Warning: Permanently added '[localhost]:14189' (ECDSA) to the list of known hosts. 2022/09/28 08:19:04 fuzzer started 2022/09/28 08:19:05 dialing manager at localhost:35827 syzkaller login: [ 45.985718] cgroup: Unknown subsys name 'net' [ 46.068181] cgroup: Unknown subsys name 'rlimit' 2022/09/28 08:19:20 syscalls: 2215 2022/09/28 08:19:20 code coverage: enabled 2022/09/28 08:19:20 comparison tracing: enabled 2022/09/28 08:19:20 extra coverage: enabled 2022/09/28 08:19:20 setuid sandbox: enabled 2022/09/28 08:19:20 namespace sandbox: enabled 2022/09/28 08:19:20 Android sandbox: enabled 2022/09/28 08:19:20 fault injection: enabled 2022/09/28 08:19:20 leak checking: enabled 2022/09/28 08:19:20 net packet injection: enabled 2022/09/28 08:19:20 net device setup: enabled 2022/09/28 08:19:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/28 08:19:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/28 08:19:20 USB emulation: enabled 2022/09/28 08:19:20 hci packet injection: enabled 2022/09/28 08:19:20 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220927) 2022/09/28 08:19:20 802.15.4 emulation: enabled 2022/09/28 08:19:20 fetching corpus: 50, signal 30610/32348 (executing program) 2022/09/28 08:19:20 fetching corpus: 100, signal 39826/43130 (executing program) 2022/09/28 08:19:20 fetching corpus: 150, signal 47408/52150 (executing program) 2022/09/28 08:19:20 fetching corpus: 200, signal 53011/59114 (executing program) 2022/09/28 08:19:20 fetching corpus: 250, signal 56379/63807 (executing program) 2022/09/28 08:19:20 fetching corpus: 300, signal 64922/73383 (executing program) 2022/09/28 08:19:20 fetching corpus: 350, signal 68557/78194 (executing program) 2022/09/28 08:19:21 fetching corpus: 400, signal 72858/83533 (executing program) 2022/09/28 08:19:21 fetching corpus: 450, signal 76952/88674 (executing program) 2022/09/28 08:19:21 fetching corpus: 500, signal 79286/92067 (executing program) 2022/09/28 08:19:21 fetching corpus: 550, signal 82176/95970 (executing program) 2022/09/28 08:19:21 fetching corpus: 600, signal 85029/99762 (executing program) 2022/09/28 08:19:21 fetching corpus: 650, signal 88585/104115 (executing program) 2022/09/28 08:19:21 fetching corpus: 700, signal 91874/108167 (executing program) 2022/09/28 08:19:21 fetching corpus: 750, signal 94879/111974 (executing program) 2022/09/28 08:19:22 fetching corpus: 800, signal 97660/115497 (executing program) 2022/09/28 08:19:22 fetching corpus: 850, signal 99553/118253 (executing program) 2022/09/28 08:19:22 fetching corpus: 900, signal 102824/122032 (executing program) 2022/09/28 08:19:22 fetching corpus: 950, signal 105156/125022 (executing program) 2022/09/28 08:19:22 fetching corpus: 1000, signal 107988/128409 (executing program) 2022/09/28 08:19:22 fetching corpus: 1050, signal 110639/131544 (executing program) 2022/09/28 08:19:22 fetching corpus: 1100, signal 111793/133518 (executing program) 2022/09/28 08:19:22 fetching corpus: 1150, signal 112745/135248 (executing program) 2022/09/28 08:19:22 fetching corpus: 1200, signal 114610/137698 (executing program) 2022/09/28 08:19:23 fetching corpus: 1250, signal 117739/141112 (executing program) 2022/09/28 08:19:23 fetching corpus: 1300, signal 120962/144524 (executing program) 2022/09/28 08:19:23 fetching corpus: 1350, signal 122012/146224 (executing program) 2022/09/28 08:19:23 fetching corpus: 1400, signal 123603/148270 (executing program) 2022/09/28 08:19:23 fetching corpus: 1450, signal 124453/149746 (executing program) 2022/09/28 08:19:23 fetching corpus: 1500, signal 126343/151937 (executing program) 2022/09/28 08:19:23 fetching corpus: 1550, signal 128923/154699 (executing program) 2022/09/28 08:19:23 fetching corpus: 1600, signal 131596/157432 (executing program) 2022/09/28 08:19:24 fetching corpus: 1650, signal 133071/159303 (executing program) 2022/09/28 08:19:24 fetching corpus: 1700, signal 134857/161286 (executing program) 2022/09/28 08:19:24 fetching corpus: 1750, signal 136042/162864 (executing program) 2022/09/28 08:19:24 fetching corpus: 1800, signal 138760/165477 (executing program) 2022/09/28 08:19:24 fetching corpus: 1850, signal 140124/167154 (executing program) 2022/09/28 08:19:24 fetching corpus: 1900, signal 141000/168426 (executing program) 2022/09/28 08:19:24 fetching corpus: 1950, signal 142472/170090 (executing program) 2022/09/28 08:19:24 fetching corpus: 2000, signal 144021/171785 (executing program) 2022/09/28 08:19:25 fetching corpus: 2050, signal 144813/172992 (executing program) 2022/09/28 08:19:25 fetching corpus: 2100, signal 146183/174503 (executing program) 2022/09/28 08:19:25 fetching corpus: 2150, signal 146976/175658 (executing program) 2022/09/28 08:19:25 fetching corpus: 2200, signal 147638/176688 (executing program) 2022/09/28 08:19:25 fetching corpus: 2250, signal 148869/178077 (executing program) 2022/09/28 08:19:25 fetching corpus: 2300, signal 150410/179602 (executing program) 2022/09/28 08:19:25 fetching corpus: 2350, signal 150974/180566 (executing program) 2022/09/28 08:19:25 fetching corpus: 2400, signal 152321/181940 (executing program) 2022/09/28 08:19:25 fetching corpus: 2450, signal 153941/183496 (executing program) 2022/09/28 08:19:26 fetching corpus: 2500, signal 155520/184942 (executing program) 2022/09/28 08:19:26 fetching corpus: 2550, signal 157632/186678 (executing program) 2022/09/28 08:19:26 fetching corpus: 2600, signal 158212/187547 (executing program) 2022/09/28 08:19:26 fetching corpus: 2650, signal 159728/188934 (executing program) 2022/09/28 08:19:26 fetching corpus: 2700, signal 160763/190045 (executing program) 2022/09/28 08:19:26 fetching corpus: 2750, signal 161711/191102 (executing program) 2022/09/28 08:19:26 fetching corpus: 2800, signal 163727/192565 (executing program) 2022/09/28 08:19:26 fetching corpus: 2850, signal 164551/193517 (executing program) 2022/09/28 08:19:27 fetching corpus: 2900, signal 165727/194585 (executing program) 2022/09/28 08:19:27 fetching corpus: 2950, signal 166881/195553 (executing program) 2022/09/28 08:19:27 fetching corpus: 3000, signal 167527/196318 (executing program) 2022/09/28 08:19:27 fetching corpus: 3050, signal 168624/197300 (executing program) 2022/09/28 08:19:27 fetching corpus: 3100, signal 169062/197954 (executing program) 2022/09/28 08:19:27 fetching corpus: 3150, signal 170224/198956 (executing program) 2022/09/28 08:19:27 fetching corpus: 3200, signal 170972/199738 (executing program) 2022/09/28 08:19:27 fetching corpus: 3250, signal 171718/200460 (executing program) 2022/09/28 08:19:27 fetching corpus: 3300, signal 172484/201202 (executing program) 2022/09/28 08:19:27 fetching corpus: 3350, signal 172906/201836 (executing program) 2022/09/28 08:19:27 fetching corpus: 3400, signal 173640/202525 (executing program) 2022/09/28 08:19:28 fetching corpus: 3450, signal 174067/203108 (executing program) 2022/09/28 08:19:28 fetching corpus: 3500, signal 175343/203985 (executing program) 2022/09/28 08:19:28 fetching corpus: 3550, signal 175810/204530 (executing program) 2022/09/28 08:19:28 fetching corpus: 3600, signal 176459/205139 (executing program) 2022/09/28 08:19:28 fetching corpus: 3650, signal 177120/205756 (executing program) 2022/09/28 08:19:28 fetching corpus: 3700, signal 178055/206454 (executing program) 2022/09/28 08:19:28 fetching corpus: 3750, signal 178786/207126 (executing program) 2022/09/28 08:19:28 fetching corpus: 3800, signal 179568/207747 (executing program) 2022/09/28 08:19:28 fetching corpus: 3850, signal 180220/208328 (executing program) 2022/09/28 08:19:29 fetching corpus: 3900, signal 181302/209000 (executing program) 2022/09/28 08:19:29 fetching corpus: 3950, signal 181586/209421 (executing program) 2022/09/28 08:19:29 fetching corpus: 4000, signal 