Warning: Permanently added '[localhost]:54574' (ECDSA) to the list of known hosts. 2022/09/30 06:33:25 fuzzer started 2022/09/30 06:33:25 dialing manager at localhost:40535 syzkaller login: [ 36.364149] cgroup: Unknown subsys name 'net' [ 36.456434] cgroup: Unknown subsys name 'rlimit' 2022/09/30 06:33:39 syscalls: 2215 2022/09/30 06:33:39 code coverage: enabled 2022/09/30 06:33:39 comparison tracing: enabled 2022/09/30 06:33:39 extra coverage: enabled 2022/09/30 06:33:39 setuid sandbox: enabled 2022/09/30 06:33:39 namespace sandbox: enabled 2022/09/30 06:33:39 Android sandbox: enabled 2022/09/30 06:33:39 fault injection: enabled 2022/09/30 06:33:39 leak checking: enabled 2022/09/30 06:33:39 net packet injection: enabled 2022/09/30 06:33:39 net device setup: enabled 2022/09/30 06:33:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 06:33:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 06:33:39 USB emulation: enabled 2022/09/30 06:33:39 hci packet injection: enabled 2022/09/30 06:33:39 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 06:33:39 802.15.4 emulation: enabled 2022/09/30 06:33:39 fetching corpus: 50, signal 30630/32317 (executing program) 2022/09/30 06:33:39 fetching corpus: 100, signal 37321/40601 (executing program) 2022/09/30 06:33:39 fetching corpus: 150, signal 44551/49283 (executing program) 2022/09/30 06:33:39 fetching corpus: 200, signal 53237/59192 (executing program) 2022/09/30 06:33:39 fetching corpus: 250, signal 59423/66552 (executing program) 2022/09/30 06:33:39 fetching corpus: 300, signal 63263/71602 (executing program) 2022/09/30 06:33:39 fetching corpus: 350, signal 67069/76504 (executing program) 2022/09/30 06:33:40 fetching corpus: 400, signal 70817/81331 (executing program) 2022/09/30 06:33:40 fetching corpus: 450, signal 76433/87737 (executing program) 2022/09/30 06:33:40 fetching corpus: 500, signal 79098/91407 (executing program) 2022/09/30 06:33:40 fetching corpus: 550, signal 82592/95798 (executing program) 2022/09/30 06:33:40 fetching corpus: 600, signal 85027/99129 (executing program) 2022/09/30 06:33:40 fetching corpus: 650, signal 89804/104470 (executing program) 2022/09/30 06:33:40 fetching corpus: 700, signal 92974/108360 (executing program) 2022/09/30 06:33:40 fetching corpus: 750, signal 94836/111117 (executing program) 2022/09/30 06:33:40 fetching corpus: 800, signal 96531/113663 (executing program) 2022/09/30 06:33:41 fetching corpus: 850, signal 101014/118563 (executing program) 2022/09/30 06:33:41 fetching corpus: 900, signal 105715/123445 (executing program) 2022/09/30 06:33:41 fetching corpus: 950, signal 107503/125882 (executing program) 2022/09/30 06:33:41 fetching corpus: 1000, signal 109953/128870 (executing program) 2022/09/30 06:33:41 fetching corpus: 1050, signal 111784/131304 (executing program) 2022/09/30 06:33:41 fetching corpus: 1100, signal 114456/134370 (executing program) 2022/09/30 06:33:41 fetching corpus: 1150, signal 115527/136122 (executing program) 2022/09/30 06:33:41 fetching corpus: 1200, signal 117845/138792 (executing program) 2022/09/30 06:33:42 fetching corpus: 1250, signal 119163/140660 (executing program) 2022/09/30 06:33:42 fetching corpus: 1300, signal 120449/142450 (executing program) 2022/09/30 06:33:42 fetching corpus: 1350, signal 122115/144547 (executing program) 2022/09/30 06:33:42 fetching corpus: 1400, signal 123408/146383 (executing program) 2022/09/30 06:33:42 fetching corpus: 1450, signal 125179/148495 (executing program) 2022/09/30 06:33:42 fetching corpus: 1500, signal 126761/150445 (executing program) 2022/09/30 06:33:42 fetching corpus: 1550, signal 128288/152346 (executing program) 2022/09/30 06:33:42 fetching corpus: 1600, signal 129667/154064 (executing program) 2022/09/30 06:33:42 fetching corpus: 1650, signal 130558/155407 (executing program) 2022/09/30 06:33:42 fetching corpus: 1700, signal 132151/157287 (executing program) 2022/09/30 06:33:43 fetching corpus: 1750, signal 133352/158831 (executing program) 2022/09/30 06:33:43 fetching corpus: 1800, signal 134782/160470 (executing program) 2022/09/30 06:33:43 fetching corpus: 1850, signal 135918/161929 (executing program) 2022/09/30 06:33:43 fetching corpus: 1900, signal 137989/163930 (executing program) 2022/09/30 06:33:43 fetching corpus: 1950, signal 140030/165936 (executing program) 2022/09/30 06:33:43 fetching corpus: 2000, signal 140956/167169 (executing program) 2022/09/30 06:33:43 fetching corpus: 2050, signal 142123/168560 (executing program) 2022/09/30 06:33:43 fetching corpus: 2100, signal 143904/170327 (executing program) 2022/09/30 06:33:44 fetching corpus: 2150, signal 145183/171720 (executing program) 2022/09/30 06:33:44 fetching corpus: 2200, signal 146011/172846 (executing program) 2022/09/30 06:33:44 fetching corpus: 2250, signal 147534/174383 (executing program) 2022/09/30 06:33:44 fetching corpus: 2300, signal 148384/175463 (executing program) 2022/09/30 06:33:44 fetching corpus: 2350, signal 149357/176573 (executing program) 2022/09/30 06:33:44 fetching corpus: 2400, signal 150705/177850 (executing program) 2022/09/30 06:33:44 fetching corpus: 2450, signal 151507/178879 (executing program) 2022/09/30 06:33:44 fetching corpus: 2500, signal 152701/180013 (executing program) 2022/09/30 06:33:44 fetching corpus: 2550, signal 153809/181106 (executing program) 2022/09/30 06:33:45 fetching corpus: 2600, signal 154626/182018 (executing program) 2022/09/30 06:33:45 fetching corpus: 2650, signal 155517/182954 (executing program) 2022/09/30 06:33:45 fetching corpus: 2700, signal 156904/184088 (executing program) 2022/09/30 06:33:45 fetching corpus: 2750, signal 157977/185100 (executing program) 2022/09/30 06:33:45 fetching corpus: 2800, signal 158815/185987 (executing program) 2022/09/30 06:33:45 fetching corpus: 2850, signal 159726/186882 (executing program) 2022/09/30 06:33:45 fetching corpus: 2900, signal 160641/187792 (executing program) 2022/09/30 06:33:45 fetching corpus: 2950, signal 161684/188679 (executing program) 2022/09/30 06:33:46 fetching corpus: 3000, signal 162212/189322 (executing program) 2022/09/30 06:33:46 fetching corpus: 3050, signal 163164/190176 (executing program) 2022/09/30 06:33:46 fetching corpus: 3100, signal 163751/190872 (executing program) 2022/09/30 06:33:46 fetching corpus: 3150, signal 164475/191608 (executing program) 2022/09/30 06:33:46 fetching corpus: 3200, signal 165995/192593 (executing program) 2022/09/30 06:33:46 fetching corpus: 3250, signal 167048/193392 (executing program) 2022/09/30 06:33:46 fetching corpus: 3300, signal 167759/194052 (executing program) 2022/09/30 06:33:46 fetching corpus: 3350, signal 168604/194778 (executing program) 2022/09/30 06:33:47 fetching corpus: 3400, signal 169055/195359 (executing program) 2022/09/30 06:33:47 fetching corpus: 3450, signal 170413/196187 (executing program) 2022/09/30 06:33:47 fetching corpus: 3500, signal 170738/196648 (executing program) 2022/09/30 06:33:47 fetching corpus: 3550, signal 171898/197383 (executing program) 2022/09/30 06:33:47 fetching corpus: 3600, signal 172569/197958 (executing program) 2022/09/30 06:33:47 fetching corpus: 3650, signal 173321/198538 (executing program) 2022/09/30 06:33:47 fetching corpus: 3700, signal 173865/199006 (executing program) 2022/09/30 06:33:47 fetching corpus: 3750, signal 174713/199568 (executing program) 2022/09/30 06:33:47 fetching corpus: 3800, signal 175290/200015 (executing program) 2022/09/30 06:33:48 fetching corpus: 3850, signal 176188/200592 (executing program) 2022/09/30 06:33:48 fetching corpus: 3900, signal 177074/201129 (executing program) 2022/09/30 06:33:48 fetching corpus: 3950, signal 178150/201701 (executing program) 2022/09/30 06:33:48 fetching corpus: 4000, signal 178820/202132 (executing program) 2022/09/30 06:33:48 fetching corpus: 4050, signal 179486/202590 (executing program) 2022/09/30 06:33:48 fetching corpus: 4100, signal 180037/202972 (executing program) 2022/09/30 06:33:48 fetching corpus: 4150, signal 180589/203356 (executing program) 2022/09/30 06:33:48 fetching corpus: 4200, signal 181165/203731 (executing program) 2022/09/30 06:33:49 fetching corpus: 4250, signal 181979/204175 (executing program) 2022/09/30 06:33:49 fetching corpus: 4300, signal 182437/204498 (executing program) 2022/09/30 06:33:49 fetching corpus: 4350, signal 183041/204834 (executing program) 2022/09/30 06:33:49 fetching corpus: 4400, signal 184392/205263 (executing program) 2022/09/30 06:33:49 fetching corpus: 4450, signal 185147/205671 (executing program) 2022/09/30 06:33:49 fetching corpus: 4500, signal 185843/206031 (executing program) 2022/09/30 06:33:49 fetching corpus: 4550, signal 186522/206334 (executing program) 2022/09/30 06:33:49 fetching corpus: 4600, signal 187167/206623 (executing program) 2022/09/30 06:33:49 fetching corpus: 4650, signal 187828/206903 (executing program) 2022/09/30 06:33:50 fetching corpus: 4700, signal 188500/207191 (executing program) 2022/09/30 06:33:50 fetching corpus: 4750, signal 188860/207414 (executing program) 2022/09/30 06:33:50 fetching corpus: 4800, signal 189198/207653 (executing program) 2022/09/30 06:33:50 fetching corpus: 4850, signal 190465/207940 (executing program) 2022/09/30 06:33:50 fetching corpus: 4871, signal 190739/208271 (executing program) 2022/09/30 06:33:50 fetching corpus: 4871, signal 190739/208453 (executing program) 2022/09/30 06:33:50 fetching corpus: 4871, signal 190739/208641 (executing program) 2022/09/30 06:33:50 fetching corpus: 4871, signal 190739/208823 (executing program) 2022/09/30 06:33:50 fetching corpus: 4871, signal 190739/209013 (executing program) 2022/09/30 06:33:50 fetching corpus: 4871, signal 190739/209126 (executing program) 2022/09/30 06:33:50 fetching corpus: 4871, signal 190739/209126 (executing program) 2022/09/30 06:33:53 starting 8 fuzzer processes 06:33:53 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/249) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget(0x2, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000100)=""/216) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r2 