0x7, 0xa12]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0x8}, {0x6, 0x2}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xffe6, 0x1280, 0x7, 0x800, 0xff, 0xd2f, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x1, 0x0, 0xdac, 0xa19f, 0x400, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x25a, 0x7, 0xfe00, 0x3faf, 0xbc, 0x400, 0x3f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x30, 0x2, 0x1b, 0x12, 0x5, 0x1, 0x16, 0x5, 0x12, 0x3, 0x30, 0x18, 0x30, 0xc, 0x2, 0x30, 0xb, 0x36, 0x30, 0x1, 0x2, 0x18]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x4}, {0x1, 0x7}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x6}, {0x5}, {0x5, 0x1}, {0x0, 0x3}, {0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x76, 0x0, 0x5, 0x1ff, 0x7fff, 0x7f4, 0x81, 0x4]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{}, {0x7, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0xa}, {0x4, 0x3}, {0x6}, {0x0, 0x9}, {0x6, 0x9}, {0x2, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x1, 0x3}, {0x1}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x4}, {0x0, 0x7}, {0x7}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x7}, {0x2, 0x2}, {0x5, 0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x4}, {0x0, 0x6}, {0x5, 0xa}, {0x4, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x48, 0x1, 0x18, 0x48, 0xc, 0x1b, 0x60, 0x18, 0x12, 0x12, 0xc, 0x5, 0x48, 0x24, 0x1b, 0x6c, 0x69, 0x5, 0x12]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x1}, {0x3, 0x7}, {0x7, 0x2}, {0x3, 0x5}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x8}]}]}]}]}, 0x548}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000004)
syz_io_uring_complete(0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004004)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x44000, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x27}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0xc080)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)
r5 = syz_open_dev$vcsa(&(0x7f0000000dc0), 0x7, 0x1)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x74}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x51}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb58}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x15)
r6 = accept$unix(r1, &(0x7f0000000f40)=@abs, &(0x7f0000000fc0)=0x6e)
close_range(r4, r6, 0x0)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x18, 0x3f9, 0x100, 0x70bd2d, 0x25dfdbfc, {0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40004)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001100))
ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000001300)={{r0}, "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"})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x380000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20000001)

[   77.198700] audit: type=1400 audit(1664209960.449:6): avc:  denied  { execmem } for  pid=288 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   78.440720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.442482] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.445811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.448790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.450598] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   78.451990] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.456571] Bluetooth: hci0: HCI_REQ-0x0c1a
[   78.526494] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.527951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.530777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.532213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.533853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   78.535907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.537316] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.538455] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.539633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.540938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   78.543609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.544261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.546574] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   78.548146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.549496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.549614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   78.555698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   78.561585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   78.563353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.564600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   78.566012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.566495] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.567198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.570642] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   78.570891] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   78.572752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.574877] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   78.577718] Bluetooth: hci3: HCI_REQ-0x0c1a
