Warning: Permanently added '[localhost]:43191' (ECDSA) to the list of known hosts. 2022/10/01 21:43:16 fuzzer started 2022/10/01 21:43:16 dialing manager at localhost:35095 syzkaller login: [ 46.111900] cgroup: Unknown subsys name 'net' [ 46.218935] cgroup: Unknown subsys name 'rlimit' 2022/10/01 21:43:30 syscalls: 210 2022/10/01 21:43:30 code coverage: enabled 2022/10/01 21:43:30 comparison tracing: enabled 2022/10/01 21:43:30 extra coverage: enabled 2022/10/01 21:43:30 setuid sandbox: enabled 2022/10/01 21:43:30 namespace sandbox: enabled 2022/10/01 21:43:30 Android sandbox: enabled 2022/10/01 21:43:30 fault injection: enabled 2022/10/01 21:43:30 leak checking: enabled 2022/10/01 21:43:30 net packet injection: enabled 2022/10/01 21:43:30 net device setup: enabled 2022/10/01 21:43:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 21:43:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 21:43:30 USB emulation: enabled 2022/10/01 21:43:30 hci packet injection: enabled 2022/10/01 21:43:30 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 21:43:30 802.15.4 emulation: enabled 2022/10/01 21:43:30 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 21:43:31 starting 8 fuzzer processes 21:43:31 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) r0 = io_uring_setup(0x123f, &(0x7f0000000040)={0x0, 0xf557, 0x0, 0x2, 0x10e}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x551040, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) r2 = io_uring_setup(0x41c5, &(0x7f0000000140)={0x0, 0x1c92, 0x0, 0x0, 0x129, 0x0, r1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x18, 0x5, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0x8000, 0x0, &(0x7f00000001c0)=[r0, r3, 0xffffffffffffffff, r0, r4]}, 0x5) poll(&(0x7f0000000240)=[{r1, 0x7261aa60e7995c9a}], 0x1, 0x2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0xf, 0x3, 0x39) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000380), 0x224000, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r1, r6, r7, r8, r5, r4, r9, r10], 0x8) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000440)={0x3, 0x200, 0x7fff, 0x9, 0xfffff801, 0x8001}) 21:43:31 executing program 2: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x401, 0x2d2, 0x200}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x3, 0x1, 0xfffffffe, 0x7}) r0 = memfd_secret(0x80000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000000c0)={0x1, 0x2, 0x7}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000100)=0x1) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3ff) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000180)=[{r1, 0x8208}, {r2, 0x160}, {r0, 0x8041}, {r0, 0x24}, {0xffffffffffffffff, 0x8650}], 0x5, 0x6) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="f3bfd8e400a7f703d1c5369077bc47cf44bff241efa796cae19c61612cb3a66c1c49879d2d4b7c8e77b6834f3e972826ef2d61b2a4079b9036effdee0c03f8d36ba5be03babbec8d8cb3bc281b078d5e8008fb2af1414e15c4fff8c8355a84a8a4250e50df1705ef6c52e6fd026d4bb51956271e1e652dc1d77acfbc815699ef0f02e20ddea42f773b7089adc631f4fa922146fb38d1bf54d2fb2f4debda87c3a3045b", 0xa3, 0xffffffffffffffff}], 0x1000, &(0x7f0000000340)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@nobarrier}, {@noinit_itable}, {@lazytime}], [{@obj_user={'obj_user', 0x3d, '*\t)'}}, {@fsname={'fsname', 0x3d, '\''}}, {@smackfsroot}, {@seclabel}, {@seclabel}]}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000003c0)) r3 = memfd_secret(0x80000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x2204c004) socketpair(0xf, 0x2, 0x9, &(0x7f0000000500)={0xffffffffffffffff}) connect$bt_l2cap(r4, &(0x7f0000000540)={0x1f, 0xfffc, @none, 0x800}, 0xe) r5 = memfd_secret(0x0) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0xfa6d) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 21:43:31 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x81000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x104, 0x464, 0x400, 0x70bd25, 0x25dfdbfe, "b49492f777e997cfddf06963b3528384f346277064c3d5d492ac010524532b091e573fc07e871b1a4808b9aa9fb8be644f9b58fb8c8217f55ee3739b2dcfa6b55ea483d4cf3e1814860ff51528acd6a8a5dd698f9394bdde8ab5d199d221f02129eec8e84bab07929873291caa4985824eecf4372afe8daeb4ba4e49af9684ec9dcb0b980b59ac6d375d406c5246f1a93b2394c23fb7033c64dfdb891cc5fad6f6bf19bdee1555ed42ba12fafd039b26eeb80f793534755fbf26a73567dde9ad7d3159584411821905d05bc0032698dedfdfa9ad5bff8eda4e4a8fe24948a59f384674b2932cf29c736de7cef520dae3f5043eb5"}, 0x104}, 0x1, 0x0, 0x0, 0x40a80c0}, 0x48040) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000300)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000340)) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x3f7, 0x300, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) socketpair(0x1d, 0x0, 0x668b3ab9, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x3, 0x0, &(0x7f00000004c0)=[r0, r3, r1, r0, r1, r1, r0]}, 0x7) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000540)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x4, 0x6, 0x4, 0x68b, 0x0, 0x9}, {0x1, 0x6, 0x0, 0x2, 0x9b, 0xfffffffffffffffe}], ['\x00', '\x00', '\x00']}) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8a0}, 