181992/209834 (executing program) 2022/09/28 08:19:29 fetching corpus: 4050, signal 182750/210368 (executing program) 2022/09/28 08:19:29 fetching corpus: 4100, signal 184295/211093 (executing program) 2022/09/28 08:19:29 fetching corpus: 4150, signal 185407/211686 (executing program) 2022/09/28 08:19:29 fetching corpus: 4200, signal 185902/212102 (executing program) 2022/09/28 08:19:29 fetching corpus: 4250, signal 186495/212519 (executing program) 2022/09/28 08:19:30 fetching corpus: 4300, signal 187833/213273 (executing program) 2022/09/28 08:19:30 fetching corpus: 4350, signal 188457/213684 (executing program) 2022/09/28 08:19:30 fetching corpus: 4400, signal 188993/214093 (executing program) 2022/09/28 08:19:30 fetching corpus: 4450, signal 190081/214578 (executing program) 2022/09/28 08:19:30 fetching corpus: 4500, signal 190624/214938 (executing program) 2022/09/28 08:19:30 fetching corpus: 4550, signal 191190/215371 (executing program) 2022/09/28 08:19:30 fetching corpus: 4600, signal 191887/215740 (executing program) 2022/09/28 08:19:30 fetching corpus: 4650, signal 192669/216103 (executing program) 2022/09/28 08:19:31 fetching corpus: 4700, signal 193386/216493 (executing program) 2022/09/28 08:19:31 fetching corpus: 4750, signal 194607/216902 (executing program) 2022/09/28 08:19:31 fetching corpus: 4800, signal 195168/217236 (executing program) 2022/09/28 08:19:31 fetching corpus: 4850, signal 196160/217596 (executing program) 2022/09/28 08:19:31 fetching corpus: 4900, signal 197915/217964 (executing program) 2022/09/28 08:19:31 fetching corpus: 4950, signal 198565/218279 (executing program) 2022/09/28 08:19:31 fetching corpus: 5000, signal 198949/218535 (executing program) 2022/09/28 08:19:32 fetching corpus: 5050, signal 199288/218770 (executing program) 2022/09/28 08:19:32 fetching corpus: 5100, signal 200072/219018 (executing program) 2022/09/28 08:19:32 fetching corpus: 5150, signal 200832/219262 (executing program) 2022/09/28 08:19:32 fetching corpus: 5200, signal 201663/219482 (executing program) 2022/09/28 08:19:32 fetching corpus: 5250, signal 202161/219680 (executing program) 2022/09/28 08:19:32 fetching corpus: 5300, signal 202565/219861 (executing program) 2022/09/28 08:19:32 fetching corpus: 5350, signal 203389/220029 (executing program) 2022/09/28 08:19:32 fetching corpus: 5400, signal 203966/220179 (executing program) 2022/09/28 08:19:33 fetching corpus: 5450, signal 204478/220283 (executing program) 2022/09/28 08:19:33 fetching corpus: 5500, signal 205186/220285 (executing program) 2022/09/28 08:19:33 fetching corpus: 5550, signal 205429/220286 (executing program) 2022/09/28 08:19:33 fetching corpus: 5600, signal 205983/220308 (executing program) 2022/09/28 08:19:33 fetching corpus: 5650, signal 206353/220310 (executing program) 2022/09/28 08:19:33 fetching corpus: 5700, signal 206976/220311 (executing program) 2022/09/28 08:19:33 fetching corpus: 5750, signal 207566/220311 (executing program) 2022/09/28 08:19:33 fetching corpus: 5800, signal 208057/220315 (executing program) 2022/09/28 08:19:33 fetching corpus: 5850, signal 208853/220317 (executing program) 2022/09/28 08:19:34 fetching corpus: 5896, signal 209444/220498 (executing program) 2022/09/28 08:19:34 fetching corpus: 5896, signal 209444/220498 (executing program) 2022/09/28 08:19:36 starting 8 fuzzer processes 08:19:36 executing program 0: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x4040010) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x24000090) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000010) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, '\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "cdc784d8bdf931689683976c195127d839"}]}]}, 0x38}}, 0x4001) open_by_handle_at(r0, &(0x7f0000000480)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x44d, 0xe9, 0x0, 0x100}}, 0x400480) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8d0) r2 = dup(r0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x88bc0}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004094}, 0xc000) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4814}, 0x50) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5fb6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x10, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x5, &(0x7f0000000940)={r4, r5+60000000}, 0x1, 0x1, 0x1}, 0x1) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, 0x0, 0x700, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1000) socketpair(0x10, 0x3, 0x6, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4080) 08:19:36 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/223, 0xdf}, {&(0x7f0000000100)=""/233, 0xe9}, {&(0x7f0000000200)=""/146, 0x92}, {&(0x7f00000002c0)=""/57, 0x39}, {&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000380)=""/243, 0xf3}], 0x6) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000500)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x7f, 0x2}, 0x7) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000580)={0x20, 0x37, 0x2, {0x2, 0x5, 0x3, 0x0, 0x2, ')/'}}, 0x20) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0xfff) r0 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r0, &(0x7f00000005c0)=""/2, 0x2, 0x18081, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000680)) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x40, 0x0) write$P9_RSTATu(r2, &(0x7f0000000700)={0x54, 0x7d, 0xfff7, {{0x0, 0x3d, 0xfffa, 0x3, {0x8, 0x1, 0x2}, 0x7140000, 0x1, 0x5, 0x4, 0x2, ')/', 0x3, '-@)', 0x0, '', 0x5, '(\\}\x02\xcb'}, 0x2, ')/', 0x0, 0xffffffffffffffff, 0xee01}}, 0x54) r3 = accept(r0, &(0x7f0000000780)=@hci, &(0x7f0000000800)=0x80) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000e40), 0x200400, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000e80)=[r2, r2, r0, r1, r2, r0, r3, r4], 0x8) utimes(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={{0x0, 0x2710}}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c040001}, 0x20004000) readahead(r2, 0x7, 0x6) r5 = syz_open_dev$vcsa(&(0x7f0000001040), 0x2, 0x10000) syz_io_uring_setup(0x38e3, &(0x7f0000001080)={0x0, 0x47df, 0x8, 0x2, 0x278, 0x0, r5}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001100), &(0x7f0000001140)) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000001180)) 08:19:36 executing program 2: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x438, 0x3f4, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x2, 0x14, [0x5, 0x5, 0x6, 0x8000, 0x3836304f, 0x20, 0xffffff80, 0x800, 0x200, 0x0, 0x7fffffff, 0x73b8, 0x9, 0x5, 0x1f, 0x3, 0x1, 0x2, 0x401, 0x3ff, 0x7, 0x8, 0x3, 0xf15, 0x3ff, 0x7, 0xff, 0x5, 0xe, 0x1, 0x1a7, 0xfffffff9, 0x9, 0x4, 0xe7, 0x1, 0x1, 0x2, 0x0, 0x1, 0x8109, 0x1, 0x6, 0x3, 0x7, 0xfffffffe, 0x81, 0x0, 0xc8, 0xffffff09, 0x1, 0x1, 0x1ffe0, 0xfffff647, 0x10001, 0x7, 0x0, 0x5, 0x1, 0x3ff, 0x400, 0x10001, 0x7, 0x5718], [0x1, 0xd68, 0xfff, 0x2, 0x1000, 0x6, 0x400, 0xda0d, 0x0, 0xfffffffc, 0xaa, 0x7, 0x9, 0x81, 0x6, 0x100, 0x2, 0x81, 0x0, 0x6, 0x0, 0x4, 0xe62, 0x7, 0x3, 0x9, 0x6c81, 0x7, 0xceb, 0x0, 0xcc, 0x7fff, 0x0, 0x8, 0x7, 0x1, 0x7, 0x9e2, 0x7f, 0x3f, 0x9, 0x9, 0x20, 0x1, 0x0, 0x17, 0x7, 0x13a, 0x13e, 0x6, 0xffffffc1, 0x9, 0x8, 0x8001, 0x200, 0x1f, 0x9, 0x37d, 0x8000, 0x3, 0x1, 0x1, 0x40, 0x7], [0x8, 0x4, 0x8, 0x9, 0xfffffff8, 0xffffff25, 0x7fff, 0x6, 0xeac, 0x9, 0x1d00088, 0x1ff, 0xfffffff8, 0x1, 0x0, 0x0, 0x10000, 0x10000, 0x80000001, 0x0, 0x7f, 0xea, 0x7, 0x1, 0x800, 0x7fff, 0x129, 0xe1, 0x0, 0x0, 0x1, 0x2042, 0x9, 0x3, 0x8, 0x800, 0x6, 0x3, 0x80, 0x1, 0x3, 0x0, 0x1, 0x81, 0x400, 0x7, 0x9, 0x8, 0x17, 0xffff, 0x3a, 0x7, 0x0, 0x3712, 0xff, 0x7, 0x690, 0x0, 0xfffffffb, 0x7fff, 0x7ff, 0x1, 0x8, 0x4], [0x1, 0x1, 0x6d, 0x800, 0x9, 0xf2, 0x10001, 0x1, 0x0, 0x1000, 0xd7c7, 0x4, 0x401, 0x7, 0x80, 0x5, 0x0, 0x8001, 0xa65b, 0x9, 0x800, 0xffff, 0x2b8d, 0x0, 0x80000001, 0x7, 0x9, 0x8, 0x3, 0x9, 0x3f, 0xffffff59, 0x10000, 0x1, 0x6, 0x5, 0x0, 0x400, 0x5, 0x1, 0x8, 0xd6, 0x3, 0x10000, 0x2, 0xfffffeff, 0x5, 0x7, 0x4, 0x5, 0x3f, 0x4, 0x4, 0x100, 0xffffaff8, 0xfffffffb, 0x101, 0x3ff, 0x5, 0x6, 0x0, 0x2, 0x7, 0xaa], 0x15, ['n*.:&#^!