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget(0x2, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x1000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000fff000/0x1000)=nil, 0x0) shmat(r4, &(0x7f0000ffb000/0x1000)=nil, 0x3000) [ 63.691655] audit: type=1400 audit(1664519633.045:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:33:53 executing program 2: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0x6, 0x1, 0x9}) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000080)) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x9, 0x3, 0x3}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x1, 0x1, [0x100000001, 0xed16, 0xc26, 0x7, 0x1], [0x2e, 0x3, 0x6bd832c8, 0x5, 0x40, 0x92f5, 0x9, 0x2a3, 0xfff, 0x9, 0x1ff, 0x7, 0x5a, 0x0, 0x1, 0x4, 0x6, 0x2, 0x8, 0x1, 0x2, 0x9, 0x8, 0x1f, 0xa9be, 0x9, 0x0, 0x80, 0x0, 0x8, 0xba, 0x10, 0x2, 0x400, 0x60000000000, 0x40, 0x86ec, 0x61, 0x1df9, 0x8, 0x1, 0x100000001, 0x81, 0x1, 0x4, 0x5, 0xe891, 0x7, 0x4, 0x7, 0x0, 0x1000, 0x401, 0x1000, 0x0, 0x1000, 0x4, 0xa31, 0x8, 0x0, 0x80000000, 0x0, 0x81, 0xef, 0x20, 0x7ff, 0x400, 0x6, 0x100000001, 0x7, 0x200, 0xfffffffffffffff8, 0xa1, 0x1, 0x8, 0x80, 0x9, 0x5, 0xd9, 0x21b3, 0x1f, 0x78, 0x8000, 0x80, 0x5, 0x1, 0x2, 0x1bcc000000, 0x20000, 0x6, 0x734, 0x33f, 0x6, 0x40c, 0x100000000, 0x1000, 0x0, 0xf9, 0x100, 0xffff, 0xfffffffffffffffc, 0x7ff, 0x5, 0x2, 0x3, 0x3, 0x4, 0x26, 0x4, 0x100, 0x9, 0x6, 0x8000, 0x6, 0x7, 0x89c, 0x6, 0x8, 0x800, 0x4, 0x7f]}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000005c0)={{0x19e, 0x3}, {0x8660, 0x6ae}, 0x100, 0x1}) r0 = syz_mount_image$nfs4(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x180000, 0x6, &(0x7f0000000a80)=[{&(0x7f0000000680)="20c324ddaf19fcdfc95ef91b3b9c9fd101510b30a6686e00f93632e0fdf795dfbf1d5a5ba51ad0094339fe582dd26fad0e0fc15e2956898e8c53a7b036", 0x3d, 0x5a7}, {&(0x7f00000006c0)="7930e8364261923432b3691111b124379da4e3dc03a793fbbec9e4606757eff2c1b0a52eafbc7ae23143409a11878e4d00941f162b64672abd9746b0ed472861c90752b446d4b62493d5c5a0ecf4ca7c90271193dc230355a69ed3bfb3e9f4265b733adb130ce6f43e44c80ffa954beb4d3d80a81680bae27f11aa6d54f43893c4da4992b060a4e06acf0e0347f44d7e35c99f0ef25ea1722ff7567e0df8db9ed523e7f4baf9f98d2ab39fd2486aa5cd1acb899f45ad9030c9ed1efa91f6240d805ef833ac721761c7bdcf2217a2e233be15bf9b5f2a30aeb2531fbcf286f29a9a389a50bd32c12e12e4a3af3c5a735601661fab844e77b0", 0xf8}, {&(0x7f00000007c0)="1b4b2e2265987f8c5af17665459d64efd5da0b543d424355", 0x18, 0x3ff}, {&(0x7f0000000800)="c23fa4bbfae58fcf044e44d262c3707e176841f99b005674ba5b8144886d8a27efe45c86b397c56e1301eedee9970f2efc4ca01fc0ed404169a10aecbcac14da607a0713068e55c4b6ae441b3a84f67065ae00ebee922cc1be871dd35e6a5981b957e6743efcea2bcdd420c5f11852643a3389d4e8b8d2f848b632a4482120b0a6c455b3a240af", 0x87, 0x300000000}, {&(0x7f00000008c0)="7a5321b5e790d529acec327a00141ec834f5cd075d722325bd807184d8f42cf51a22eaf4442be0f926732e68561332aaabd7ce9d07ca9ebeb335bda64f70f1ac0dda3e58be6a6f6d19d7b79c86ff53c8b6b668c35e354715162aa8129defc0597578c2bfa88908c97ab59b42f5b660ce9f38056f79dee326b8353d52d5d674e780f97284b9f17b6f8f22a9a0777d9379c151669a276e700383ca1de06edef619b3438c0dbd3a36fd5362163837d790895ee582e280532172f4d3b21c9ee0e3b27e44560abb9a89148d9a0fac732977b8210addafa768755e04ff212e5bedb75a15d8", 0xe2, 0x101}, {&(0x7f00000009c0)="0e0d1a791c6b8de8cfa99edc66ce0e571e99139db1d7b75732d7a59655ddcccfae4bd42a3b55b52e34c1cd85146d75fb2d0f4cff6b06b59ee4881855a23767eec5781088f1cf64b59a55e80b4bc83477765da39167744be5c1fca83dceb50ab4ca9e2a0fc7d0f4cef951b7f79a21b8aa00062bcc6e933f56ad70ee65100235253a08c2fd41", 0x85, 0x1}], 0x10804, &(0x7f0000000b40)={[], [{@euid_gt}, {@permit_directio}, {@dont_hash}]}) poll(&(0x7f0000000b80)=[{r0, 0xb490}], 0x1, 0x0) setxattr$incfs_metadata(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)="b222c426d60b05a5160220228568a6f223ff50f04a6a8e62d26c726fe3a78e20630478b0fedd30b98643a99ce514a73f725f21a99e143aa9b1f26fa61c4976680baca9bde9df4607d9fb14caaeedfe2bdecb5ec02c6a4c0321e8093342458fea55a01dc7ee8f449b8b485a9769ceb8c2ed29dce073432377582ce0deca74c22458389e5228e15401fbd9bf977e53382ccafe8801ab", 0x95, 0x0) r1 = memfd_create(&(0x7f0000000d00)='dont_hash', 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d40)=[0xffffffffffffffff, r1, r0, r0, r0, r0, 0xffffffffffffffff], 0x7) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) pwrite64(r2, &(0x7f0000000e80)="089a26e839650bd058e54eb38a4b48a45b2030b335357286bad49fe16fbb099650ae941310dc0efb9d6afef44ca39a229ba209fcc33be369d7f6966ce99f64a7b9426bbafab00b72e4ef035c69e087fe2be6200161fad766b28892ffc8eacb7f1c5cdf9b679cbfea294636a6a75bebee2dfcde", 0x73, 0xffffffffffffc81e) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f0000000f40)={'\x00', 0x300, 0x0, 0x2}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000fc0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f00000010c0)=0xe8) getresgid(&(0x7f00000011c0)=0x0, &(0x7f0000001200), &(0x7f0000001240)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001280)={{0x1, 0x1, 0x18, r4, {r5, r6}}, './file0\x00'}) preadv(r7, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/116, 0x74}], 0x1, 0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) 06:33:53 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000100)={0x3, 0x0, {0x1, @struct={0xab, 0xffffff80}, 0x0, 0x5, 0x7f, 0x4, 0x1f, 0x3ff, 0x442, @struct={0x5, 0x80000000}, 0x6, 0x6, [0x8, 0x4, 0x80000000, 0x0, 0x9, 0x2]}, {0x0, @usage=0x8, 0x0, 0x1, 0x1000, 0x7c51, 0x1, 0x7, 0x49a, @struct={0x8, 0x1}, 0x6125, 0x7, [0x80, 0x9, 0x81, 0x3, 0x100000001, 0x4]}, {0x1000, @struct={0x2, 0x7fff}, 0x0, 0x3, 0x4, 0xffffffff00000001, 0x3, 0x8, 0x38, @struct={0x2, 0x10001}, 0xffffffff, 0x9, [0x9, 0x7, 0x10001, 0x100000000, 0x4, 0x8]}, {0xe185, 0x4, 0x3ff}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000500)={r1, 0xfffffffffffffffb, 0x1, [0x7, 0x1, 0x5, 0x7ff, 0xda35], [0x80, 0x7ff, 0x9, 0x5, 0x2, 0x2, 0x3aff1d62, 0x8001, 0x1ff, 0x0, 0x8000, 0x1, 0x0, 0x7fffffff, 0x8000, 0x1f, 0x4, 0x0, 0x1, 0x400, 0xaa, 0x7fff, 0x0, 0x40, 0x1, 0x2, 0x0, 0x1, 0x5, 0x3f, 0x80000001, 0xffff, 0x8000, 0x3, 0x9, 0x7, 0xfffffffffffffff9, 0x8, 0x7, 0x3, 0x1, 0xf95, 0x54cb, 0xb940, 0x3, 0xcb, 0x15, 0x1, 0x2, 0x0, 0x0, 0x7, 0x8, 0xf0, 0x3f, 0x3ca, 0x7, 0xfffffffffffffffd, 0x7, 0x4, 0xbff6, 0x2, 0x9, 0x0, 0x3, 0x17, 0x7, 0x51, 0x9, 0x6, 0xb1, 0x3, 0x81, 0x8, 0x400, 0x3, 0x400, 0xc33, 0x2, 0xba2a, 0x4, 0x7fff, 0x8, 0x54a, 0x8, 0x4, 0xffff, 0x1760914b, 0x80000001, 0x101, 0x9910, 0x0, 0xff, 0x8, 0x40, 0x1, 0x7, 0x8, 0x8, 0xfffffffffffffff8, 0x7f, 0x7, 0x5, 0x81, 0x6, 0x8, 0x8, 0x100000001, 0x3, 0x3, 0x7fffffff, 0xe72, 0x1f, 0x100, 0x1, 0x1, 0x5, 0x8, 0x724, 0x100000000, 0x8]}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0xc, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4040000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0xd}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x1) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001600)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000015c0)={&(0x7f0000000c00)={0x98c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x44, 0x2a, [@ibss={0x6, 0x2, 0x80}, @chsw_timing={0x68, 0x4, {0x5, 0x7fff}}, @peer_mgmt={0x75, 0x4, {0x0, 0x81, @void, @void, @void}}, @ibss={0x6, 0x2, 0x9}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9}}, @peer_mgmt={0x75, 0x16, {0x1, 0x6, @void, @val=0x3f, @val="285bf8067d5943c49e0630ea07d773e2"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @dsss={0x3, 0x1, 0xe}]}, @NL80211_ATTR_BEACON_HEAD={0x23f, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x6cc7}, @broadcast, @device_a, @random="991c1cfd914f"}, @ver_80211n={0x0, 0x2, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x7f, @random=0x400, 0xc204, @void, @val={0x1, 0x5, [{0x60}, {0x18, 0x1}, {0x1b, 0x1}, {0x9, 0x1}, {0x5}]}, @val={0x3, 0x1, 0xb1}, @void, @val={0x6, 0x2, 0x1cec}, @val={0x5, 0xf2, {0xa0, 0x11, 0x3, "eff3148fa11ec94b06e16dddfdf202bf627549d2c3d9fbac35e812e13432148e16e9be61d77c3b8458fb61a51aa563eef8f6f697b57b92450d2df3cc074e5e356ed8b3faed12027913edf889df7b22078fa7a8db3e61fe0ea68c4cc3151b87d3d01baa5e450cb55169bf79ac5de41e6ef128d74f9c99c07f1ee2aa9960dab55e7c111f0dde33bc9ec99ddc024a27920a7673396e3b18b3676c7d01beb165f4b49de33bebe704436006dc761af79abfb0d53617cfeab71c770415a618d7c00033951f1f4adb1085e289afd1c41c92a7189a0c273743440da1340b5e5a63aceb731dbf592e76fadfa6a2659427bda262"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xff, 0xb6, 0x1}}, @val={0x2d, 0x1a, {0x80, 0x0, 0x5, 0x0, {0x100000001, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x2, 0x3}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8, 0x1}}, @void, [{0xdd, 0x27, "54680e3b24088dec6faadec9d2dd4bfe956531e2117f27f01ea11345eb03575a5dd05d9d19f5bc"}, {0xdd, 0xc, "036ec54355f834bd6078fe2e"}, {0xdd, 0x31, "4c0c6bc3834521f40d01e48ccb99f78c5f4af23b301be15274a014835484e394b3cce9b9bda524d6e7aa900a24057e3f78"}, {0xdd, 0x7a, "8fc9c15d31b449f8fd46e92d6bb5e33a7436e02b9a422b31071074c5a09aaf35e560c662b6d77b8ca0ec2d69f64631b5735730b3d3087b7b20981cea818d3fd7d364ade4d5bbe80f407f95143eb4e9795bc0cd5d040e9cdf1fb024996d380c4c82bc0def167b8decd34afebc080fafb31712bd2e5acd3cd72174"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xf, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @dsss={0x3, 0x1, 0x80}]}, @NL80211_ATTR_BEACON_HEAD={0x204, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2e}, @device_b, @device_b, @random="360a07ff5da3", {0xf, 0x7}}, 0x200, @default, 0x400, @void, @val={0x1, 0x7, [{0x3}, {0x1, 0x1}, {0xb}, {0x12, 0x1}, {0x6}, {0x9}, {0x6c, 0x1}]}, @void, @val={0x4, 0x6, {0x2, 0x5, 0x6, 0x8}}, @void, @val={0x5, 0xc3, {0x7, 0x9, 0x9, "94625fcb4e722c36f275003fbe4f16b5fc7936e6e3e1bd0a1a24b0070a293bbe9628d37c0a870acdb41d63b79d1be93677edf753ee764e25be53392cb43598d47585b60f78d89998144fb5aee13596ee8ffd094b3519200b09684760686340035c238d7eedab240ffef60cb0ef33ff3b064065acc8bb78d18adbec31a8d213c879a71ae5d5f751578682d99e9b6e70456682274d2f2f02e064518e5966ef37b221c695b11de35ce0e2163a5e14f7520dd1f8ed8d0dac41511750abf7e2a0f20d"}}, @val={0x25, 0x3, {0x1, 0x2, 