[   78.579902] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   78.581240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.587116] Bluetooth: hci4: HCI_REQ-0x0c1a
[   78.592516] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   78.593536] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   78.594582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.594689] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   78.595822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   78.596943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.606414] Bluetooth: hci1: HCI_REQ-0x0c1a
[   78.610776] Bluetooth: hci5: HCI_REQ-0x0c1a
[   78.630990] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   78.632447] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   78.636203] Bluetooth: hci2: HCI_REQ-0x0c1a
[   78.636590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   78.639423] Bluetooth: hci6: HCI_REQ-0x0c1a
[   78.655049] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   78.668218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   78.669744] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   78.670981] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   78.701501] Bluetooth: hci7: HCI_REQ-0x0c1a
[   80.467901] Bluetooth: hci0: command 0x0409 tx timeout
[   80.659116] Bluetooth: hci1: command 0x0409 tx timeout
[   80.659702] Bluetooth: hci2: command 0x0409 tx timeout
[   80.660174] Bluetooth: hci5: command 0x0409 tx timeout
[   80.660659] Bluetooth: hci6: command 0x0409 tx timeout
[   80.661126] Bluetooth: hci4: command 0x0409 tx timeout
[   80.661602] Bluetooth: hci3: command 0x0409 tx timeout
[   80.722727] Bluetooth: hci7: command 0x0409 tx timeout
[   82.514690] Bluetooth: hci0: command 0x041b tx timeout
[   82.706755] Bluetooth: hci3: command 0x041b tx timeout
[   82.707244] Bluetooth: hci4: command 0x041b tx timeout
[   82.707696] Bluetooth: hci6: command 0x041b tx timeout
[   82.708099] Bluetooth: hci5: command 0x041b tx timeout
[   82.708501] Bluetooth: hci2: command 0x041b tx timeout
[   82.708928] Bluetooth: hci1: command 0x041b tx timeout
[   82.770699] Bluetooth: hci7: command 0x041b tx timeout
[   84.562696] Bluetooth: hci0: command 0x040f tx timeout
[   84.754742] Bluetooth: hci1: command 0x040f tx timeout
[   84.755207] Bluetooth: hci2: command 0x040f tx timeout
[   84.756173] Bluetooth: hci5: command 0x040f tx timeout
[   84.756721] Bluetooth: hci6: command 0x040f tx timeout
[   84.757244] Bluetooth: hci4: command 0x040f tx timeout
[   84.757801] Bluetooth: hci3: command 0x040f tx timeout
[   84.818730] Bluetooth: hci7: command 0x040f tx timeout
[   86.610735] Bluetooth: hci0: command 0x0419 tx timeout
[   86.802737] Bluetooth: hci3: command 0x0419 tx timeout
[   86.803184] Bluetooth: hci4: command 0x0419 tx timeout
[   86.803758] Bluetooth: hci6: command 0x0419 tx timeout
[   86.804129] Bluetooth: hci5: command 0x0419 tx timeout
[   86.804695] Bluetooth: hci2: command 0x0419 tx timeout
[   86.805219] Bluetooth: hci1: command 0x0419 tx timeout
[   86.866734] Bluetooth: hci7: command 0x0419 tx timeout
16:33:37 executing program 7:
r0 = syz_io_uring_setup(0x5e2a, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_enter(r0, 0x824, 0xecf9, 0x0, &(0x7f0000000180)={[0x6]}, 0x8)
syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf}, 0x9)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)

16:33:37 executing program 7:
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
chmod(&(0x7f0000000000)='./file1\x00', 0x1)
mount$9p_fd(0x0, &(0x7f0000002000)='./file1\x00', &(0x7f0000002040), 0x100000, &(0x7f0000001600)=ANY=[@ANYBLOB="7472616e7356008000006f3d0000008e69ada472df31ccc93591b4edddc637a77bca496a816a8eabaa0d2f334696556257e60d7ce3b080e3877455cd41624127fac784eb870aeabd8f2f436ca2d748998ada303db98fa2310074ea3d237705a58c6dfcec3cdceee2bad07c54dd6ec40e8a28d3ede67de4190601383a5b914f0906fca1f134785804f4e99679640b8abe4d449f499f23ec8888d7f7bcfad43854e1ceb6fb6b8f81590fd864ad04d8804d63e3e4178037818b45ca650e579433c720edf0f40e9422f21a653fd7bf71c989652f3f6226dd9750ddc61e85388d27c261fdcc", @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESHEX, @ANYBLOB=',noextend,\x00'])