^\xe0\x00', ':\xe4@\x92{(!\x00', '}\x00']}, ["", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x44000}, 0x20000001) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x188, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3775}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0xfb5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xd539}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xeccc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x44011) syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000940)='.pending_reads\x00', 0x44002, 0x41) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20448c1}, 0x4001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r3) recvmmsg$unix(r2, &(0x7f0000001400)=[{{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/38, 0x26}, {&(0x7f0000000bc0)=""/223, 0xdf}], 0x2, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000e40)=""/82, 0x52}], 0x1, &(0x7f0000000f00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001000)=""/173, 0xad}, {&(0x7f00000010c0)=""/248, 0xf8}, {&(0x7f00000011c0)=""/27, 0x1b}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/56, 0x38}], 0x5, &(0x7f0000001340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x3, 0x20, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) r7 = fcntl$dupfd(r2, 0x406, r2) r8 = syz_open_dev$vcsu(&(0x7f0000001500), 0x2, 0x282480) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001640)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x9c, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000011) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000016c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001700)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001740)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000001840)={&(0x7f0000001680), 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x44, r9, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x20004800) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x240080c4) [ 77.472717] audit: type=1400 audit(1664353176.837:6): avc: denied { execmem } for pid=288 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:19:36 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @private0}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0xa2b, @mcast2, 0x60}, 0x1c) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x480000, 0x86) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x3ff, @private1, 0x56919d2e}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x5a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="9b2b7647aa97f40e7164579f899f000aae61f9a8f65190537a52aa2d3611d21aba5a80ff95e5182f408c8a74d0bfda3a13464397201c0f4c07034ecb97d3ece1d90169046585d94b723fef5816a0d5b7019fc5c996ea8916b48cd1b8dad264f6", 0x60}], 0x2, &(0x7f0000000280)=[@dstopts_2292={{0x140, 0x29, 0x4, {0x21, 0x24, '\x00', [@pad1, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x20, {0x6, 0x6, 0x2, 0x7, [0x100000000, 0x5, 0xffffffffffffffc1]}}, @generic={0xf0, 0xbb, "35e7c047710dea810ceee665e24718b316b8e009784e28d87635ed5752db4eb4eb50fb86bc2ec7771648dcd34e4172127c5f863cd51d24caaee0237b77cba634a22ee7bb40ff673db5fb9eda0abca25f3b1d15e8e61a778c6a487cb529bd66f26e9c1a8e2bca42d9f48d950c1d362034e4ec958896268d648b77e2bedd8803f7273700deadca5952dab300fabf3d6eb9debd84da323df39e33bed299a1003f047e6ee2c0dc6269246aae17360926b5ed07be0320d458d4c69fae90"}, @jumbo={0xc2, 0x4, 0x3ff}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x25}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7f}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x3a, 0x12, 0x3, 0x5, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast1, @remote, @loopback, @local, @mcast1, @private2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}], 0x200}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0xead4, @loopback, 0x101}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000004c0)="f7e161fa0eb10eb36c46ce2d95576a629c280cc06c2928728ea25f3bc780c9b91fdd22a7d6b4e04c8737511958cf9952bdb333121d81f33b358ea8c5c724cb0ef585b6b5a2532efa189c585b7684cb3b98bb8e0f19487a9b3f49124faae304dd570ca6", 0x63}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e21, 0x9, @private0, 0xffffff81}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000005c0)="dc2daae2f3ecae3c1d78a7111e6ab133", 0x10}, {&(0x7f0000000600)="0c65491686c7e3c2f2fc8705856eff94f54134982438c29779d65b7cd788428ea66989bf91f09d0378e498846cde5a291be70e7005972226ae7462458c89a9fc1ba275c40e3a6e5dcb1f59c5080db1621f080255b695b2a9de5f184e7942f4aa6786a26cb1fb4b320a4e8116c3e726838414cfab29b6d8915d8e17b3d34e2a89627d17b2d3aa128dcd5a0f8d54d6bb13527f61d3326d05fa1e0ba2379e63850504a9cb200eec7b", 0xa7}], 0x2, &(0x7f0000000700)=[@hopopts={{0x40, 0x29, 0x36, {0x2c, 0x4, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @ra={0x5, 0x2, 0x400}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x8, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x80000000}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x80}}, {{&(0x7f0000000780)={0xa, 0x4e24, 0x5697, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7fffffff}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000007c0)="e699df25d11af3ca5c0677ca81c41f647071443a85cae9", 0x17}, {&(0x7f0000000800)="bb82f6b0ce21a786ad04126323f57487a2e70228ee9185fd3d2f96646da993eac564a22674751c30a81ed53d98b817edce077d1864a0a51786c23e2fda7211fd40890bcf3bc35e1728a724783ce301ae39d103bb71d7f91d5e477e9a46da2fe20e390657622ed392e583c11880e00d68e7a123ad43680fb82d02760be8a951637265e351cc99b3ba53216820faa00d17b6aeb6bf4e4748fa959577690836739af1c541d8cf75acb807b7cc7689a3e8450db8327236e4f04010d8e4680707af88588ff4", 0xc3}], 0x2, &(0x7f0000000940)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @flowinfo={{0x14, 0x29, 0xb, 0xef}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x0, 0xa, '\x00', [@generic={0x3}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x78}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xfffffff8}, @calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0xc3, [0x0, 0x6, 0xf5d6, 0x6]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7f}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3a, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}]}}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a40)="db8b12c1ecd4d68f95df26e7ca977626be93278846603af4c0328593d4c1315eab1de85810601cc345b3a75e3849603bab05b10859d8cbcde6861d9edcce0c2dbc006ad0888578308f95", 0x4a}, {&(0x7f0000000ac0)="cff2b9b449a5ebd0f7e3c0c13e843c17d5a7641d72296b75b035bfc1940dce0ec7893ca5fc1b19d5b932bfcdfc13c3ef935dd23c8bcc9c21b359c0d76b46492509321bca7355fc1bdbb1c11526e9047adb4bb21989325327b486d0df39668a4b4866416a244adac031d7acdc40261fb1bc6fb48f4fec032e25df3adfed013ace8cc0f6cbf3fb1423d224a9b6dba5f950055a99f54cb718766ab4b522bf2dfc4aae1e4b3225b2467f3462f6198002da4164466dbad1b646231cefd30d4a8b0a14161e3070aca5068c48db4e5a17a3454c3a09bb61445d11ac8f24f577b7e354b57b48df62bd800c4d85e7beaa48db95efbe469e", 0xf3}, {&(0x7f0000000bc0)="1eb2ecc2903289ad9214f9ffb44b913e0389a07347370cae7a2698e6787cf3787f5ee1f42349cc0dc00075edcf0c41eb654e765e6f90c4507ea607e4e884239662f4059c40f8d35376f1c2264255fea44c7d2e1c4161fb198ab235c1601e407e3ea56d3f2427f977b6", 0x69}, {&(0x7f0000000c40)="9ed381a92cf434cb3c7e96f9b4d19343fbd6e18d521033cbc9721e19f5955d74766c5cc676a6166aedf21160371fbfccd1ceb05c021cd35a7d38abc82c6e470b914ce8a03a314150ce0f09d3d7ff07133eec41c5d531b16679b6da6a34d4f539543313f8f712b37a7952d06ea5e7c75513861a49fb921233f1df6d1303a4fabdcaaa80ce0553dd7fb1c5f97c7e6cb86e66c17abfb66a", 