0x81}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x95, 0xdb}}, @val={0x2d, 0x1a, {0x40, 0x2, 0x4, 0x0, {0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x18e5272c, 0x80}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x21}}, @val={0x76, 0x6, {0x2, 0xa5, 0x2f, 0x7fff}}, [{0xdd, 0x6, "434964a4d4da"}, {0xdd, 0xc4, "81c7e08b644840a2332978fb9175a712276ace0a385ffaf09462c147434f03207c6a14f6b178f76d7411a6a65eeafbf3f9f1725b59abba29b56a872257ab5485089b5b2adaef969a97c8320bae24d27c3ab1a6181da489a5dc3b633642b5e6d939555feb9e5bdfcda71fe0a10914ac01a07b7389a5bb70a485f205e1d8fb428d95a411520d00a59c10d3fe6a2e0554f6b8f92d0f9449f0d58d7a46c35d7a5ba632616d9240d227621b5f66221efc20848ec870a8367e49d1d9ba7f62b88f9ecb9797e6a8"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x90, 0x80, [@tim={0x5, 0x66, {0x0, 0x9e, 0x0, "f9da8ecedefb1b54fc8f0886dadbe3e23299fb728dc9fc219267b8c1065db638b5163cca116907b8dd018eded38df74c969bdc20d93b47792ea973aa3d01b767d7556d781afb9ecb09a8acb34424d88ea2759e231c7c7208b3574d1efa2e0032d70822"}}, @cf={0x4, 0x6, {0x6, 0x0, 0x3ff, 0x1000}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x20, 0x2, @device_b, 0x7, 0x4, 0x6}}, @channel_switch={0x25, 0x3, {0x0, 0xb6, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1a8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x60, 0x2, "9e4b8c91bc68ab9646eba61fbe69481218aef48a4103e55cbc3cdf1478ca33aace3eb91529f6cf5adec98c12aef57817325ab97c0ad80679277f8f883e164b4937f361b6790f7686f93537de4cfcdf45123c7ef8a416cd3b6838228d"}, @NL80211_FTM_RESP_ATTR_LCI={0x80, 0x2, "61da03c993500fb0eb31b14724c99ec1b3bcc0f18c25798eec0f2001bced2fb2398024894521d5c502007d5d74edf4f4e5cfdae21fabc3ac11c4755d7a4a4826c96548c900fe83f67f8cf8996b20ab22235a75755d46edc3802bcb65b0979f14201d8eb900302d0da7be4f5319126a19dd81515cbbac8faa6b2d603d"}, @NL80211_FTM_RESP_ATTR_LCI={0x45, 0x2, "93c92088a051cd6c9429b34d54309505fc1106f080cecd0cd1dc1d1c7dbf9a5d2d40a4d1f6e90763423321158faaf9b06339a35d3d5f094ba8644583754ff1a970"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "1d1332b5bf976daa8b7a8c902eda261e48a222660b6fc86fb308c980cf21895a8cd69af9544a492fa9fa79f5b5554258fa269b5dfb88575bc0b7e76a7b8221df48017a425a8b89240b22df00d708d66c99a3eb1b989c2540d17d5e06dd8c14b977ade110bf20079192bc87"}]}, @NL80211_ATTR_IE={0x61, 0x2a, [@challenge={0x10, 0x1, 0x35}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x8, 0x80, @broadcast, 0x20, 0x2, 0x9}}, @prep={0x83, 0x25, @ext={{}, 0x3, 0xc4, @broadcast, 0x9, @device_a, 0x3, 0x1, @device_b, 0x6}}, @ht={0x2d, 0x1a, {0x8, 0x2, 0x1, 0x0, {0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x8}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1bd, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @chsw_timing={0x68, 0x4, {0x6, 0x400}}, @ssid={0x0, 0x6, @default_ap_ssid}, @random={0x6, 0xad, "6ad433decfb7060f5b592788e91734a2098061dcfc3aa6056b880ff2bfe8001097b43bc454cae236244dca955ff499543a027e841a6004b1a39baa1d1722520d60fa5a642a0f221e75095cab02bdd127f6f6a685278d5c70c9b54a7ac68ce85c12001eba9b7e73b494cce841c2234f022af4fa49cea9a14ca36bb1fbbeb3caff6b89fe3a3841831cbd80c526e25315835671679d334a39211e252b76361fc4812d83b57a46f5d671f095cfbf05"}, @ssid={0x0, 0x3, @random="62fc58"}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xdc, {0xdb, 0xe, [@ext={{}, @device_a, 0x60000000, @device_b, 0x14}, @ext={{}, @device_b, 0x9, @device_a, 0x22}, @ext={{}, @broadcast, 0x2, @device_a, 0x2}, @not_ext={{}, @device_a, 0x6, "", 0x30}, @not_ext={{}, @device_a, 0x3, "", 0x38}, @not_ext={{}, @device_a, 0x3f, "", 0x13}, @not_ext={{}, @device_a, 0x8, "", 0x38}, @ext={{}, @device_a, 0x4, @broadcast, 0x11}, @not_ext={{}, @device_a, 0x2, "", 0x34}, @not_ext={{}, @device_a, 0xfff, "", 0x15}, @not_ext={{}, @device_b, 0x7fffffff, "", 0x41}, @not_ext={{}, @broadcast, 0x3, "", 0x23}, @ext={{}, @broadcast, 0x8, @device_b, 0x3d}, @ext={{}, @device_a, 0x5ed, @device_a, 0x9}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x84, 0x7f, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @preq={0x82, 0x5c, @not_ext={{}, 0x9, 0xe3, 0x1, @broadcast, 0x5, "", 0xfff, 0x2, 0x6, [{{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x666}, {{}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x1000}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{}, @device_a, 0xcd7}]}}, @chsw_timing={0x68, 0x4, {0x0, 0x401}}, @cf={0x4, 0x6, {0x1, 0x8, 0x3d, 0x84f}}]}]}, 0x98c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r0, 0x9d811000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001640)={{0x1, 0x1, 0x18, r0, {0x4, 0x800}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc000) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x24, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x24d1d7566a4896a8}, 0x44) r6 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x90008000}, 0xc, &(0x7f0000002580)={&(0x7f0000001a00)={0xb6c, r2, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0xc9, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x2, @device_a, 0x2, 0x20, 0x3f800000}}, @chsw_timing={0x68, 0x4, {0x2, 0x3}}, @perr={0x84, 0x89, {0xc9, 0x9, [@not_ext={{}, @device_b, 0x2, "", 0x22}, @ext={{}, @device_a, 0x1d, @device_b, 0x25}, @not_ext={{}, @broadcast, 0x480000, "", 0x9}, @not_ext={{}, @device_b, 0x8000000, "", 0x2b}, @ext={{}, @device_a, 0x4, @broadcast, 0x25}, @not_ext={{}, @device_b, 0x5, "", 0x27}, @not_ext={{}, @broadcast, 0x16, "", 0x1f}, @not_ext={{}, @broadcast, 0x5, "", 0x22}, @ext={{}, @device_b, 0xc95, @device_b, 0x39}]}}, @mic={0x8c, 0x18, {0x55a, "c5f15b9296ca", @long="5b17b7fa54cd0bc55be7319446c53949"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x903, 0x91, "7d2afa3fa5f96931d85bfc9aa41a49699b79d78ac65840fe1f8638f8f53e1b19fc4e36ead21c168c487f3d34fd284e5bf2d4c4a7825a0e60ce84a9fb85685d6b955ec1c58ce7b210aa67cade1a84b7c25dd674b740fd665fdbbd8cd1aa9db3d6dbbb7240739e96b96f6ccf2ffaae203acf0ad5a3fc894828017afafd49e3489120177238aa680ae7b46c19e4ecfc670a1ece69ea63bbeb6e652ccc55fb6ed71f2a1c4b648b5cea0d5863e941a63a2fbc39a956b0dd95b38b3541d412b1fe473f65b2c8ac6684b3ddb409000f8b33321b460a49e94a12dddad58ddcc7f1be85f58edb18b0a06d5733b80783f4f3d9a5eba6d0cc29ebaa5764eafc216c07e9be1e55030afa9e81deb1beffe84b47735678f7f3ebfa2089f5ae3ec115701f5a0f74d8cebab87b414d08e5da1a449ca88cc8e09b67c1849beaf2def5ca24ec189362ab47907b1e7fc9485b05d7842b221d248036139b1e1d538bfc833af2941991280dcc79a5dec6e4c41533959ea3a0508d1a012342d0485652b19f459af63784ba6ebeca9c423fc63fb596f363f665bc491b29ffc8c9f7b9af5722f0f53df3bdefcd28b416aedbe43064e506951884ab5dccdd570584ce79be1c31bb8790d33608147160156869f08afbd93c6c353b58d2f95963483f697c2dc8cb5690c324fb1ca8d1aec464d5a8aa8dbbd438cc1b204c8e84df74a334fcfa2b3efe3c3dba9e3f4cdc34bdaa566e5964defa7dd39c2e55dfd0066902a211785f4f1d805a072004a624db5edd2697ef7482ba653d0048413aca2a4d4f45c5b318e73531fb96fc59d4a5f74ff219e1af2c27699e6c285102fad258f7e7af27df057f5db6aa0eaa9b4f7b76b895884e2ce7f81edf0cdd832da2e55740fd1fc4034b4e2b8bdcbeb94cdc50ecf55ee7d59fd2eed443c34593778e32664cf6509f94c35e9279cc53d051a8dcee8cb07c07631721000b79f5b51bc641e0f514143ac0eef1b6b133cc5b87193f1dcba31b88e82bec60b535b00d0613ea145d9fb091f105f5d6854f7ecc78e96c910eb04950309ae2af428d2a2e1aea12bc12804f430ed65a10cfa6a43a4a68d9e96bd08d41555e1580a5766c77d7e9a38c12525de2a39a38f1ab7b1adb9308a77d6deeb680c6825f5ea9b38d23660ff00e2570bb006c7c5149ac23c3f5d71d527acabaa7787dba9bdc290aa182a32aa0cee2f94a7eccac4d9470882a47a60505ccf678c660e6deeecba42a0187a18e3a7597428a368dedfc693d3a1c525cfb5d9ed3824a28aadd6592c833688699e84311709049d9b4949c13c05b56a83fbe1fae84ccc099fb9a9be3be9be9785188bb770ca9030703e7511495250a1ec3e83fe6bfbbf8d950f4838f5a51845975893c81ee14fa6d3988708657ecba6a7cc4de86579c65f04688f859cdeb0bc7e8a1e9345b0569f9a8528bd7ed354b1afb429f286aee6580a8f3ddef295452010727c0df6d394a4c5d861a9c1078ad758b4949b9f57b42e8dd7dd6a527e6d3ecd5ed6cf0bdd66be34991d8f022cdaeaacc38beb573fa19658d27518915c7440f845bfdc71efeb7a2a4bcb9d819e4a9e0cf7f5e5d793967a3e3aaa6cb670db68026770c6fcf998a3ec035fc6e25ac4a062ec66a9852bdd979ab0fa861a63d825d8d2625aaed1947fd409113978e5e30c25a3fdf92048a71f906dcfd3b7fe9ac58a31217169534f49f9f7bf7518ecd4584c8ccfe730c95f82feefc05312172a837c1a8407fe3de80fb249f200f6c180bd036c57531e0d5e9993f285cb4499c8032f8af2a2b7da83cfab4a51a722521bc5d6fc48f76e4d70dcd10ca539650e3eb67e03d22953c7f29266e99aa8f23f5afda1b46458b8389c1337849e7cfd2c086b388755ea758a50d33edd3545cf4a5b34bd6417f7ba106279c7d2c411a7e4dfcc895def4d035c33e273ce7382130ba028e785e456898ac3f0d01b93c5f4f855b80c9720c71afd71b0b3e1c9b514682e94a89cef5795e851a51c02094a622b3d0b1151ed48f090ebe45f5fc5954856a335a7be0a1f0659492c5b8dc6d3ca130e1d3ecfa0ec18c4f093da553706ec3aa30525ea8de0e8f5b94da7e8d469c7b8f54e713024195b596cc851ceb65426b3dc505321e4713022e072ad88a32e843d59fa4b87ad7e6c229af9d2edc3b1d0fa045bff1175daff73d4137954f89d90d0f990de62a3c9c1fe8de11b462dee8bb5b01ae4f2023e15034587a1af22904e1a74f246357c7339f7df6fbbbe9d03ebc8d2b037867fcb544be9554bce62c2147006c9bedc076da800bffcfef08042f50c968f80b34065fbf9b43e61a1ad7617582bb09b5383db2a1e2f99d941b564dd8fdfae7c9132b01ecf1c0f98915c1c238196ebe37f5beb24fc96963e39910b774d05d9cead4d3488a22734b6d47856f1cc97ab8b678a7bfee1c36368272b586214a10b0534b5788faf4f3ede84b1fd77c792a56ca6a17aea71a9a55107afc6b49c69583ad7d9a94538e107795c54d0c80ed9b522b58c8342c492b47bbec21c0477398f9e4980cdc713322b57a2c18bb06bcf8e8d1082ef3e3ecdde0b28ca117a6539462dae49d49311817cd0db993005b6492c3578fa007c0d0307d193b01961dec7885ead989a80889163623179d1adb3dbf23b2a393795d80b949fad7585242045edc607c365ab28ed8109a439f54123b3048352dc943dee8c1b180c4a9fb57245dd74ffac4c03b631571e67beb280e5eb0835d28ba84a7fa25aeccdd71b667ec654500b6715fb97666e68f24b38e047099f27adea5090bc94ab033a568b6291e58f216fbe03f6b2e2937f0bfd1040c7ccbda235fbc075f16003209839d655965c3b424bfe37533c16b5b75a4201e1e1978aba1820da4a211d40673ee19d376b4481632cc492dc9be0fe4242929c3f1284785f4f259992c7a71c809ea9adc65360f5790b016be4f78c65b6ef8291da6fb3aa7641c7a53e0fd9d34b873fbfe3d2169c5e19ea3a235c7fa08074b23446cbc9131ffc2bf4bd2b72644135e35adba20fcb13b10528bb79fb84e9983b06661dc1244069d185643919f8c72792b5ab014e98069590f1a783762dca4aac98aa3a649c02e172e633e325ed05ab7b9a8b6396229eb59ddff433d4ee195f8ffb9b6d48852057691f16ab94655ef935403586c69a427813d64a44eaf64ca0b06dd39e5270d2b54ae822264cbbe53460ca901076495ee4f61a9f9200f8947ca46d67fc824fbaae371333f9c254ef4855b94ee7cb662"}, @NL80211_ATTR_FTM_RESPONDER={0x104, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x70, 