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x661)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xed, 0x4200)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3, 0x1, &(0x7f0000000140)=[{&(0x7f0000001380)="6149d2f3ce1382c3756d6c8303c5e33e090f30352058e0dd9719b0b00b451bc1269487d2f06527aeff22db3c9814a5cecd98582796ca92396b2bd525ddec16f665c72e161262e1f3464c5dba323b9d3e9fa9161051fe45885b95b61fdfb2694111621b467f25ce6214ed2f3cb4663f4b773f8f2441c299e8759da3d9a5d9003dd4fc59bf3d2bc2a8f63f1d469d58f2ce88773daac3a1073fe8d111003ec4c178d5", 0xa1, 0x7f6}], 0x44676dfc9cd0556b, &(0x7f0000001440)={[{@shortname_mixed}, {@shortname_lower}, {@utf8no}, {@rodir}, {@utf8}, {@fat=@check_strict}, {@utf8}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x3b}}]})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file1\x00'})

[  134.242276] loop7: detected capacity change from 0 to 7
[  134.263234] loop7: detected capacity change from 0 to 7
16:33:37 executing program 7:
r0 = fsmount(0xffffffffffffffff, 0x1, 0x81)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x464000, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
r3 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r3, @ANYBLOB='n/file0\x00'])
statx(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r5, @ANYBLOB='n/file0\x00'])
newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x800)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x3, r2}], {0x4, 0x4}, [{0x8, 0x6}, {0x8, 0x9e708f2ff88a1a40}, {0x8, 0x6, r3}, {0x8, 0x3}, {0x8, 0x4, r4}, {0x8, 0x2, r5}, {0x8, 0x4, r6}, {0x8, 0x4, 0xee01}], {0x10, 0x2}, {0x20, 0x6}}, 0x6c, 0x1)
r7 = syz_io_uring_setup(0x5a6d, &(0x7f00000014c0)={0x0, 0x0, 0x1, 0x5, 0x4e, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000))
syz_io_uring_setup(0x42a5, &(0x7f00000000c0)={0x0, 0xd8a8, 0x8, 0x0, 0x12a, 0x0, r7}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140))

16:33:37 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21)
mount(&(0x7f0000000240)=ANY=[@ANYBLOB="440a2dfab6ee34d3d2a0"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00')
pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40)
syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x4494, 0x2, 0x1, 0x254, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0))
r4 = memfd_create(&(0x7f0000000440)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\xe3g\v\xca(\x96\xe1C\xdf\x1c\xea\x85CD1\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r,\x87\xe6]^j\xcd\x06\xea\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfeW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\x7f\n\x1a\xda.\x94kJ\xe2\x82_\x8905\xcc\xb0\xc6\x94\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba`\x14\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3\x04\x00\x00\x00T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f 4|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bwEI\xb1\x00'/567, 0x0)
syz_io_uring_setup(0x7d8d, &(0x7f00000007c0)={0x0, 0xb5f1, 0x20, 0x3, 0x1b5}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000840), &(0x7f0000000880))
fallocate(r4, 0x8, 0x0, 0x8800000)
syz_io_uring_setup(0x6972, &(0x7f0000000340)={0x0, 0xea37, 0x10, 0x0, 0x19f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="315ec9"])
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000019c0))
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, 0x0, 0x100000)

[  134.794552] audit: type=1400 audit(1664210018.045:7): avc:  denied  { open } for  pid=3849 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  134.796056] audit: type=1400 audit(1664210018.045:8): avc:  denied  { kernel } for  pid=3849 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  134.809270] ------------[ cut here ]------------
[  134.809296] 
[  134.809300] ======================================================
[  134.809303] WARNING: possible circular locking dependency detected
[  134.809308] 6.0.0-rc6-next-20220923 #1 Not tainted
[  134.809314] ------------------------------------------------------
[  134.809318] syz-executor.7/3850 is trying to acquire lock:
[  134.809324] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  134.809367] 
[  134.809367] but task is already holding lock:
[  134.809370] ffff88801bbb6420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  134.809399] 
[  134.809399] which lock already depends on the new lock.