0x96}], 0x4}}, {{&(0x7f0000000d40)={0xa, 0x4e20, 0x9, @private1, 0x8000}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000d80)="08265df478119cbfa50ca37bbee098d5b555cf60e28231d398edf59afbc66a3aa423382288c8064390ed352cef3bc0d3", 0x30}, {&(0x7f0000000dc0)="722f45fdf0e243c0ce2dd2f65eabd777810c59a4ef76", 0x16}, {&(0x7f0000000e00)="4e35882d0062ac368e8c4592b411fcec1fdd29f48cd18b64077b5bd0e8f7f2fb620c42f298c586e10888f32f", 0x2c}], 0x3}}], 0x6, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x4a8de6ac495aeb67, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000001000)={0x78e, 0x2, 0x1, 0x9, 0x7}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept$inet6(r2, &(0x7f0000001040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001080)=0x1c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000010c0)={'security\x00', 0x0, [0x7, 0x7f, 0x1, 0x1, 0x1000]}, &(0x7f0000001140)=0x54) r3 = openat$cgroup_freezer_state(r0, &(0x7f0000001180), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000011c0)={0x3, 0x7, 0x6, 0x6, 0x9}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001200)={0x20, 0x7fffffff, 0x91, 0x7fff, 0x2}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000001240)=@routing={0x3a, 0xc, 0x2, 0xff, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x41}, @empty, @mcast2, @mcast1, @local]}, 0x68) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000012c0), &(0x7f0000001300)=0x4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001340), 0x42080, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000001380)={{0xa, 0x4e22, 0x1, @loopback}, {0xa, 0x4e23, 0x1, @private1, 0x5}, 0x7ff, [0x7, 0x101, 0x3, 0x6, 0xff, 0xffff, 0x8]}, 0x5c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, r4, 0x72526000) 08:19:36 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x9, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x4008845) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000840)={&(0x7f00000002c0)={0x570, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x4d}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @private0}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @private1, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10000, @empty, 0x7fff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @private1, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @private0}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb0}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7d, 0x3, "75b0e387d3688998478267759044f478bcfc1249d59f56b7a9e08c1a8cc557e0882a68c6ede651080fda5311d48acf8301ac36c84bcbd1ebd15e17eca7f32f0da50757d141892e36c791cdc2b8f217ec3e068ea7e17053890c11c46b79299d10f325b8de568f8d1dbfe68f275a4dede852c53ecd3ed24fe34a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc6, 0x3, "d6be8790acc739cbfa92f87023998dad7176a96601f38213529eb56bc498620ce67a947cf15288ba7530463f1617908383c5a35d1da829712f58cd1a368c687123e2abc0d7193dd7c5db26c38c632c14a8fada7eafea564dd6a7743152a09da5a4304b47db7e90eb5278a05f64f2c6c31e2bf77cf9b2410186a20441a15be1a1c5ecfe7d1df8bfed79b708356b05e96a0de0eaa42b3999eefa713952ff7f2e8f3c0bfef4a132024827ee7816376600bb4c397fe1f4738051073706bd363fe69e5dd2"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6e0cb2d03e523e26b477e8641c7c421e8efb17b2527720739538035c8b1d2e06864ecf"}}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "2f8564109199f0b0cfb9ced4e574ca7108716bad7bf15d64a74676dc7ca2939c27c474c882d11fb8b1915b06addf2bfcf7a0e1bc863437b55a8954acd6588a469ad4d22ed6322c833b503c2ee1412df884a5dcbf055bf5fc6324242926ca1c3caa80d8fa0dbc915b0e48badf8dbbda301449e38dcc052b21ac22"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "b83c2b744a55520334726c4a672dcbd4294471ac2d805e08d4d5b00e95"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private2, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}]}]}, 0x570}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8001) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44004000}, 0x20008080) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x3f}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4000004) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x20044010) syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x40, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xf65d}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x501a}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7fff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x44040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x70, r3, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xd6, 0x42}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfef}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x478}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4c011) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1011}, 0x4080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x48085) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x78, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6c4e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe51}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 08:19:36 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x2d, 0x1, 0xc, @loopback, @rand_addr=' \x01\x00', 0x40, 0x7800, 0x160, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc050}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r1, 0x4, 0x80, 0x8, 0x9, 0x3, @mcast2, @private2, 0x8000, 0x7888, 0x21, 0x5}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={0x0, @isdn={0x22, 0x4, 0x0, 0xe, 0x3}, @l2={0x1f, 0x1, @any, 0x1, 0xb501e5158bc6de51}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000300)='syzkaller1\x00', 0x9, 0x1ff, 0x2000}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x220301, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7f}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48850}, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x44) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004880}, 0x8800) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000c00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1b0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1b0}}, 0x4040010) recvmsg(r5, &(0x7f0000000e40)={&(0x7f0000000c40)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)=""/180, 0xb4}, {&(0x7f0000000d80)=""/71, 0x47}], 0x2}, 0x2000) r8 = accept(r5, 0x0, &(0x7f0000000e80)) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(r8, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xa0, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x40}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) setsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f0000001080)="8bb07c0493545e8abcf778d72206", 0xe) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x50) 08:19:36 executing program 6: ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000000)) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x2, 0x101) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x24}}, './file0\x00'}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syncfs(r3) ioctl$CDROM_DEBUG(r3, 0x5330, 0x1) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000440)={@initdev, @empty}, &(0x7f0000000480)=0xc) readv(r2, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/17, 0x11}, {&(0x7f0000001500)=""/162, 0xa2}, {&(0x7f00000015c0)=""/169, 0xa9}, {0xfffffffffffffffd}, {&(0x7f0000001680)=""/120, 0x78}], 0x6) syncfs(r2) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0/file0\x00'}) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000017c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001800)={{0x1, 0x1, 0x18, r3, {0xd9000000}}, '\x00'}) finit_module(r6, &(0x7f0000001840)=':*\x00', 0x2) r7 = fsmount(r5, 0x1, 0xc) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000001880), &(0x7f00000018c0)=0x4) syz_mount_image$nfs4(&(0x7f0000001900), &(0x7f0000001940)='./file0/file0\x00', 