0x2, "fe8eda8c374afff59157d9b04a0e02d99bd04c7a548d1f685a1328c21755908dd9c1a85ebed8eacdd6d56a6472e33c7fe725ffb0cee2f07533f9057f7cecd873941eaad2d0ec610fb6f5290c6ab804b675c90c9f307ff56da1702b1a3b69b308ceb96a03357794806bdb3a9b"}, @NL80211_FTM_RESP_ATTR_LCI={0x2d, 0x2, "a4e7496e5a5ead45057987bf42d7400f0961cfeba8b47c17a540e6761b2c349ab7bf36ec556982e8f7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x19, 0x2, "b0e8cf3bd1438043c9e1988fe8673f88b59fd2f1c5"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2d, 0x3, "73065d0296bc7608ef15eae537d5b2393e6f1b08b28ac1bda9d308a41fcedb67b981aec2e40e24b11b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x7c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x72, 0x3, "1af7667437e55129ddbcc7d9dcfcfb8d53da6a8d5171ddb08d1c7c1944b198a51e92804445427bf688838b5ce7206a32a353dfb7f6e82213d9f63034efa66167d79c8ffb4633df1eedfd93ff89aa6723a6cbabf1bd768b0b077f72780a997ed02952ae3df0ee6404574153f49da3"}]}]}, 0xb6c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20008801) r7 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$addseals(r7, 0x409, 0x15) read(r4, &(0x7f0000002600)=""/59, 0x3b) 06:33:53 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x34}}}}, [@NL80211_ATTR_IE={0xdb, 0x2a, [@perr={0x84, 0xd5, {0x1, 0xd, [@not_ext={{}, @broadcast, 0x3f, "", 0x27}, @ext={{}, @device_a, 0x0, @device_a, 0x41}, @not_ext={{}, @device_a, 0x6, "", 0x13}, @ext={{}, @device_a, 0xfffffffd, @device_a, 0x9}, @ext={{}, @device_b, 0x8, @broadcast, 0x12}, @ext={{}, @broadcast, 0x8, @broadcast, 0x41}, @ext={{}, @device_b, 0x0, @broadcast, 0x10}, @not_ext={{}, @broadcast, 0x5, "", 0x41}, @not_ext={{}, @device_b, 0x9, "", 0x23}, @ext={{}, @broadcast, 0xfff, @broadcast, 0x3d}, @not_ext={{}, @device_a, 0x3, "", 0x1c}, @ext={{}, @broadcast, 0x4, @broadcast, 0x17}, @not_ext={{}, @device_a, 0x7, "", 0x3c}]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20004004}, 0x24000110) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10030008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x41a}, @NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @device_a, @device_b, @initial, {0x3, 0xfe0}}, 0x32, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x17f2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r1, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xce, 0x22}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20044001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xff, 0x14}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x30004800}, 0x805) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x8841) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x7f, 0x6, 0x40, @dev={0xfe, 0x80, '\x00', 0x1f}, @local, 0x0, 0x80, 0x1, 0x7b3}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000880)={0x0, @multicast1, @local}, &(0x7f00000008c0)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000940)={0x4f4, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r6}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf0e}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb4}}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x48001}, 0x8090) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000ec0), &(0x7f0000000f40)=0x68) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, &(0x7f0000001080), &(0x7f00000010c0)=0x40) 06:33:53 executing program 4: modify_ldt$write(0x1, &(0x7f0000000000)={0x72, 0x20000800, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = gettid() r6 = gettid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x1, r0, 0xffffffffffffffff, r2, r4, 0x40, 0x401}, 0x6, 0x6, 0x3, 0xe626, r5, r6, 0x7f}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000300)=r5) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000340)='syz_tun\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4900) setresuid(r8, r3, r0) setresuid(r8, r1, r2) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x104, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x25}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}]}]}, 0x104}}, 0x24000010) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x80) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x20c004, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r10, &(0x7f0000000fc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000800)={0x74c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf6}, @NL80211_ATTR_FRAME={0x3ee, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @device_b, @from_mac=@broadcast, {0xd, 0x1f}}, 0x408, 0x26, @default, @void, @void, [{0xdd, 0x5e, "d65091ceee2887dfbb00594fbc8a68548a79d43d8a43136a67f22ec35ce6f8ee508b2f9ad3b3a90de5e21a4f9e95102d78787cc9187ffc453ba4001670bd9d1740309c0c28688106ca7a0c7ec2455be2ac568f935e1ccc937bfe8b0323de"}, {0xdd, 0x66, "d4c84a88d71ec667f3c4978ccbc611509fe1be917d14bcae36e2e789191c7a15cb0d729025551214aa6c3cac0314f0526fc2df7172716fbc21a61e4cd3f27b7cb5895851e5cfc63dde23db9edfa3f1456bce8b89d07a15cb8c47ad4b2e8b681ac2c0a6fdb094"}, {0xdd, 0x5b, "959173809153c5e0fcd178496b3843cec9b9223b01512df7f2f16e6b4f68da9f956793ea05e87c7a065f76cc0ddd3e47c8dc121a5c5695a41ef32ee49fc06e4d1a35a3ae3173e4421629791aa1e9b822afdf4afd357c1570c92b4a"}, {0xdd, 0x58, "edf185f4b5960be55b7aa0cc5e39144b2b7fd54951549fe13b6a263f113705b81a0fe4c75831d9361ca39718012d02091359e2c54a8a8041d3cb8fb9ecaaf12eaeb25b8eecefef00fec48473b5c56dd872777ca505bef4ad"}, {0xdd, 0x27, "1565df83ecdb58d5908358054159e2e88ab20d7d4734274c746c7eadfb77aa5f896c1c54c1a808"}, {0xdd, 0x79, "c906a44ac0430f4c65688c95f0578cab81c1a6dffdc33fab87c23649b6f839fe724d09c250bac03be47ee067e5048dc46cec2ba1cfa6243c6a9c8303af5bf124a0a62ceabe521b067f903181ba9795fea79588ea4bbb73309b5bc7645242e624df22fd355ffca202373c037c4c3305b61af8d175352b0c08b1"}, {0xdd, 0x69, "2108ac3b09169259b7b8861d8167d26de27549d6ba76c420f462a1a670f5f8b12a341ee81dd789fef32b3c2454b39aed3aca0227309ab087ae728540880cbe096da99e50b2de0bbaa8081afcff155821dc75b874e4dd3f8b2e5f57265ed253ba8cc71a3b15eb6c2664"}, {0xdd, 0xbc, "6125bf91dc6e454e216f4672f6ef11f3331348c141a50ebac7615a52063ebea638b0d0bf340c42bfa71cca78130bcbe76a2cd07f5988e35872931146c0bb54bcbf43716d2c9e81531aec62d4cfc24be590f6928bd421b191d95d3f9a64af1796adda59a5a9cda8c5161c22e27417a400d545cd10a5953674a199dbf4b9d74544abb12654ac008d14af483dbff505fa5396087d7212dda786476ebeb17206a45573e9f8e197db2be83d5a43894ca827f26cea427202490934dba3f23f"}, {0xdd, 0x7e, "6db34e343f7a06463844746d2d1ce75920c41422e708706eb159a47ff39ed7eca0e271c5e1b94cf39b852ff47c83d353daa7590349a6d02b4e7fc938ba2bfabd903ba9fdd290d6186fdbf627d74da4886c9a1a3fce75a4c77727588ce9090ef03ff63c27a2a307f0993b083425e1c02a6998665e821bc2f831aea71b8ffc"}]}}, @NL80211_ATTR_FRAME={0x331, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @broadcast, @from_mac=@broadcast, {0x5, 0x317}}, @random="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"}}]}, 0x74c}}, 0x48080) r11 = socket$inet_udp(0x2, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, &(0x7f0000001000)={r10, r11, 0x7ff}) 06:33:53 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x10001, 0xffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x2f, 0x3, 0x6f, 0x53a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x7800, 0x3, 0x280000}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x1f, 0x7, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8, 0x1, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x81, 0x5, 0x2b, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8, 0x0, 0x4}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x40, 0x40, 0xc44a, 0x7, {{0x24, 0x4, 0x2, 0x27, 0x90, 0x66, 0x0, 0x81, 0x2f, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x1c, 0xbb, 0x1, 0x1, [{@local, 0x2}, {@multicast2, 0x6}, {@private=0xa010101}]}, @generic={0x86, 0x5, "6beedf"}, @cipso={0x86, 0x39, 0x3, [{0x1, 0x2}, {0x0, 0x10, "33f42d68312a35421b432b7a678a"}, {0x0, 0xf, "142c674629750b1bde276376b5"}, {0x2, 0x12, "94907cfd6320c19e889d34e1cf06970b"}]}, @cipso={0x86, 0x12, 0x3, [{0x2, 0xc, "d18aa228a5d040338f77"}]}, @ssrr={0x89, 0xf, 0x70, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x80, 0x2, 0x20, @remote, @private2, 0x80, 0x20, 0x7f, 0x2}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000000640)={0xaf4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf6}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x80, 0x2, 0x800}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x74, 0x5, 0x4}, {0x1000, 0x1, 0xe, 0x7fffffff}, {0x7e67, 0x1, 0x9, 0x5}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x30b6906b}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x1, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x244, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x7f, 0x100}, {0x3, 0x1, 0x1e, 0xfffeffff}, {0x3, 0x1, 0x6, 0x2}, {0x8, 0x7f, 0x4}, {0x588, 0x1, 0x4, 0x800}, {0x2, 0x80, 0x39, 0x4}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe7}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x94}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xaf4}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) getsockname(r0, &(0x7f00000011c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001240)=0x80) getsockname(r8, &(0x7f0000001280)=@rc={0x1f, @none}, &(0x7f0000001300)=0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x54, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x50) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001480)={@mcast2, @empty, @mcast1, 0x0, 0x2, 0xd2, 0x0, 0x7, 0x2000000, r1}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x84, r10, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x84}, 0x1, 0x0, 0x0, 0x24004054}, 0x40000080) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r12, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x28, r10, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x68, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x46}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3ff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x8008004) 