[  134.809399] 
[  134.809402] 
[  134.809402] the existing dependency chain (in reverse order) is:
[  134.809405] 
[  134.809405] -> #3 (&ctx->lock){....}-{2:2}:
[  134.809419]        _raw_spin_lock+0x2a/0x40
[  134.809438]        __perf_event_task_sched_out+0x53b/0x18d0
[  134.809451]        __schedule+0xedd/0x2470
[  134.809464]        schedule+0xda/0x1b0
[  134.809477]        futex_wait_queue+0xf5/0x1e0
[  134.809489]        futex_wait+0x28e/0x690
[  134.809499]        do_futex+0x2ff/0x380
[  134.809508]        __x64_sys_futex+0x1c6/0x4d0
[  134.809518]        do_syscall_64+0x3b/0x90
[  134.809535]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  134.809547] 
[  134.809547] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  134.809561]        _raw_spin_lock_nested+0x30/0x40
[  134.809578]        raw_spin_rq_lock_nested+0x1e/0x30
[  134.809592]        task_fork_fair+0x63/0x4d0
[  134.809608]        sched_cgroup_fork+0x3d0/0x540
[  134.809622]        copy_process+0x4183/0x6e20
[  134.809633]        kernel_clone+0xe7/0x890
[  134.809645]        user_mode_thread+0xad/0xf0
[  134.809655]        rest_init+0x24/0x250
[  134.809667]        arch_call_rest_init+0xf/0x14
[  134.809685]        start_kernel+0x4c1/0x4e6
[  134.809699]        secondary_startup_64_no_verify+0xe0/0xeb
[  134.809714] 
[  134.809714] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  134.809727]        _raw_spin_lock_irqsave+0x39/0x60
[  134.809745]        try_to_wake_up+0xab/0x1930
[  134.809758]        up+0x75/0xb0
[  134.809772]        __up_console_sem+0x6e/0x80
[  134.809788]        console_unlock+0x46a/0x590
[  134.809804]        vprintk_emit+0x1bd/0x560
[  134.809819]        vprintk+0x84/0xa0
[  134.809835]        _printk+0xba/0xf1
[  134.809847]        kauditd_hold_skb.cold+0x3f/0x4e
[  134.809863]        kauditd_send_queue+0x233/0x290
[  134.809878]        kauditd_thread+0x5da/0x9a0
[  134.809892]        kthread+0x2ed/0x3a0
[  134.809906]        ret_from_fork+0x22/0x30
[  134.809918] 
[  134.809918] -> #0 ((console_sem).lock){....}-{2:2}:
[  134.809932]        __lock_acquire+0x2a02/0x5e70
[  134.809949]        lock_acquire+0x1a2/0x530
[  134.809964]        _raw_spin_lock_irqsave+0x39/0x60
[  134.809982]        down_trylock+0xe/0x70
[  134.809996]        __down_trylock_console_sem+0x3b/0xd0
[  134.810012]        vprintk_emit+0x16b/0x560
[  134.810028]        vprintk+0x84/0xa0
[  134.810043]        _printk+0xba/0xf1
[  134.810053]        report_bug.cold+0x72/0xab
[  134.810069]        handle_bug+0x3c/0x70
[  134.810084]        exc_invalid_op+0x14/0x50
[  134.810101]        asm_exc_invalid_op+0x16/0x20
[  134.810112]        group_sched_out.part.0+0x2c7/0x460
[  134.810123]        ctx_sched_out+0x8f1/0xc10
[  134.810133]        __perf_event_task_sched_out+0x6d0/0x18d0
[  134.810145]        __schedule+0xedd/0x2470
[  134.810158]        schedule+0xda/0x1b0
[  134.810170]        futex_wait_queue+0xf5/0x1e0
[  134.810181]        futex_wait+0x28e/0x690
[  134.810190]        do_futex+0x2ff/0x380
[  134.810199]        __x64_sys_futex+0x1c6/0x4d0
[  134.810209]        do_syscall_64+0x3b/0x90
[  134.810225]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  134.810237] 
[  134.810237] other info that might help us debug this:
[  134.810237] 
[  134.810240] Chain exists of:
[  134.810240]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  134.810240] 
[  134.810255]  Possible unsafe locking scenario:
[  134.810255] 
[  134.810257]        CPU0                    CPU1