0x20, 0x5, &(0x7f0000002c40)=[{&(0x7f0000001980)="f5007f59caba485ab95f78a8efd7a008d96b79ea53be717b627d45d8caaa421e28da651f2729fc5b1fe736d9f2977338112ef8535f9a87cda91102b74560bcffab14e21e87cf29f4f2be58e51416be47b1077da2111c337cd5124f3decf3c407aa55ae4dd53bed75a54a7c3359cf60196c5bc17b36441ef7b9bfa766c9d8b45b7065c4692f6acf9c3ac2f0f2049715b230b4891e283740fd6d007769d82113c69e228f61825e4115b73f29714ed21ab12d0d4ce800a207ae9befae423d3a7e7ff96a2f7fcc21666ae2a9816c10d2adf93da87945a6c2f157bc0c1550c0e2cd117efc50a30f8637f54f3130f0fae44e82", 0xf0, 0x8}, {&(0x7f0000001a80)="64c3d31731222aa8101de2a702280cea3a73f7be5674295f1f9ac97fd98d1a50578e2254b8e02a142e75d57bcc07a84ab7522785022b971df5268a15e4e851c71930270de64803ed02a737c795909acd8af4e241547103c743487e68fbed92627e61d24676537698bb1a2caee2f4bc65e4d692fecdc608535fdfca55a585ef8ac53815305dcd43545e355a8993f8556c4b5ed6f57c80456fa2a0a3c8f496de21bb2418afd12e806163fa8e24596d4d25056e001e15c9458167ef75d19df541b6a4cd763a913ae5f3013c61a38f00f0b4487b3e5974eba5e96b36714776499b74b3e0f0ec1fd2e83d0ed76368fd7f501cf1c662875168797c", 0xf8, 0x7}, {&(0x7f0000001b80)="d845674b17a04e194c2f997a4491b9bfe51caacdfb9932", 0x17, 0xffffffffffff4552}, {&(0x7f0000001bc0)="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", 0x1000, 0x19}, {&(0x7f0000002bc0)="1c6bf88d6103b0dcfb02b2b60cbfc5b535edb0015f03adf0646ea7bda5213d3c9b88748cc96e918da0b471857640a3693fe3251a79f6adbcd08f04ccf2bce91302d6804e7ff14c76079ec80e8bd94ddbfed69efa68153a3bccb17a15c0b311f0", 0x60, 0x7}], 0x10440, &(0x7f0000002cc0)={[{'/dev/hwrng\x00'}, {'/dev/vcs#\x00'}, {':*\x00'}, {'/dev/vcs#\x00'}, {}, {'\'('}, {'\\!^#&!'}, {':*\x00'}], [{@context={'context', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '/dev/vcs#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcs#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 08:19:36 executing program 7: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/232) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x2710}, 0x16, 0x0, 0x81}, {{r0, r1/1000+60000}, 0x1, 0x2, 0x118}, {{0x0, 0xea60}, 0x1f, 0x8, 0x7}, {{0x77359400}, 0xca143ea610ae4bb7, 0x200, 0x8}, {{}, 0x11, 0x1, 0x6}, {{0x0, 0x2710}, 0x5, 0x1, 0x5}], 0x90) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000280)={0x4}) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1a3100, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000300)={0x2}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f0000000340)={0x80000008}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000380)=0x100000000) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v2={0x2000000, [{0x8, 0xff}, {0x100, 0x1}]}, 0x14, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000480)={0x3, 0x7, 0x3, 0xda1a, 0x1, [{0x3, 0x3f, 0x101, '\x00', 0x86}]}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x200400, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x40400, 0x0) getpeername(r7, &(0x7f00000005c0)=@nl=@proc, &(0x7f0000000640)=0x80) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000680)={0x1f, 0xfc, 0x2, 0x0, 0xfc, 0x2a}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000001140)={&(0x7f0000001100)=""/30, 0x1e}) [ 78.752719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.754566] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.756607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.758937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.761940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.763845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.765717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.771368] Bluetooth: hci1: HCI_REQ-0x0c1a [ 78.807478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.809511] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.810943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.813836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.815843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.817427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.826229] Bluetooth: hci2: HCI_REQ-0x0c1a [ 78.843313] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.844998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.893315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.897989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.902272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.909897] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.911308] Bluetooth: hci0: HCI_REQ-0x0c1a [ 78.919881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.922312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.924672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.926400] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.929274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.932177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.933537] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.937838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.942214] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.943495] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.944931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.946817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.948447] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.951701] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.952725] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.955020] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.956652] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.958056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.960605] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 78.961947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.963507] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 78.964876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.966795] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 78.971885] Bluetooth: hci3: HCI_REQ-0x0c1a [ 78.972967] Bluetooth: hci7: HCI_REQ-0x0c1a [ 78.983572] Bluetooth: hci4: HCI_REQ-0x0c1a [ 78.996884] Bluetooth: hci6: HCI_REQ-0x0c1a [ 80.834465] Bluetooth: hci2: command 0x0409 tx timeout [ 80.835364] Bluetooth: hci1: command 0x0409 tx timeout [ 80.898197] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 80.962161] Bluetooth: hci0: command 0x0409 tx timeout [ 81.026197] Bluetooth: hci6: command 0x0409 tx timeout [ 81.027043] Bluetooth: hci4: command 0x0409 tx timeout [ 81.027811] Bluetooth: hci7: command 0x0409 tx timeout [ 81.028551] Bluetooth: hci3: command 0x0409 tx timeout [ 82.882132] Bluetooth: hci1: command 0x041b tx timeout [ 82.882626] Bluetooth: hci2: command 0x041b tx timeout [ 83.010191] Bluetooth: hci0: command 0x041b tx timeout [ 83.074255] Bluetooth: hci3: command 0x041b tx timeout [ 83.074714] Bluetooth: hci7: command 0x041b tx timeout [ 83.075181] Bluetooth: hci4: command 0x041b tx timeout [ 83.075678] Bluetooth: hci6: command 0x041b tx timeout [ 83.832850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.835040] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.835829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.838549] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.841057] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.841825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.852192] Bluetooth: hci5: HCI_REQ-0x0c1a [ 84.930203] Bluetooth: hci2: command 0x040f tx timeout [ 84.930227] Bluetooth: hci1: command 0x040f tx timeout [ 85.058138] Bluetooth: hci0: command 0x040f tx timeout [ 85.122288] Bluetooth: hci6: command 0x040f tx timeout [ 85.122761] Bluetooth: hci4: command 0x040f tx timeout [ 85.123210] Bluetooth: hci7: command 0x040f tx timeout [ 85.123657] Bluetooth: hci3: command 0x040f tx timeout [ 85.892273] Bluetooth: hci5: command 0x0409 