06:33:53 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2, 0x148, 0x1}, 0x18) move_mount(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='\x00', 0x41) r2 = accept(r0, &(0x7f0000000140)=@tipc=@id, &(0x7f00000001c0)=0x80) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000200)={0x1, 0x4, 0x9}) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/165, 0xa5) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x80) r4 = getuid() mount$9p_xen(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80821, &(0x7f0000000440)={'trans=xen,', {[{@fscache}, {@posixacl}, {@cache_fscache}, {@noextend}, {@cache_fscache}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x2f}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x34, 0x39, 0x35, 0x31, 0x31, 0x31, 0x30], 0x2d, [0x31, 0x31, 0x60, 0x65], 0x2d, [0x30, 0x34, 0x30, 0x62], 0x2d, [0x30, 0x34, 0x62, 0x62], 0x2d, [0x31, 0x30, 0x35, 0x36, 0x66, 0x36, 0x34, 0x64]}}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@audit}]}}) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [], 0xa, "abcbc4fecb7737c5e797a69e8480f6693f224d81116dab222c9565f931b2f7522c89450177ecc7bb6a1439c3bf0be39cb2feacaf7f4ca9201e8d475588dba4bf2d4d3213d222de61d08b2798d32a45bc8f557c822c306c2dfab4c60cdf676c"}, 0x6a) r5 = openat$cgroup_type(r0, &(0x7f0000000580), 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) readlinkat(r3, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=""/236, 0xec) lgetxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@known='system.posix_acl_default\x00', &(0x7f0000000780)=""/4096, 0x1000) openat(0xffffffffffffffff, &(0x7f0000001780)='./file0\x00', 0x105000, 0x29) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001800)={0x0, 0x0, 0x0}, &(0x7f0000001840)=0xc) lchown(&(0x7f00000017c0)='./file0\x00', r4, r6) setxattr(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000001900)='cgroup.type\x00', 0xc, 0x3) setxattr$security_ima(&(0x7f0000001940)='\x00', &(0x7f0000001980), &(0x7f00000019c0)=@v2={0x3, 0x0, 0xc, 0xfff, 0x90, "5e244076a1fdf27b44c0b1bb7def3676b3945643c3000b90942d3b431ddd50c397df77c56d220e5cedaef1c7ceeba39f890fb160f84fcebba45d2421de27e2aff8bf47ce066438162e18a0f386b8ff157ddd1b9dfb04071aab9c7b97dd45ab841dc46b8bc805eb8b3aa507791bda9f35eb47522ba1f025bdfcc3e8176267127fce2a75d134f6c0f3c264fc9ca5eed7d3"}, 0x99, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001a80)={"97830a3e9064df8442b4b89b95655f57", 0x0, 0x0, {0xb697, 0x2}, {0x0, 0x3}, 0x6, [0xfffffffffffff911, 0x9, 0x100000001, 0x34e080000, 0x7ff, 0x3, 0x5, 0x5874, 0x3, 0xb36, 0x3, 0x6, 0x9, 0x100000000, 0x1000, 0x6]}) 06:33:53 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x1, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x7, 0x0, 0x0]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x21}}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x41) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2081) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000300)={0x40, 0x40}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x440d0}, 0x4080) write$vga_arbiter(r0, &(0x7f0000000440)=@unlock_all, 0xb) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) write$P9_RLINK(r3, &(0x7f00000004c0)={0x7, 0x47, 0x1}, 0x7) write$P9_RGETLOCK(r2, &(0x7f0000000500)={0x1e, 0x37, 0x2, {0x0, 0x0, 0x9dda, 0xffffffffffffffff}}, 0x1e) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x37}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x7, 0x7b, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000c80)=0x0) fcntl$setown(r4, 0x8, r5) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000cc0)=0x1) write$P9_RFSYNC(r3, &(0x7f0000000d00)={0x7, 0x33, 0x2}, 0x7) flock(r4, 0xd) fallocate(r4, 0x18, 0x0, 0xfffffffffffffff9) [ 65.021992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.023626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.026804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.031793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.043192] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.044777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.052122] Bluetooth: hci0: HCI_REQ-0x0c1a [ 65.134865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.164543] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.166619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.168142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.172836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.174891] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.176387] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.181489] Bluetooth: hci1: HCI_REQ-0x0c1a [ 65.212232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.213910] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.216678] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.218801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.220055] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.221360] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.223121] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.224192] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.225743] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.229519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.231678] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.233088] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.235138] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.236276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.237801] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 65.239186] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 65.240321] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.241408] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.242801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.243841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.249407] Bluetooth: hci7: HCI_REQ-0x0c1a [ 65.250301] Bluetooth: hci5: HCI_REQ-0x0c1a [ 65.252461] Bluetooth: hci6: HCI_REQ-0x0c1a [ 65.272437] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.279344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.289444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.299433] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.108384] Bluetooth: hci0: command 0x0409 tx timeout [ 67.171015] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 67.172025] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 67.236116] Bluetooth: hci1: command 0x0409 tx timeout [ 67.299040] Bluetooth: hci5: command 0x0409 tx timeout [ 67.299140] Bluetooth: hci6: command 0x0409 tx timeout [ 67.299629] Bluetooth: hci7: command 0x0409 tx timeout [ 67.363064] Bluetooth: hci2: command 0x0409 tx timeout [ 69.155383] Bluetooth: hci0: command 0x041b tx timeout [ 69.283074] Bluetooth: hci1: command 0x041b tx timeout [ 69.347038] Bluetooth: hci6: command 0x041b tx timeout [ 69.347066] Bluetooth: hci7: command 0x041b tx timeout [ 69.347487] Bluetooth: hci5: command 0x041b tx timeout [ 69.411017] Bluetooth: hci2: command 0x041b tx timeout [ 70.310908] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.312171] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.313259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.315631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.316816] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.317887] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.321695] Bluetooth: hci4: HCI_REQ-0x0c1a [ 71.203021] Bluetooth: hci0: command 0x040f tx timeout [ 71.331033] Bluetooth: hci1: command 0x040f tx timeout [ 71.395007] Bluetooth: hci5: command 0x040f tx timeout [ 71.395080] Bluetooth: hci7: command 0x040f tx timeout [ 71.395433] Bluetooth: hci6: command 0x040f tx timeout [ 71.459030] Bluetooth: hci2: command 0x040f tx timeout [ 72.163012] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 72.355039] Bluetooth: hci4: command 0x0409 tx timeout [ 73.251055] Bluetooth: hci0: command 0x0419 tx timeout [ 73.379005] Bluetooth: hci1: command 0x0419 tx timeout [ 73.443020] Bluetooth: hci7: command 0x0419 tx timeout [ 73.443451] Bluetooth: hci6: command 0x0419 tx timeout [ 73.443856] Bluetooth: hci5: command 0x0419 tx timeout [ 73.507063] Bluetooth: hci2: command 0x0419 tx timeout [ 74.403055] Bluetooth: hci4: command 0x041b tx timeout [ 74.739485] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.743017] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.745006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.751198] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.752644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.754708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.757437] Bluetooth: hci3: HCI_REQ-0x0c1a [ 76.459048] Bluetooth: hci4: command 0x040f tx timeout [ 76.771136] Bluetooth: hci3: command 0x0409 tx timeout [ 78.500059] Bluetooth: hci4: command 0x0419 tx timeout [ 78.819026] Bluetooth: hci3: command 0x041b tx timeout [ 80.867049] Bluetooth: hci3: command 0x040f tx timeout [ 82.915427] Bluetooth: hci3: command 0x0419 tx timeout 06:34:47 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3800019324000100ce2a6173745f73656a6f696e5f636f756e7400000000000000000000de8d7eb57951063a0300000008000400000000000800010035631bf4aa79d98c794c45ca11f7d00264b96b589a08e43bd11d89df4df614f2", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000010000008000600", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x48}, 0x40000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) [ 118.211761] device syz_tun entered promiscuous mode [ 118.231424] device syz_tun left promiscuous mode [ 118.248624] device syz_tun entered promiscuous mode [ 118.264163] device syz_tun left promiscuous mode 06:34:47 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3800019324000100ce2a6173745f73656a6f696e5f636f756e7400000000000000000000de8d7eb57951063a0300000008000400000000000800010035631bf4aa79d98c794c45ca11f7d00264b96b589a08e43bd11d89df4df614f2", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000010000008000600", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x48}, 