[  134.810259]        ----                    ----
[  134.810262]   lock(&ctx->lock);
[  134.810267]                                lock(&rq->__lock);
[  134.810274]                                lock(&ctx->lock);
[  134.810280]   lock((console_sem).lock);
[  134.810286] 
[  134.810286]  *** DEADLOCK ***
[  134.810286] 
[  134.810288] 2 locks held by syz-executor.7/3850:
[  134.810295]  #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  134.810323]  #1: ffff88801bbb6420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  134.810351] 
[  134.810351] stack backtrace:
[  134.810354] CPU: 0 PID: 3850 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1
[  134.810366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  134.810375] Call Trace:
[  134.810379]  <TASK>
[  134.810383]  dump_stack_lvl+0x8b/0xb3
[  134.810401]  check_noncircular+0x263/0x2e0
[  134.810417]  ? format_decode+0x26c/0xb50
[  134.810433]  ? print_circular_bug+0x450/0x450
[  134.810450]  ? enable_ptr_key_workfn+0x20/0x20
[  134.810465]  ? __lockdep_reset_lock+0x180/0x180
[  134.810482]  ? format_decode+0x26c/0xb50
[  134.810499]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  134.810516]  __lock_acquire+0x2a02/0x5e70
[  134.810537]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  134.810559]  lock_acquire+0x1a2/0x530
[  134.810575]  ? down_trylock+0xe/0x70
[  134.810592]  ? lock_release+0x750/0x750
[  134.810608]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  134.810629]  ? vprintk+0x84/0xa0
[  134.810646]  _raw_spin_lock_irqsave+0x39/0x60
[  134.810665]  ? down_trylock+0xe/0x70
[  134.810680]  down_trylock+0xe/0x70
[  134.810696]  ? vprintk+0x84/0xa0
[  134.810712]  __down_trylock_console_sem+0x3b/0xd0
[  134.810729]  vprintk_emit+0x16b/0x560
[  134.810745]  ? lock_downgrade+0x6d0/0x6d0
[  134.810764]  vprintk+0x84/0xa0
[  134.810780]  _printk+0xba/0xf1
[  134.810791]  ? record_print_text.cold+0x16/0x16
[  134.810805]  ? hrtimer_try_to_cancel+0x163/0x2c0
[  134.810819]  ? lock_downgrade+0x6d0/0x6d0
[  134.810836]  ? report_bug.cold+0x66/0xab
[  134.810853]  ? group_sched_out.part.0+0x2c7/0x460
[  134.810865]  report_bug.cold+0x72/0xab
[  134.810883]  handle_bug+0x3c/0x70
[  134.810900]  exc_invalid_op+0x14/0x50
[  134.810917]  asm_exc_invalid_op+0x16/0x20
[  134.810929] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  134.810944] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  134.810955] RSP: 0018:ffff888040a078f8 EFLAGS: 00010006
[  134.810964] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  134.810971] RDX: ffff88801a1c5040 RSI: ffffffff81564fb7 RDI: 0000000000000005
[  134.810979] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001
[  134.810986] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801bbb6400
[  134.810994] R13: ffff88806ce3d140 R14: ffffffff8547c9a0 R15: 0000000000000002
[  134.811005]  ? group_sched_out.part.0+0x2c7/0x460
[  134.811018]  ? group_sched_out.part.0+0x2c7/0x460
[  134.811031]  ctx_sched_out+0x8f1/0xc10
[  134.811044]  __perf_event_task_sched_out+0x6d0/0x18d0
[  134.811059]  ? lock_is_held_type+0xd7/0x130
[  134.811079]  ? __perf_cgroup_move+0x160/0x160
[  134.811091]  ? set_next_entity+0x304/0x550
[  134.811110]  ? lock_is_held_type+0xd7/0x130
[  134.811124]  __schedule+0xedd/0x2470
[  134.811140]  ? io_schedule_timeout+0x150/0x150
[  134.811155]  ? futex_wait_setup+0x166/0x230
[  134.811169]  schedule+0xda/0x1b0
[  134.811184]  futex_wait_queue+0xf5/0x1e0