tx timeout [ 86.978170] Bluetooth: hci2: command 0x0419 tx timeout [ 86.978903] Bluetooth: hci1: command 0x0419 tx timeout [ 87.106231] Bluetooth: hci0: command 0x0419 tx timeout [ 87.170181] Bluetooth: hci3: command 0x0419 tx timeout [ 87.170951] Bluetooth: hci7: command 0x0419 tx timeout [ 87.171576] Bluetooth: hci4: command 0x0419 tx timeout [ 87.172678] Bluetooth: hci6: command 0x0419 tx timeout [ 87.938270] Bluetooth: hci5: command 0x041b tx timeout [ 89.986212] Bluetooth: hci5: command 0x040f tx timeout [ 92.034292] Bluetooth: hci5: command 0x0419 tx timeout 08:20:32 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) sendto(r4, &(0x7f0000000180)="7715f33bdea0a9aedc2d7df2c7ad67a106d41a3b119a3dad95f95a3e6d22d5955b61b7cdc3d7742dd667d4582c7ab75db2765020300b6f1dd08a4ed3aedaf6d96106aa986542e73eef785757239437a23426b15c20d06a343304f4ec78363c60dfbde570cf9578a4ee713c367f95973e4e3f0f97e1401a24d9a3c3eb86485023cd74858f6dddf4c2fe77bc3b7347c1e900b3f0a2db9adcd94cc95423a9957c57250361f85299dd74ef64ef75d69de24ef4adf0d43dbae9399183f6bb7369f7d7fb98022b72dd55d9f1721f0cdbff359a8cc09f99ee6696b27a6d7e3c8ad9939f51814f192c4bf2dbc9a761d6d0f42b82d125bc73", 0xf4, 0x801, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) 08:20:32 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) sendto(r4, &(0x7f0000000180)="7715f33bdea0a9aedc2d7df2c7ad67a106d41a3b119a3dad95f95a3e6d22d5955b61b7cdc3d7742dd667d4582c7ab75db2765020300b6f1dd08a4ed3aedaf6d96106aa986542e73eef785757239437a23426b15c20d06a343304f4ec78363c60dfbde570cf9578a4ee713c367f95973e4e3f0f97e1401a24d9a3c3eb86485023cd74858f6dddf4c2fe77bc3b7347c1e900b3f0a2db9adcd94cc95423a9957c57250361f85299dd74ef64ef75d69de24ef4adf0d43dbae9399183f6bb7369f7d7fb98022b72dd55d9f1721f0cdbff359a8cc09f99ee6696b27a6d7e3c8ad9939f51814f192c4bf2dbc9a761d6d0f42b82d125bc73", 0xf4, 0x801, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) 08:20:32 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) sendto(r4, &(0x7f0000000180)="7715f33bdea0a9aedc2d7df2c7ad67a106d41a3b119a3dad95f95a3e6d22d5955b61b7cdc3d7742dd667d4582c7ab75db2765020300b6f1dd08a4ed3aedaf6d96106aa986542e73eef785757239437a23426b15c20d06a343304f4ec78363c60dfbde570cf9578a4ee713c367f95973e4e3f0f97e1401a24d9a3c3eb86485023cd74858f6dddf4c2fe77bc3b7347c1e900b3f0a2db9adcd94cc95423a9957c57250361f85299dd74ef64ef75d69de24ef4adf0d43dbae9399183f6bb7369f7d7fb98022b72dd55d9f1721f0cdbff359a8cc09f99ee6696b27a6d7e3c8ad9939f51814f192c4bf2dbc9a761d6d0f42b82d125bc73", 0xf4, 0x801, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) 08:20:32 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) sendto(r4, &(0x7f0000000180)="7715f33bdea0a9aedc2d7df2c7ad67a106d41a3b119a3dad95f95a3e6d22d5955b61b7cdc3d7742dd667d4582c7ab75db2765020300b6f1dd08a4ed3aedaf6d96106aa986542e73eef785757239437a23426b15c20d06a343304f4ec78363c60dfbde570cf9578a4ee713c367f95973e4e3f0f97e1401a24d9a3c3eb86485023cd74858f6dddf4c2fe77bc3b7347c1e900b3f0a2db9adcd94cc95423a9957c57250361f85299dd74ef64ef75d69de24ef4adf0d43dbae9399183f6bb7369f7d7fb98022b72dd55d9f1721f0cdbff359a8cc09f99ee6696b27a6d7e3c8ad9939f51814f192c4bf2dbc9a761d6d0f42b82d125bc73", 0xf4, 0x801, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) 08:20:32 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) sendto(r4, &(0x7f0000000180)="7715f33bdea0a9aedc2d7df2c7ad67a106d41a3b119a3dad95f95a3e6d22d5955b61b7cdc3d7742dd667d4582c7ab75db2765020300b6f1dd08a4ed3aedaf6d96106aa986542e73eef785757239437a23426b15c20d06a343304f4ec78363c60dfbde570cf9578a4ee713c367f95973e4e3f0f97e1401a24d9a3c3eb86485023cd74858f6dddf4c2fe77bc3b7347c1e900b3f0a2db9adcd94cc95423a9957c57250361f85299dd74ef64ef75d69de24ef4adf0d43dbae9399183f6bb7369f7d7fb98022b72dd55d9f1721f0cdbff359a8cc09f99ee6696b27a6d7e3c8ad9939f51814f192c4bf2dbc9a761d6d0f42b82d125bc73", 0xf4, 0x801, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) 08:20:32 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) sendto(r4, &(0x7f0000000180)="7715f33bdea0a9aedc2d7df2c7ad67a106d41a3b119a3dad95f95a3e6d22d5955b61b7cdc3d7742dd667d4582c7ab75db2765020300b6f1dd08a4ed3aedaf6d96106aa986542e73eef785757239437a23426b15c20d06a343304f4ec78363c60dfbde570cf9578a4ee713c367f95973e4e3f0f97e1401a24d9a3c3eb86485023cd74858f6dddf4c2fe77bc3b7347c1e900b3f0a2db9adcd94cc95423a9957c57250361f85299dd74ef64ef75d69de24ef4adf0d43dbae9399183f6bb7369f7d7fb98022b72dd55d9f1721f0cdbff359a8cc09f99ee6696b27a6d7e3c8ad9939f51814f192c4bf2dbc9a761d6d0f42b82d125bc73", 0xf4, 0x801, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) 08:20:32 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) sendto(r4, &(0x7f0000000180)="7715f33bdea0a9aedc2d7df2c7ad67a106d41a3b119a3dad95f95a3e6d22d5955b61b7cdc3d7742dd667d4582c7ab75db2765020300b6f1dd08a4ed3aedaf6d96106aa986542e73eef785757239437a23426b15c20d06a343304f4ec78363c60dfbde570cf9578a4ee713c367f95973e4e3f0f97e1401a24d9a3c3eb86485023cd74858f6dddf4c2fe77bc3b7347c1e900b3f0a2db9adcd94cc95423a9957c57250361f85299dd74ef64ef75d69de24ef4adf0d43dbae9399183f6bb7369f7d7fb98022b72dd55d9f1721f0cdbff359a8cc09f99ee6696b27a6d7e3c8ad9939f51814f192c4bf2dbc9a761d6d0f42b82d125bc73", 0xf4, 0x801, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) 08:20:33 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) [ 135.124697] loop6: detected capacity change from 0 to 16197 08:20:51 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r4 = socket$inet6(0xa, 0x3, 0x8) fchmod(r4, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) close_range(r5, r5, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) 08:20:51 executing program 0: capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b52, 0x0) 08:20:51 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) sendto(r4, &(0x7f0000000180)="7715f33bdea0a9aedc2d7df2c7ad67a106d41a3b119a3dad95f95a3e6d22d5955b61b7cdc3d7742dd667d4582c7ab75db2765020300b6f1dd08a4ed3aedaf6d96106aa986542e73eef785757239437a23426b15c20d06a343304f4ec78363c60dfbde570cf9578a4ee713c367f95973e4e3f0f97e1401a24d9a3c3eb86485023cd74858f6dddf4c2fe77bc3b7347c1e900b3f0a2db9adcd94cc95423a9957c57250361f85299dd74ef64ef75d69de24ef4adf0d43dbae9399183f6bb7369f7d7fb98022b72dd55d9f1721f0cdbff359a8cc09f99ee6696b27a6d7e3c8ad9939f51814f192c4bf2dbc9a761d6d0f42b82d125bc73", 0xf4, 0x801, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) 08:20:51 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchownat(r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) r2 = syz_open_dev$sg(&(0x7f0000002680), 0x0, 0x80082) write$binfmt_aout(r2, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) close_range(r2, r1, 0x2) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)=':\x00', &(0x7f00000000c0)='./file0/file0/file0\x00', r0) 08:20:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) close(r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x3, 0x4, 0xff, 0x0, 0x0, 0xe1080, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x8000}, 0x40000, 0x4, 0xffffff7f, 0x7, 0x101, 0x4, 0xfff, 0x0, 0x200, 0x0, 0x100000001}, r2, 0x6, 0xffffffffffffffff, 0xc) r3 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xa) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) 08:20:51 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) 08:20:51 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) sendto(r4, &(0x7f0000000180)="7715f33bdea0a9aedc2d7df2c7ad67a106d41a3b119a3dad95f95a3e6d22d5955b61b7cdc3d7742dd667d4582c7ab75db2765020300b6f1dd08a4ed3aedaf6d96106aa986542e73eef785757239437a23426b15c20d06a343304f4ec78363c60dfbde570cf9578a4ee713c367f95973e4e3f0f97e1401a24d9a3c3eb86485023cd74858f6dddf4c2fe77bc3b7347c1e900b3f0a2db9adcd94cc95423a9957c57250361f85299dd74ef64ef75d69de24ef4adf0d43dbae9399183f6bb7369f7d7fb98022b72dd55d9f1721f0cdbff359a8cc09f99ee6696b27a6d7e3c8ad9939f51814f192c4bf2dbc9a761d6d0f42b82d125bc73", 0xf4, 0x801, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) [ 152.538538] audit: type=1400 audit(1664353251.903:7): avc: denied { open } for pid=4010 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 152.542517] audit: type=1400 audit(1664353251.903:8): avc: denied { kernel } for pid=4010 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 152.550835] ------------[ cut here ]------------ [ 152.550860] [ 152.550864] ====================================================== [ 152.550868] WARNING: possible circular locking dependency detected [ 152.550872] 6.0.0-rc7-next-20220927 #1 Not tainted [ 152.550879] ------------------------------------------------------ [ 152.550882] syz-executor.6/4013 is trying to acquire lock: [ 152.550889] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 152.550931] [ 152.550931] but task is already holding lock: [ 152.550934] ffff88800ff21c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 152.550963] [ 152.550963] which lock already depends on the new lock. [ 152.550963] [ 152.550967] [ 152.550967] the existing dependency chain (in reverse order) is: [ 152.550970] [ 152.550970] -> #3 (&ctx->lock){....