0x40000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) [ 118.355257] device syz_tun entered promiscuous mode [ 118.383584] device syz_tun left promiscuous mode 06:34:47 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3800019324000100ce2a6173745f73656a6f696e5f636f756e7400000000000000000000de8d7eb57951063a0300000008000400000000000800010035631bf4aa79d98c794c45ca11f7d00264b96b589a08e43bd11d89df4df614f2", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000010000008000600", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x48}, 0x40000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) [ 118.498197] device syz_tun entered promiscuous mode [ 118.542147] device syz_tun left promiscuous mode 06:34:47 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3800019324000100ce2a6173745f73656a6f696e5f636f756e7400000000000000000000de8d7eb57951063a0300000008000400000000000800010035631bf4aa79d98c794c45ca11f7d00264b96b589a08e43bd11d89df4df614f2", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000010000008000600", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x48}, 0x40000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 06:34:48 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3800019324000100ce2a6173745f73656a6f696e5f636f756e7400000000000000000000de8d7eb57951063a0300000008000400000000000800010035631bf4aa79d98c794c45ca11f7d00264b96b589a08e43bd11d89df4df614f2", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000010000008000600", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x48}, 0x40000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) [ 118.789570] device syz_tun entered promiscuous mode [ 118.820664] device syz_tun left promiscuous mode [ 118.863003] device syz_tun entered promiscuous mode [ 118.893812] device syz_tun left promiscuous mode 06:34:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x10) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 06:34:48 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3800019324000100ce2a6173745f73656a6f696e5f636f756e7400000000000000000000de8d7eb57951063a0300000008000400000000000800010035631bf4aa79d98c794c45ca11f7d00264b96b589a08e43bd11d89df4df614f2", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000010000008000600", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x48}, 0x40000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) [ 119.080155] device syz_tun entered promiscuous mode [ 119.114756] device syz_tun left promiscuous mode [ 119.153099] device syz_tun entered promiscuous mode [ 119.185589] device syz_tun left promiscuous mode 06:34:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) [ 119.362994] device syz_tun entered promiscuous mode [ 119.378639] device syz_tun left promiscuous mode [ 120.081236] loop2: detected capacity change from 0 to 135168 [ 120.086912] nfs4: Unknown parameter 'euid>00000000000000000000' 06:35:06 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 06:35:06 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3800019324000100ce2a6173745f73656a6f696e5f636f756e7400000000000000000000de8d7eb57951063a0300000008000400000000000800010035631bf4aa79d98c794c45ca11f7d00264b96b589a08e43bd11d89df4df614f2", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000010000008000600", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x48}, 0x40000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 06:35:06 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2, 0x148, 0x1}, 0x18) move_mount(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='\x00', 0x41) r2 = accept(r0, &(0x7f0000000140)=@tipc=@id, &(0x7f00000001c0)=0x80) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000200)={0x1, 0x4, 0x9}) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/165, 0xa5) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x80) r4 = getuid() mount$9p_xen(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80821, &(0x7f0000000440)={'trans=xen,', {[{@fscache}, {@posixacl}, {@cache_fscache}, {@noextend}, {@cache_fscache}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x2f}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x34, 0x39, 0x35, 0x31, 0x31, 0x31, 0x30], 0x2d, [0x31, 0x31, 0x60, 0x65], 0x2d, [0x30, 0x34, 0x30, 0x62], 0x2d, [0x30, 0x34, 0x62, 0x62], 0x2d, [0x31, 0x30, 0x35, 0x36, 0x66, 0x36, 0x34, 0x64]}}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@audit}]}}) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [], 0xa, "abcbc4fecb7737c5e797a69e8480f6693f224d81116dab222c9565f931b2f7522c89450177ecc7bb6a1439c3bf0be39cb2feacaf7f4ca9201e8d475588dba4bf2d4d3213d222de61d08b2798d32a45bc8f557c822c306c2dfab4c60cdf676c"}, 0x6a) r5 = openat$cgroup_type(r0, &(0x7f0000000580), 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) readlinkat(r3, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=""/236, 0xec) lgetxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@known='system.posix_acl_default\x00', &(0x7f0000000780)=""/4096, 0x1000) openat(0xffffffffffffffff, &(0x7f0000001780)='./file0\x00', 0x105000, 0x29) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001800)={0x0, 0x0, 0x0}, &(0x7f0000001840)=0xc) lchown(&(0x7f00000017c0)='./file0\x00', r4, r6) setxattr(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000001900)='cgroup.type\x00', 0xc, 0x3) setxattr$security_ima(&(0x7f0000001940)='\x00', &(0x7f0000001980), &(0x7f00000019c0)=@v2={0x3, 0x0, 0xc, 0xfff, 0x90, "5e244076a1fdf27b44c0b1bb7def3676b3945643c3000b90942d3b431ddd50c397df77c56d220e5cedaef1c7ceeba39f890fb160f84fcebba45d2421de27e2aff8bf47ce066438162e18a0f386b8ff157ddd1b9dfb04071aab9c7b97dd45ab841dc46b8bc805eb8b3aa507791bda9f35eb47522ba1f025bdfcc3e8176267127fce2a75d134f6c0f3c264fc9ca5eed7d3"}, 0x99, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001a80)={"97830a3e9064df8442b4b89b95655f57", 0x0, 0x0, {0xb697, 0x2}, {0x0, 0x3}, 0x6, [0xfffffffffffff911, 0x9, 0x100000001, 0x34e080000, 0x7ff, 0x3, 0x5, 0x5874, 0x3, 0xb36, 0x3, 0x6, 0x9, 0x100000000, 0x1000, 0x6]}) 06:35:06 executing program 2: r0 = syz_usb_connect(0x5, 0x4dc, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x6f, 0xe4, 0x24, 0xff, 0xb05, 0x17e8, 0xfc57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4ca, 0x2, 0x3, 0x1, 0xc0, 0x8, [{{0x9, 0x4, 0xf2, 0xbd, 0x9, 0x9b, 0xf2, 0x27, 0x1f, [@generic={0x4f, 0x1, "5a1352d6d961dc18acc5cc54e7e0de26431098aea3b66018fc817a4bdfb6b88fdfbafb607d1f79c38e2390acc1df6576a56ba3e5cfb714cf9c773aad361c6de1eba035465e25ba20fc78b321a8"}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x8001, 0x6, 0xfb}, {0x6, 0x24, 0x1a, 0x81d4}, [@dmm={0x7, 0x24, 0x14, 0x2}, @dmm={0x7, 0x24, 0x14, 0x2, 0x5}, @mdlm_detail={0x2b, 0x24, 0x13, 0x7f, "5f3e5cd091e41bf2905034e49ea07902e41d1be2dd85444143d57c1a521e00cb1fe454f3d1af8b"}, @dmm={0x7, 0x24, 0x14, 0x800, 0x2}]}], [{{0x9, 0x5, 0xd, 0x3, 0x0, 0xd2, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x1f, 0xfffa}, @generic={0x100, 0x1c, "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"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x9, 0x7f, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x7f, 0x7000}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x81, 0x80, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x0, 0x6, 0x80}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0x0, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x5, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x5, 0x3, 0x9, [@generic={0x8f, 0x9, "4da5704eca5a448b6b6c26f2c1b18c03c25573b3880f363aa4f7497eee83f8bfbdc5c9dc36005f4170674f834c788bacd8905ab5c85e85215f66422e6342824af53956d910ee3547d890a2b60cc5455512545ea228396a23f1556d5eec86ef71e574cae17c462a2a1844ecfda6154e404353641edc7a5f4aa7bf600a00218f88f481c31f755a9d3cb86a67077f"}, @generic={0xf4, 0x8, "486c3ce6a8aa39e59b29d8ad12d2ba931045fe762b46fe823c5e74a40cd95f4500e3539d44dc86b3c321450b1a3de19d9070423447e9f64d968700000c48365d065107d6e2e1fa23bfc9a5ee1506c731379cba51bcdc89e5404d39297834455e4b0bfc9c88cc581dfe4acbaf822709ca5991e868b302b8ce28a80b16719c99f3723d7cd1155714217b5ab6df6d810cc948f70cf65da814922e64dd1adc63ba63fd7671223012c3f29d13396ef589434549bbf921ae3ed2b25bb2a418f0516d21b02f67939f9f8f1a1ef94949ce7bda563566847a2d68e8141a789c8779bf8c4aa89525bc73a338e0ab584c07f3f85b33547c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x73, 0x1, 0xf0, [@generic={0xe3, 0x1, "721f11508ee4af928deae06c25d432e9f9593620301c3d7ec5c621703693854fa3d42b04931ee07b324496c6d00b7733636c85b02aac2207b06df1e22830b2f2c870d0b36dd75581bd148c59a33255eaedb360abade8d1c95c1db976202e64ab1ea5d153b458bde009600d613bbbcc1c7451777147dc5b658994d89421500222c40f0c7f536b4fd49cea126f2431ccd071b43377ed87080726cbbae40daab216c5b14c70165deefa3cf80ac5ea7153004a883f1bc8663c9ad4ba926040a621bc9ebd8103e98c6f0a7bc4ab576b0dd936625056f68caae9068c0bf6efb16b5731dc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x80, 0xfb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1f, 0xaccb}]}}]}}, {{0x9, 0x4, 0x87, 0x0, 0x1, 0xcd, 0x28, 0xbd, 0x8, [@hid_hid={0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0xadd}}, @hid_hid={0x9, 0x21, 0x1000, 0x9, 0x1, {0x22, 0x90f}}], [{{0x9, 0x5, 0x0, 0xc, 0x20, 0x8, 0x81, 0x4}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0xff, 0x0, 0x8, 0xff, 0x9}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x40, 0x31, 0x8b, {0x8b, 0x22, "e722328e05e20eb02bcfb3dc9b5c002a20c94a4ce199666823d83e86d0eaf412c60bbaf3031b0c379fcfe88cc4a4c52666a6ed0a75b39789e6bad3806956972da999d9f65f0e37e10509a8ac2f6d092c800ad946be259dd74f420405210e20373dc94b362ddfca3b7ab2c832dac11d6836b9ab6717d20bd7fe9aff55d9e4f15706a865fdc807337068"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000008c0)={0x0, 0x8, 0xad, "28fe565b7b7f16ebba48734463b68d7038e4c7eba0532ce743c1e90f00352ea9d900bf921744f1601b8dc5a0ce36bdb8276570f61f39ae6eb28099a0949f394db72c05ddbd61087f44150c71e3b51dd11629055c58a8a951a77b93c2dfc149684507470394086a416e6f87884fb7bba1eb94baaff1bce858690fe96a6ca289bff003debd210f36a01db69bb635517a93fd7052a15ba8463df841fb0b42d7f284dc933fdb6a7672d6bc4bf870ef"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x101, 