[  134.811196]  futex_wait+0x28e/0x690
[  134.811208]  ? futex_wait_setup+0x230/0x230
[  134.811221]  ? wake_up_q+0x8b/0xf0
[  134.811234]  ? do_raw_spin_unlock+0x4f/0x220
[  134.811253]  ? futex_wake+0x158/0x490
[  134.811269]  ? do_futex+0x9e/0x380
[  134.811280]  do_futex+0x2ff/0x380
[  134.811291]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  134.811303]  ? ktime_get+0x153/0x1f0
[  134.811320]  __x64_sys_futex+0x1c6/0x4d0
[  134.811331]  ? hrtimer_interrupt+0x5b0/0x770
[  134.811345]  ? __x64_sys_futex_time32+0x480/0x480
[  134.811358]  ? syscall_enter_from_user_mode+0x1d/0x50
[  134.811371]  ? syscall_enter_from_user_mode+0x1d/0x50
[  134.811386]  do_syscall_64+0x3b/0x90
[  134.811403]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  134.811416] RIP: 0033:0x7ff1495d6b19
[  134.811424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  134.811435] RSP: 002b:00007ff146b4c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  134.811446] RAX: ffffffffffffffda RBX: 00007ff1496e9f68 RCX: 00007ff1495d6b19
[  134.811454] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff1496e9f68
[  134.811461] RBP: 00007ff1496e9f60 R08: 0000000000000000 R09: 0000000000000000
[  134.811468] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff1496e9f6c
[  134.811476] R13: 00007fff04cc497f R14: 00007ff146b4c300 R15: 0000000000022000
[  134.811488]  </TASK>
[  134.875143] WARNING: CPU: 0 PID: 3850 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  134.875844] Modules linked in:
[  134.876090] CPU: 0 PID: 3850 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1
[  134.876693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  134.877524] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  134.877932] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  134.879295] RSP: 0018:ffff888040a078f8 EFLAGS: 00010006
[  134.879701] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  134.880236] RDX: ffff88801a1c5040 RSI: ffffffff81564fb7 RDI: 0000000000000005
[  134.880767] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001
[  134.881294] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801bbb6400
[  134.881822] R13: ffff88806ce3d140 R14: ffffffff8547c9a0 R15: 0000000000000002
[  134.882358] FS:  00007ff146b4c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  134.882961] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.883406] CR2: 00007fe3043c2000 CR3: 000000001a090000 CR4: 0000000000350ef0
[  134.883948] Call Trace:
[  134.884145]  <TASK>
[  134.884324]  ctx_sched_out+0x8f1/0xc10
[  134.884629]  __perf_event_task_sched_out+0x6d0/0x18d0
[  134.885035]  ? lock_is_held_type+0xd7/0x130
[  134.885365]  ? __perf_cgroup_move+0x160/0x160
[  134.885715]  ? set_next_entity+0x304/0x550
[  134.886047]  ? lock_is_held_type+0xd7/0x130
[  134.886376]  __schedule+0xedd/0x2470
[  134.886669]  ? io_schedule_timeout+0x150/0x150
[  134.887022]  ? futex_wait_setup+0x166/0x230
[  134.887368]  schedule+0xda/0x1b0
[  134.887640]  futex_wait_queue+0xf5/0x1e0
[  134.887959]  futex_wait+0x28e/0x690
[  134.888242]  ? futex_wait_setup+0x230/0x230
[  134.888581]  ? wake_up_q+0x8b/0xf0
[  134.888858]  ? do_raw_spin_unlock+0x4f/0x220
[  134.889208]  ? futex_wake+0x158/0x490
[  134.889511]  ? do_futex+0x9e/0x380
[  134.889786]  do_futex+0x2ff/0x380
[  134.890055]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  134.890488]  ? ktime_get+0x153/0x1f0
[  134.890786]  __x64_sys_futex+0x1c6/0x4d0
[  134.891098]  ? hrtimer_interrupt+0x5b0/0x770