}-{2:2}: [ 152.550984] _raw_spin_lock+0x2a/0x40 [ 152.550997] __perf_event_task_sched_out+0x53b/0x18d0 [ 152.551010] __schedule+0xedd/0x2470 [ 152.551026] schedule+0xda/0x1b0 [ 152.551041] exit_to_user_mode_prepare+0x114/0x1a0 [ 152.551054] syscall_exit_to_user_mode+0x19/0x40 [ 152.551068] do_syscall_64+0x48/0x90 [ 152.551079] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.551094] [ 152.551094] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 152.551107] _raw_spin_lock_nested+0x30/0x40 [ 152.551119] raw_spin_rq_lock_nested+0x1e/0x30 [ 152.551133] task_fork_fair+0x63/0x4d0 [ 152.551150] sched_cgroup_fork+0x3d0/0x540 [ 152.551164] copy_process+0x4183/0x6e20 [ 152.551175] kernel_clone+0xe7/0x890 [ 152.551184] user_mode_thread+0xad/0xf0 [ 152.551194] rest_init+0x24/0x250 [ 152.551208] arch_call_rest_init+0xf/0x14 [ 152.551223] start_kernel+0x4c6/0x4eb [ 152.551234] secondary_startup_64_no_verify+0xe0/0xeb [ 152.551249] [ 152.551249] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 152.551262] _raw_spin_lock_irqsave+0x39/0x60 [ 152.551274] try_to_wake_up+0xab/0x1930 [ 152.551287] up+0x75/0xb0 [ 152.551303] __up_console_sem+0x6e/0x80 [ 152.551319] console_unlock+0x46a/0x590 [ 152.551334] con_install+0x14e/0x5d0 [ 152.551347] tty_init_dev.part.0+0xa0/0x5e0 [ 152.551361] tty_open+0xba3/0x1350 [ 152.551373] chrdev_open+0x268/0x6e0 [ 152.551387] do_dentry_open+0x6ca/0x12b0 [ 152.551402] path_openat+0x187f/0x2770 [ 152.551414] do_filp_open+0x1b6/0x410 [ 152.551426] do_sys_openat2+0x171/0x4c0 [ 152.551441] __x64_sys_openat+0x13f/0x1f0 [ 152.551456] do_syscall_64+0x3b/0x90 [ 152.551466] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.551480] [ 152.551480] -> #0 ((console_sem).lock){....}-{2:2}: [ 152.551494] __lock_acquire+0x2a02/0x5e70 [ 152.551511] lock_acquire+0x1a2/0x530 [ 152.551526] _raw_spin_lock_irqsave+0x39/0x60 [ 152.551538] down_trylock+0xe/0x70 [ 152.551554] __down_trylock_console_sem+0x3b/0xd0 08:20:51 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) [ 152.551570] vprintk_emit+0x16b/0x560 [ 152.551586] vprintk+0x84/0xa0 [ 152.551602] _printk+0xba/0xf1 [ 152.551615] report_bug.cold+0x72/0xab [ 152.551625] handle_bug+0x3c/0x70 [ 152.551635] exc_invalid_op+0x14/0x50 [ 152.551645] asm_exc_invalid_op+0x16/0x20 [ 152.551659] group_sched_out.part.0+0x2c7/0x460 [ 152.551670] ctx_sched_out+0x8f1/0xc10 [ 152.551680] __perf_event_task_sched_out+0x6d0/0x18d0 [ 152.551693] __schedule+0xedd/0x2470 [ 152.551708] schedule+0xda/0x1b0 [ 152.551722] exit_to_user_mode_prepare+0x114/0x1a0 [ 152.551733] syscall_exit_to_user_mode+0x19/0x40 [ 152.551747] do_syscall_64+0x48/0x90 [ 152.551757] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.551774] [ 152.551774] other info that might help us debug this: [ 152.551774] [ 152.551777] Chain exists of: [ 152.551777] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 152.551777] [ 152.551794] Possible unsafe locking scenario: [ 152.551794] [ 152.551796] CPU0 CPU1 [ 152.551799] ---- ---- [ 152.551801] lock(&ctx->lock); [ 152.551807] lock(&rq->__lock); [ 152.551813] lock(&ctx->lock); [ 152.551820] lock((console_sem).lock); [ 152.551825] [ 152.551825] *** DEADLOCK *** [ 152.551825] [ 152.551827] 2 locks held by syz-executor.6/4013: [ 152.551834] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 152.551865] #1: ffff88800ff21c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 152.551892] [ 152.551892] stack backtrace: [ 152.551895] CPU: 0 PID: 4013 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220927 #1 [ 152.551908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 152.551916] Call Trace: [ 152.551920] [ 152.551924] dump_stack_lvl+0x8b/0xb3 [ 152.551936] check_noncircular+0x263/0x2e0 [ 152.551952] ? format_decode+0x26c/0xb50 [ 152.551971] ? print_circular_bug+0x450/0x450 [ 152.551988] ? enable_ptr_key_workfn+0x20/0x20 [ 152.552005] ? perf_swevent_event+0x6c/0x550 [ 152.552024] ? format_decode+0x26c/0xb50 [ 152.552043] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 152.552061] __lock_acquire+0x2a02/0x5e70 [ 152.552083] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 152.552105] lock_acquire+0x1a2/0x530 [ 152.552122] ? down_trylock+0xe/0x70 [ 152.552140] ? lock_release+0x750/0x750 [ 152.552161] ? vprintk+0x84/0xa0 [ 152.552179] _raw_spin_lock_irqsave+0x39/0x60 [ 152.552191] ? down_trylock+0xe/0x70 [ 152.552209] down_trylock+0xe/0x70 [ 152.552226] ? vprintk+0x84/0xa0 [ 152.552243] __down_trylock_console_sem+0x3b/0xd0 [ 152.552260] vprintk_emit+0x16b/0x560 [ 152.552279] vprintk+0x84/0xa0 [ 152.552296] _printk+0xba/0xf1 [ 152.552309] ? record_print_text.cold+0x16/0x16 [ 152.552326] ? report_bug.cold+0x66/0xab [ 152.552338] ? group_sched_out.part.0+0x2c7/0x460 [ 152.552350] report_bug.cold+0x72/0xab [ 152.552362] handle_bug+0x3c/0x70 [ 152.552373] exc_invalid_op+0x14/0x50 [ 152.552384] asm_exc_invalid_op+0x16/0x20 [ 152.552399] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 152.552413] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 152.552424] RSP: 0018:ffff88803f867c48 EFLAGS: 00010006 [ 152.552434] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 152.552441] RDX: ffff88800d0fb580 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 152.552449] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 152.552456] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ff21c00 [ 152.552464] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 152.552475] ? group_sched_out.part.0+0x2c7/0x460 [ 152.552489] ? group_sched_out.part.0+0x2c7/0x460 [ 152.552503] ctx_sched_out+0x8f1/0xc10 [ 152.552516] __perf_event_task_sched_out+0x6d0/0x18d0 [ 152.552532] ? lock_is_held_type+0xd7/0x130 [ 152.552547] ? __perf_cgroup_move+0x160/0x160 [ 152.552559] ? set_next_entity+0x304/0x550 [ 152.552577] ? update_curr+0x267/0x740 [ 152.552595] ? lock_is_held_type+0xd7/0x130 [ 152.552610] __schedule+0xedd/0x2470 [ 152.552629] ? io_schedule_timeout+0x150/0x150 [ 152.552647] ? trace_rcu_dyntick+0x1a7/0x250 [ 152.552669] schedule+0xda/0x1b0 [ 152.552685] exit_to_user_mode_prepare+0x114/0x1a0 [ 152.552698] syscall_exit_to_user_mode+0x19/0x40 [ 152.552713] do_syscall_64+0x48/0x90 [ 152.552724] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.552739] RIP: 0033:0x7ff749f21b19 [ 152.552747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 152.552758] RSP: 002b:00007ff747497218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.552768] RAX: 0000000000000001 RBX: 00007ff74a034f68 RCX: 00007ff749f21b19 [ 152.552776] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff74a034f6c [ 152.552783] RBP: 00007ff74a034f60 R08: 000000000000000e R09: 0000000000000000 [ 