0x1f, 0x6, 0x9, 0x9d7, 0x7f20, 0x8000, 0x101, 0x101, 0x8, 0x7, 0x92a0}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0xfffffff7}, &(0x7f0000000a00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000a80)={0x20, 0x89, 0x2, 0x1}}) syz_mount_image$tmpfs(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="008f42d3d9d16300000100e000000000"]) 06:35:06 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x10) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 06:35:06 executing program 7: r0 = memfd_create(&(0x7f0000000100)='/d#>\xbb\xb3~\x89\xa4O{\xc3\xad *Zn\xad\x11\xf2u\xe3\xf5\xbd\x1d\xa5\xeb\xee\xeee\xf4\xaf\xf0\x81\xea|f\x1c\xe0\xc1\xd1\x19cr\xa1\x01\xc3g\x10#\xa1\xfa\xb2\xe7\xa4+\x9e\xd7\xa2\x04y\xc1\xcf-V\xc0\x18Ls\xe2I\x19:\xe7\xc6F\x96xM\x1a\x00\x00\x00\x9c*\x03\x1f\x94\x9a\xf1\xcb\xc9\xf1\x16I\x85\xc8x\xe0\xc7\xc7z\xfa\t\x85\t\xfc\xcc\v\xce\x1b\xa2\x1b\xb4+\xe7\xb4M\xf4\xa4\xef\x0eW\x7f\x13\xa9>\xcf;+-\xf1gT\xd0\xcc\xff#\x1b\xbc\xe2\x06\xdf\xc2\xcb \x149n\xf24x\xe4\x9b\xab\xf7E\x1c\xb2,\xec[|\xcc\x85{\xb3\x98\x139\xc4F\x9fE\xa7*\xa2\xc8\xa9H\xed\x9b@\x8bH\xe5\xb5\xa7\xae\x11\xa7N\x00\x00\x04\x00\x00\x00\x00\x00\x00', 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x401a012, r0, 0x0) dup(0xffffffffffffffff) 06:35:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0) openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xb9) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r4, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1, 0x1, 0x5, 0x20, 0x0, 0x1, 0x62000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x100000000, 0x401}, 0x800, 0xffffffffffff20aa, 0x9, 0x8, 0x6, 0x9, 0x8, 0x0, 0x6, 0x0, 0x232}, 0x0, 0xf, 0xffffffffffffffff, 0x2) signalfd4(r5, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000001000000180000000600ce2abe7dff9f57274b43f1353697b34407715cdeb34fc91d21b36b05ab8e6849a60addf84907fea1d83f32ea8c047c2c9fcf81c09ab68e7ca44455c5a39613d2f427d25cd959487cd7dfcb465ea1cdf12da351f482ba4d373a590a168a483df324dfcbd87f059fd023fe84b20e4fbfedb5a8fac5f42be332abe17c09562ec2956f74f4434131b4a6c07e3b1d629a89eea1554c9b375e9a2c11af9824f75d8d023a024b68bee4a8c73318c168fe2427b4eff26aab7cb35e5ce0fef0ad17", @ANYRES32=r3, @ANYBLOB="0100ee2da88e0fd124a2000002cbb5845c"]) 06:35:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x9e7041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="010000007f0000002e2f66696c653000"]) close_range(r1, r2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000280)={0xffff, 0x0, 0xffffff01, 0x0, 0x0, "b270d8bb4882248ea71cbd504188523c7f6070"}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x7, 0x1, "ec2ccdd1341b209b"}) [ 137.597789] audit: type=1400 audit(1664519706.951:7): avc: denied { open } for pid=4002 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.602790] audit: type=1400 audit(1664519706.951:8): avc: denied { kernel } for pid=4002 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.613277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.615287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.623214] device syz_tun entered promiscuous mode [ 137.625907] device syz_tun entered promiscuous mode [ 137.627549] ------------[ cut here ]------------ [ 137.627582] [ 137.627588] ====================================================== [ 137.627595] WARNING: possible circular locking dependency detected [ 137.627602] 6.0.0-rc7-next-20220929 #1 Not tainted [ 137.627615] ------------------------------------------------------ [ 137.627621] syz-executor.0/4007 is trying to acquire lock: [ 137.627633] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 137.627706] [ 137.627706] but task is already holding lock: [ 137.627716] ffff88800dd07c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.627768] [ 137.627768] which lock already depends on the new lock. [ 137.627768] [ 137.627774] [ 137.627774] the existing dependency chain (in reverse order) is: [ 137.627780] [ 137.627780] -> #3 (&ctx->lock){....}-{2:2}: [ 137.627808] _raw_spin_lock+0x2a/0x40 [ 137.627830] __perf_event_task_sched_out+0x53b/0x18d0 [ 137.627853] __schedule+0xedd/0x2470 [ 137.627881] schedule+0xda/0x1b0 [ 137.627908] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.627931] syscall_exit_to_user_mode+0x19/0x40 [ 137.627956] do_syscall_64+0x48/0x90 [ 137.627990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.628016] [ 137.628016] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 137.628043] _raw_spin_lock_nested+0x30/0x40 [ 137.628065] raw_spin_rq_lock_nested+0x1e/0x30 [ 137.628090] task_fork_fair+0x63/0x4d0 [ 137.628123] sched_cgroup_fork+0x3d0/0x540 [ 137.628152] copy_process+0x4183/0x6e20 [ 137.628172] kernel_clone+0xe7/0x890 [ 137.628191] user_mode_thread+0xad/0xf0 [ 137.628212] rest_init+0x24/0x250 [ 137.628236] arch_call_rest_init+0xf/0x14 [ 137.628268] start_kernel+0x4c6/0x4eb [ 137.628297] secondary_startup_64_no_verify+0xe0/0xeb [ 137.628324] [ 137.628324] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 137.628352] _raw_spin_lock_irqsave+0x39/0x60 [ 137.628374] try_to_wake_up+0xab/0x1930 [ 137.628400] up+0x75/0xb0 [ 137.628429] __up_console_sem+0x6e/0x80 [ 137.628460] console_unlock+0x46a/0x590 [ 137.628492] do_con_write+0xc05/0x1d50 [ 137.628512] con_write+0x21/0x40 [ 137.628530] n_tty_write+0x4d4/0xfe0 [ 137.628554] file_tty_write.constprop.0+0x455/0x8a0 [ 137.628577] vfs_write+0x9c3/0xd90 [ 137.628608] ksys_write+0x127/0x250 [ 137.628640] do_syscall_64+0x3b/0x90 [ 137.628673] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.628699] [ 137.628699] -> #0 ((console_sem).lock){....}-{2:2}: [ 137.628727] __lock_acquire+0x2a02/0x5e70 [ 137.628760] lock_acquire+0x1a2/0x530 [ 137.628792] _raw_spin_lock_irqsave+0x39/0x60 [ 137.628814] down_trylock+0xe/0x70 [ 137.628844] __down_trylock_console_sem+0x3b/0xd0 [ 137.628877] vprintk_emit+0x16b/0x560 [ 137.628909] vprintk+0x84/0xa0 [ 137.628942] _printk+0xba/0xf1 [ 137.628963] report_bug.cold+0x72/0xab [ 137.628996] handle_bug+0x3c/0x70 [ 137.629029] exc_invalid_op+0x14/0x50 [ 137.629063] asm_exc_invalid_op+0x16/0x20 [ 137.629087] group_sched_out.part.0+0x2c7/0x460 [ 137.629124] ctx_sched_out+0x8f1/0xc10 [ 137.629158] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.629180] __schedule+0xedd/0x2470 [ 137.629208] schedule+0xda/0x1b0 [ 137.629235] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.629257] syscall_exit_to_user_mode+0x19/0x40 [ 137.629282] do_syscall_64+0x48/0x90 [ 137.629316] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.629341] [ 137.629341] other info that might help us debug this: [ 137.629341] [ 137.629347] Chain exists of: [ 137.629347] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 137.629347] [ 137.629377] Possible unsafe locking scenario: [ 137.629377] [ 137.629381] CPU0 CPU1 [ 137.629386] ---- ---- [ 137.629390] lock(&ctx->lock); [ 137.629402] lock(&rq->__lock); [ 137.629414] lock(&ctx->lock); [ 137.629427] lock((console_sem).lock); [ 137.629439] [ 137.629439] *** DEADLOCK *** [ 137.629439] [ 137.629443] 2 locks held by syz-executor.0/4007: [ 137.629456] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 137.629516] #1: ffff88800dd07c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.629570] [ 137.629570] stack backtrace: [ 137.629576] CPU: 0 PID: 4007 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220929 #1 [ 137.629601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.629616] Call Trace: [ 137.629622] [ 137.629630] dump_stack_lvl+0x8b/0xb3 [ 137.629667] check_noncircular+0x263/0x2e0 [ 137.629700] ? format_decode+0x26c/0xb50 [ 137.629732] ? print_circular_bug+0x450/0x450 [ 137.629767] ? enable_ptr_key_workfn+0x20/0x20 [ 137.629801] ? format_decode+0x26c/0xb50 [ 137.629836] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 137.629872] __lock_acquire+0x2a02/0x5e70 [ 137.629916] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 137.629962] lock_acquire+0x1a2/0x530 [ 137.629996] ? down_trylock+0xe/0x70 [ 137.630031] ? lock_release+0x750/0x750 [ 137.630073] ? vprintk+0x84/0xa0 [ 137.630109] _raw_spin_lock_irqsave+0x39/0x60 [ 137.630136] ? down_trylock+0xe/0x70 [ 137.630168] down_trylock+0xe/0x70 [ 137.630199] ? vprintk+0x84/0xa0 [ 137.630230] __down_trylock_console_sem+0x3b/0xd0 [ 137.630262] vprintk_emit+0x16b/0x560 [ 137.630297] vprintk+0x84/0xa0 [ 137.630328] _printk+0xba/0xf1 [ 137.630349] ? record_print_text.cold+0x16/0x16 [ 137.630379] ? report_bug.cold+0x66/0xab [ 137.630412] ? group_sched_out.part.0+0x2c7/0x460 [ 137.630446] report_bug.cold+0x72/0xab [ 137.630480] handle_bug+0x3c/0x70 [ 137.630512] exc_invalid_op+0x14/0x50 [ 137.630563] asm_exc_invalid_op+0x16/0x20 [ 137.630595] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.630637] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.630658] RSP: 0018:ffff888032f0fc48 EFLAGS: 00010006 [ 137.630675] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.630689] RDX: ffff88801d2d3580 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 137.630703] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 137.630717] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800dd07c00 [ 137.630731] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 137.630751] ? group_sched_out.part.0+0x2c7/0x460 [ 137.630788] ? group_sched_out.part.0+0x2c7/0x460 [ 137.630825] ctx_sched_out+0x8f1/0xc10 [ 137.630861] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.630887] ? lock_is_held_type+0xd7/0x130 [ 137.630913] ? __perf_cgroup_move+0x160/0x160 [ 137.630932] ? set_next_entity+0x304/0x550 [ 137.630965] ? update_curr+0x267/0x740 [ 137.630999] ? lock_is_held_type+0xd7/0x130 [ 137.631025] __schedule+0xedd/0x2470 [ 137.631056] ? io_schedule_timeout+0x150/0x150 [ 137.631086] ? rcu_read_lock_sched_held+0x3e/0x80 [ 137.631123] schedule+0xda/0x1b0 [ 137.631158] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.631183] syscall_exit_to_user_mode+0x19/0x40 [ 137.631211] do_syscall_64+0x48/0x90 [ 137.631247] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.631274] RIP: 0033:0x7fdeca771b19 [ 