[  134.891441]  ? __x64_sys_futex_time32+0x480/0x480
[  134.891812]  ? syscall_enter_from_user_mode+0x1d/0x50
[  134.892205]  ? syscall_enter_from_user_mode+0x1d/0x50
[  134.892608]  do_syscall_64+0x3b/0x90
[  134.892912]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  134.893306] RIP: 0033:0x7ff1495d6b19
[  134.893588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  134.894947] RSP: 002b:00007ff146b4c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  134.895518] RAX: ffffffffffffffda RBX: 00007ff1496e9f68 RCX: 00007ff1495d6b19
[  134.896052] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff1496e9f68
[  134.896583] RBP: 00007ff1496e9f60 R08: 0000000000000000 R09: 0000000000000000
[  134.897117] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff1496e9f6c
[  134.897651] R13: 00007fff04cc497f R14: 00007ff146b4c300 R15: 0000000000022000
[  134.898184]  </TASK>
[  134.898371] irq event stamp: 4896
[  134.898637] hardirqs last  enabled at (4895): [<ffffffff84400d06>] asm_sysvec_apic_timer_interrupt+0x16/0x20
[  134.899387] hardirqs last disabled at (4896): [<ffffffff84259645>] __schedule+0x1225/0x2470
[  134.900015] softirqs last  enabled at (4862): [<ffffffff8116fa8b>] __irq_exit_rcu+0x11b/0x180
[  134.900667] softirqs last disabled at (4613): [<ffffffff8116fa8b>] __irq_exit_rcu+0x11b/0x180
[  134.901322] ---[ end trace 0000000000000000 ]---
[  135.680127] loop6: detected capacity change from 0 to 56
[  135.987292] loop1: detected capacity change from 0 to 2
[  135.988420] ext2: Unknown parameter 'fowner<00000000000000000000'
[  136.019184] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  136.020681] loop1: detected capacity change from 0 to 16383
[  136.021288] nfs4: Unknown parameter 'noblock_validity'
[  136.029868] loop1: detected capacity change from 0 to 264192
[  136.034404] loop1: detected capacity change from 0 to 2
[  136.034954] ext2: Unknown parameter 'fowner<00000000000000000000'

VM DIAGNOSIS:
16:33:38  Registers:
info registers vcpu 0
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff888040a07348
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001
R12=0000000000000034 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0
RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007ff146b4c700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe3043c2000 CR3=000000001a090000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007ff1496bd7c0 00007ff1496bd7c8
YMM02=0000000000000000 0000000000000000 00007ff1496bd7e0 00007ff1496bd7c0
YMM03=0000000000000000 0000000000000000 00007ff1496bd7c8 00007ff1496bd7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=ffffffff84400051 RBX=ffffffff85dff330 RCX=ffffffff8440009a RDX=0000000000000000
RSI=ffffffff86244c3e RDI=ffffffff85dff32c RBP=ffffffff85dff330 RSP=ffff88803fed77a0
R8 =ffffffff86244c3e R9 =ffffffff862400ee R10=ffffed1007fdaf1a R11=000000000003603d
R12=ffffffff85dff330 R13=ffffffff85dff32c R14=ffffffff85dff32c R15=dffffc0000000000
RIP=ffffffff81119c09 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f961afc0000 CR3=000000000d844000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 00ff000000000000 0000000000ff0000
YMM01=0000000000000000 0000000000000000 4700352e322e325f 4342494c4700362e
YMM02=0000000000000000 0000000000000000 ff00ffffffffffff ffffffffff000000
YMM03=0000000000000000 0000000000000000 0000000000000000 00312e325f434249
YMM04=0000000000000000 0000000000000000 494c470037312e32 5f4342494c470036
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000