152.552791] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff74a034f6c [ 152.552798] R13: 00007ffe36a43d5f R14: 00007ff747497300 R15: 0000000000022000 [ 152.552830] [ 152.561791] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 152.561866] WARNING: CPU: 0 PID: 4013 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 152.612292] Modules linked in: [ 152.612298] CPU: 0 PID: 4013 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220927 #1 [ 152.612311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 152.612319] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 152.612334] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 152.612347] RSP: 0018:ffff88803f867c48 EFLAGS: 00010006 [ 152.612356] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 152.612364] RDX: ffff88800d0fb580 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 152.612373] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 152.612381] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ff21c00 [ 152.612389] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 152.612399] FS: 00007ff747497700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 152.612412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.612421] CR2: 00007f1783db1542 CR3: 000000000f11c000 CR4: 0000000000350ef0 [ 152.612430] Call Trace: [ 152.612433] [ 152.612438] ctx_sched_out+0x8f1/0xc10 [ 152.612452] __perf_event_task_sched_out+0x6d0/0x18d0 [ 152.612469] ? lock_is_held_type+0xd7/0x130 [ 152.612485] ? __perf_cgroup_move+0x160/0x160 [ 152.612497] ? set_next_entity+0x304/0x550 [ 152.612516] ? update_curr+0x267/0x740 [ 152.612534] ? lock_is_held_type+0xd7/0x130 [ 152.612550] __schedule+0xedd/0x2470 [ 152.612569] ? io_schedule_timeout+0x150/0x150 [ 152.612587] ? trace_rcu_dyntick+0x1a7/0x250 [ 152.612609] schedule+0xda/0x1b0 [ 152.612625] exit_to_user_mode_prepare+0x114/0x1a0 [ 152.612638] syscall_exit_to_user_mode+0x19/0x40 [ 152.612654] do_syscall_64+0x48/0x90 [ 152.612666] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.612681] RIP: 0033:0x7ff749f21b19 [ 152.612690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 152.612701] RSP: 002b:00007ff747497218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.612712] RAX: 0000000000000001 RBX: 00007ff74a034f68 RCX: 00007ff749f21b19 [ 152.612720] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff74a034f6c [ 152.612728] RBP: 00007ff74a034f60 R08: 000000000000000e R09: 0000000000000000 [ 152.612736] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff74a034f6c [ 152.612744] R13: 00007ffe36a43d5f R14: 00007ff747497300 R15: 0000000000022000 [ 152.612757] [ 152.612761] irq event stamp: 656 [ 152.612764] hardirqs last enabled at (655): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 152.612780] hardirqs last disabled at (656): [] __schedule+0x1225/0x2470 [ 152.612808] softirqs last enabled at (330): [] __irq_exit_rcu+0x11b/0x180 [ 152.612831] softirqs last disabled at (299): [] __irq_exit_rcu+0x11b/0x180 [ 152.612851] ---[ end trace 0000000000000000 ]--- [ 152.624995] sg_write: data in/out 837/246 bytes for SCSI command 0x0-- guessing data in; [ 152.624995] program syz-executor.4 not setting count and/or reply_len properly [ 152.684029] loop6: detected capacity change from 0 to 256 [ 152.697450] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:20:52 executing program 0: capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b52, 0x0) 08:20:52 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), 0xffffffffffffffff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) close_range(r1, r1, 0x2) r2 = syz_io_uring_setup(0x45e9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x4, 0xf0, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001d80), &(0x7f0000000180)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) close_range(r3, r3, 0x2) accept4$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x0) r5 = syz_open_dev$sg(&(0x7f0000002680), 0x0, 0x80082) r6 = syz_open_dev$sg(&(0x7f0000002680), 0x0, 0x80082) write$binfmt_aout(r6, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r6, 0x7ed2000) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000690300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053aebe603b5314f9a9ab826f66b4ea9eed31e0513e43514a9db5228aff0690df713871d31c6b1b2a90bb7644836094d2f52c187521643d70d40360aa3625fb5db893040467742350b69f560cb741ae120a5c2f92b8312552cd9c88a1b2fc1c4d3d04cd834c98fd8493a6"], 0x120) fcntl$dupfd(r2, 0x406, r5) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, r0, 0x510, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x4080) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) [ 152.848927] sg_write: data in/out 837/246 bytes for SCSI command 0x0-- guessing data in; [ 152.848927] program syz-executor.4 not setting count and/or reply_len properly 08:20:52 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) close_range(r0, r0, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058005b000000000000000c005803000000000000000c0037002f0000f200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) r1 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) r5 = socket$inet6(0xa, 0x3, 0x8) fchmod(r5, 0x120) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.upper\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x369}, "", ['\x00']}, 0x120) accept4(r0, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, r6, 0x2) syz_io_uring_setup(0x3d4e, &(0x7f00000003c0)={0x0, 0xa742, 0x0, 0x1, 0x3e2, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000380)={{}, {@val, @actul_num={@val=0x2b, 0xf67, 0x6d}}}) sendto(r4, &(0x7f0000000180)="7715f33bdea0a9aedc2d7df2c7ad67a106d41a3b119a3dad95f95a3e6d22d5955b61b7cdc3d7742dd667d4582c7ab75db2765020300b6f1dd08a4ed3aedaf6d96106aa986542e73eef785757239437a23426b15c20d06a343304f4ec78363c60dfbde570cf9578a4ee713c367f95973e4e3f0f97e1401a24d9a3c3eb86485023cd74858f6dddf4c2fe77bc3b7347c1e900b3f0a2db9adcd94cc95423a9957c57250361f85299dd74ef64ef75d69de24ef4adf0d43dbae9399183f6bb7369f7d7fb98022b72dd55d9f1721f0cdbff359a8cc09f99ee6696b27a6d7e3c8ad9939f51814f192c4bf2dbc9a761d6d0f42b82d125bc73", 0xf4, 0x801, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) io_uring_enter(r1, 0x6c64, 0x0, 0x0, 0x0, 0x0) [ 152.981878] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) VM DIAGNOSIS: 08:20:52 Registers: info registers vcpu 0 RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba0b1 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff88803f867690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000075 R11=0000000000000001 R12=0000000000000075 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba0a0 RIP=ffffffff823ba109 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff747497700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1783db1542 CR3=000000000f11c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff74a0087c0 00007ff74a0087c8 YMM02=0000000000000000 0000000000000000 00007ff74a0087e0 00007ff74a0087c0 YMM03=0000000000000000 0000000000000000 00007ff74a0087c8 00007ff74a0087c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=fffffbfff0b60cba RBX=fffffbfff0b60cbb RCX=ffffffff812a1ca8 RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff85b065d0 RBP=fffffbfff0b60cba RSP=ffff8880177ff5c0 R8 =0000000000000000 R9 =ffffffff85b065d7 R10=fffffbfff0b60cba R11=0000000000000001 R12=ffff888032421678 R13=ffff88801bac5640 R14=ffff88801bac5640 R15=00007fbd59000000 RIP=ffffffff817882d9 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556bfd400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5ede755140 CR3=00000000340fe000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 81a61d5614c582a5 0000000000116110 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 877c978d8bc69c92 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000