137.631290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.631313] RSP: 002b:00007fdec7ce7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.631334] RAX: 0000000000000001 RBX: 00007fdeca884f68 RCX: 00007fdeca771b19 [ 137.631350] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdeca884f6c [ 137.631365] RBP: 00007fdeca884f60 R08: 000000000000000e R09: 0000000000000000 [ 137.631379] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fdeca884f6c [ 137.631394] R13: 00007ffc50cc09af R14: 00007fdec7ce7300 R15: 0000000000022000 [ 137.631420] [ 137.641270] device syz_tun entered promiscuous mode [ 137.641635] WARNING: CPU: 0 PID: 4007 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 137.742603] Modules linked in: [ 137.743048] CPU: 0 PID: 4007 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220929 #1 [ 137.744179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.745762] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.746579] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.749138] RSP: 0018:ffff888032f0fc48 EFLAGS: 00010006 [ 137.749904] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.750900] RDX: ffff88801d2d3580 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 137.751884] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 137.752902] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800dd07c00 [ 137.753887] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 137.754907] FS: 00007fdec7ce7700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 137.756057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.756859] CR2: 0000001b2d923000 CR3: 00000000186be000 CR4: 0000000000350ef0 [ 137.757862] Call Trace: [ 137.758237] [ 137.758586] ctx_sched_out+0x8f1/0xc10 [ 137.759176] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.759929] ? lock_is_held_type+0xd7/0x130 [ 137.760561] ? __perf_cgroup_move+0x160/0x160 [ 137.761220] ? set_next_entity+0x304/0x550 [ 137.761816] ? update_curr+0x267/0x740 [ 137.762360] ? lock_is_held_type+0xd7/0x130 [ 137.763009] __schedule+0xedd/0x2470 [ 137.763571] ? io_schedule_timeout+0x150/0x150 [ 137.764207] ? rcu_read_lock_sched_held+0x3e/0x80 [ 137.764891] schedule+0xda/0x1b0 [ 137.765365] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.766039] syscall_exit_to_user_mode+0x19/0x40 [ 137.766729] do_syscall_64+0x48/0x90 [ 137.767255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.767953] RIP: 0033:0x7fdeca771b19 [ 137.768456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.770864] RSP: 002b:00007fdec7ce7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.771870] RAX: 0000000000000001 RBX: 00007fdeca884f68 RCX: 00007fdeca771b19 [ 137.772818] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdeca884f6c [ 137.773784] RBP: 00007fdeca884f60 R08: 000000000000000e R09: 0000000000000000 [ 137.774760] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fdeca884f6c [ 137.775730] R13: 00007ffc50cc09af R14: 00007fdec7ce7300 R15: 0000000000022000 [ 137.776683] [ 137.777012] irq event stamp: 920 [ 137.777473] hardirqs last enabled at (919): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 137.778725] hardirqs last disabled at (920): [] __schedule+0x1225/0x2470 [ 137.779856] softirqs last enabled at (906): [] __irq_exit_rcu+0x11b/0x180 [ 137.781006] softirqs last disabled at (889): [] __irq_exit_rcu+0x11b/0x180 [ 137.782143] ---[ end trace 0000000000000000 ]--- 06:35:07 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2, 0x148, 0x1}, 0x18) move_mount(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='\x00', 0x41) r2 = accept(r0, &(0x7f0000000140)=@tipc=@id, &(0x7f00000001c0)=0x80) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000200)={0x1, 0x4, 0x9}) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/165, 0xa5) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x80) r4 = getuid() mount$9p_xen(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80821, &(0x7f0000000440)={'trans=xen,', {[{@fscache}, {@posixacl}, {@cache_fscache}, {@noextend}, {@cache_fscache}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x2f}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x34, 0x39, 0x35, 0x31, 0x31, 0x31, 0x30], 0x2d, [0x31, 0x31, 0x60, 0x65], 0x2d, [0x30, 0x34, 0x30, 0x62], 0x2d, [0x30, 0x34, 0x62, 0x62], 0x2d, [0x31, 0x30, 0x35, 0x36, 0x66, 0x36, 0x34, 0x64]}}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@audit}]}}) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [], 0xa, "abcbc4fecb7737c5e797a69e8480f6693f224d81116dab222c9565f931b2f7522c89450177ecc7bb6a1439c3bf0be39cb2feacaf7f4ca9201e8d475588dba4bf2d4d3213d222de61d08b2798d32a45bc8f557c822c306c2dfab4c60cdf676c"}, 0x6a) r5 = openat$cgroup_type(r0, &(0x7f0000000580), 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) readlinkat(r3, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=""/236, 0xec) lgetxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@known='system.posix_acl_default\x00', &(0x7f0000000780)=""/4096, 0x1000) openat(0xffffffffffffffff, &(0x7f0000001780)='./file0\x00', 0x105000, 0x29) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001800)={0x0, 0x0, 0x0}, &(0x7f0000001840)=0xc) lchown(&(0x7f00000017c0)='./file0\x00', r4, r6) setxattr(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000001900)='cgroup.type\x00', 0xc, 0x3) setxattr$security_ima(&(0x7f0000001940)='\x00', &(0x7f0000001980), &(0x7f00000019c0)=@v2={0x3, 0x0, 0xc, 0xfff, 0x90, "5e244076a1fdf27b44c0b1bb7def3676b3945643c3000b90942d3b431ddd50c397df77c56d220e5cedaef1c7ceeba39f890fb160f84fcebba45d2421de27e2aff8bf47ce066438162e18a0f386b8ff157ddd1b9dfb04071aab9c7b97dd45ab841dc46b8bc805eb8b3aa507791bda9f35eb47522ba1f025bdfcc3e8176267127fce2a75d134f6c0f3c264fc9ca5eed7d3"}, 0x99, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001a80)={"97830a3e9064df8442b4b89b95655f57", 0x0, 0x0, {0xb697, 0x2}, {0x0, 0x3}, 0x6, [0xfffffffffffff911, 0x9, 0x100000001, 0x34e080000, 0x7ff, 0x3, 0x5, 0x5874, 0x3, 0xb36, 0x3, 0x6, 0x9, 0x100000000, 0x1000, 0x6]}) [ 137.789143] device syz_tun left promiscuous mode [ 137.817742] device syz_tun left promiscuous mode [ 137.826445] device syz_tun left promiscuous mode [ 137.831964] hrtimer: interrupt took 18415 ns [ 137.938104] audit: type=1400 audit(1664519707.262:9): avc: denied { write } for pid=4002 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 06:35:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={'bond_slave_1\x00', {0x2, 0x0, @multicast2}}) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_param={{0x200b, 0x7}, {0x1, 0x6, 0x1ff, 0x80, 0x1}}}, 0xb) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc8}}}, 0x6) recvmmsg(r0, &(0x7f0000001d40)=[{{&(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000340)=""/231, 0xe7}, {&(0x7f0000000440)=""/169, 0xa9}, {&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f00000005c0)=""/247, 0xf7}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/83, 0x53}], 0x7, &(0x7f0000000840)=""/66, 0x42}, 0xb9}, {{&(0x7f00000008c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/89, 0x59}, {&(0x7f00000019c0)=""/185, 0xb9}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/83, 0x53}, {&(0x7f0000001b80)=""/26, 0x1a}, {&(0x7f0000001bc0)=""/54, 0x36}, {&(0x7f0000001c00)=""/182, 0xb6}], 0x8}, 0x7fff}], 0x2, 0x24, &(0x7f0000001dc0)={0x0, 0x3938700}) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6) 06:35:07 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x3e, 0x200, 0x70bd27, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ee7a34a54ff0bc3ee80b6af9abd7c78d7a5311ffa588eeceab3c12357060c39241600abe89368ff1a08ec804ab35e3dc46f452dee36c86e38e25fefbb281863c2e4000ad29466dd1fefebb93b32e928597316b534cff159eca1494c34135939e7ea2f6ba663a57268efab9d123c309830da1d1eec8da896757b6006f549192a2d4fc242c96cc886b8f2b09d95ca8c5624969526fdcbd00215971895a3e65ea8f8e2436c068959948e29a04b97e8511301faf2af78f80d734c4e0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8030000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="3800019324000100ce2a6173745f73656a6f696e5f636f756e7400000000000000000000de8d7eb57951063a0300000008000400000000000800010035631bf4aa79d98c794c45ca11f7d00264b96b589a08e43bd11d89df4df614f2", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000010000008000600", @ANYRES32=r7, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x48}, 0x40000) 06:35:07 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x21, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, 0xc) [ 138.002845] device syz_tun entered promiscuous mode [ 138.023456] device syz_tun left promiscuous mode [ 138.297767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.299332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 VM DIAGNOSIS: 06:35:07 Registers: info registers vcpu 0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff888032f0f690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000066 R11=0000000000000001 R12=0000000000000066 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdec7ce7700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d923000 CR3=00000000186be000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fdeca8587c0 00007fdeca8587c8 YMM02=0000000000000000 0000000000000000 00007fdeca8587e0 00007fdeca8587c0 YMM03=0000000000000000 0000000000000000 00007fdeca8587c8 00007fdeca8587c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffffff85b06a18 RBX=0000000000000001 RCX=ffffffff814ce466 RDX=ffff7fffffffffff RSI=0000000000000008 RDI=ffffffff85b06a10 RBP=ffffffff85b06a10 RSP=ffff88803e24fef0 R8 =0000000000000000 R9 =ffffffff85b06a17 R10=ffffed10030aca0d R11=0000000000000001 R12=ffffffff8425172c R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8178770d RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f48d872b700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2dd25000 CR3=000000003d1f4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f48db29c7c0 00007f48db29c7c8 YMM02=0000000000000000 0000000000000000 00007f48db29c7e0 00007f48db29c7c0 YMM03=0000000000000000 0000000000000000 00007f48db29c7c8 00007f48db29c7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000