0x4000081) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x330, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9bf2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb20e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x13}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf14be000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5ca}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x16e2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x807}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}]}, @TIPC_NLA_LINK={0x13c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5df}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x195}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000c40)={0x0, 0x2800, 0x5, 0x8, 0x0, 0x3f, 0x5}, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000c80)) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000cc0)={0x3, 0xfffffffeffffffff, 0x6, 0x7}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000d00)={0x9, 0x9}) 21:43:31 executing program 3: syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r0 = io_uring_setup(0x3188, &(0x7f0000000040)={0x0, 0x1f6b, 0x20, 0x0, 0x247}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x107800, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x216443, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x80, 0x8ce7, {{0x2e, 0x4, 0x0, 0x22, 0xb8, 0x64, 0x0, 0x3e, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xe8, 0x3, 0x0, [{@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x3}]}, @rr={0x7, 0xb, 0x33, [@remote, @empty]}, @lsrr={0x83, 0x27, 0x73, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x94, 0x2}, @end, @timestamp_addr={0x44, 0x14, 0xc6, 0x1, 0x9, [{@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x87, 0x3, 0xe, [{@local, 0x6}, {@multicast2, 0x3}, {@local, 0xfffff000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x3}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1c0, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f0000000580)) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r4) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x10) ioctl$SNAPSHOT_FREE(r4, 0x3305) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) ioctl$CDROM_SELECT_SPEED(r4, 0x5322, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000740)={0x1f, 0x0, @none}, &(0x7f0000000780)=0xe, 0xc00) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000800)={0x4, &(0x7f00000007c0)=[{0xf6, 0x0, 0x2, 0x9}, {0x7f, 0x7f, 0x40, 0x9}, {0x6, 0x3, 0x40, 0xb3}, {0x2, 0xe, 0x5, 0x7fff}]}) r9 = openat$cgroup_pressure(r4, &(0x7f0000000840)='cpu.pressure\x00', 0x2, 0x0) poll(&(0x7f0000000880)=[{r4, 0x4048}, {r6, 0x400}, {r7, 0x3410}, {r0, 0xc064}, {r8, 0x2008}, {r9, 0x8000}], 0x6, 0x0) read$snapshot(r2, &(0x7f00000008c0)=""/197, 0xc5) [ 60.340175] audit: type=1400 audit(1664660611.658:6): avc: denied { execmem } for pid=287 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:43:31 executing program 4: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r0, 0x42, 0x55de}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) r1 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xcf, 0x2, &(0x7f0000000340)=[{&(0x7f0000000200)="0746c068f53a99a3db571c9b8ca5c316eb1b4e9fda13db206f90fbcfcc592b09aaaa417059e993b947353b17ededa614c86e6cced1c9730f071ffcc3837b63306fc9ce43c2d62726f1f12d965c432e7e5fb9352d44643a62153b3d05ed97a3400d70d2354664019a", 0x68, 0x1}, {&(0x7f0000000280)="d7ff36ccc148c5b30ef2225eaba070088b3844b5b46a4cbe788db13d0224e25429d7ed502eb21b5ff85292eca9b2ebf4b6e5fd151a8451dea4574c7046bad6d5e51e870da87f48766d26a4f1f527922ae91dbec231a1dc74c478d739a13f22e017adc09a2f66b1302c1d0e661a0ffe45fea322e1bf67cbe525b9ed631b08e85b67f8cdb9658a929c8ab7f71cb9", 0x8d, 0x3f}], 0x1100002, &(0x7f0000000380)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}], [{@subj_user={'subj_user', 0x3d, '\'.'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_lt}, {@permit_directio}, {@euid_lt={'euid<', 0xee01}}, {@euid_lt}, {@euid_lt={'euid<', 0xee01}}, {@seclabel}]}) mknodat(r1, &(0x7f0000000480)='./file0\x00', 0x1, 0xf89e) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0x0, @fixed}, &(0x7f0000000500)=0xe, 0x80000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x1, 0x7ff, 0x0, 0xffffffffffffffff, 0x4, 0x55}, {0x9, 0x4884, 0x7fffffff, 0x10000, 0x200, 0x7f}], ['\x00', '\x00', '\x00', '\x00']}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000700)=0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000740)={0x2, [0x0, 0x0]}) bind$bt_l2cap(r2, &(0x7f0000000780)={0x1f, 0x8, @none, 0x3, 0x1}, 0xe) open$dir(&(0x7f00000007c0)='./file0\x00', 0x44100, 0x4) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000840)={0x430, 0x3f3, 0x10, 0x70bd29, 0x25dfdbfd, {0x2, 0x1, 0x2d, [0xffff9734, 0x206c, 0xef, 0xfffffffa, 0x5, 0x1f, 0xfffffffc, 0x0, 0x400, 0x7fff, 0x4, 0xfffffde2, 0x100, 0x1, 0x9, 0xfffffff7, 0x5, 0xffffffff, 0x100, 0x5, 0x3, 0x3, 0x3, 0x6, 0x5, 0x9, 0x8, 0x0, 0xab2d, 0x66b9, 0x200, 0x1ff, 0x4, 0x100, 0x9, 0x2, 0x9, 0xcd, 0x2, 0x4ce, 0xf5, 0x96, 0x80, 0x6, 0x3, 0x81, 0xc757, 0x401, 0x1, 0x3, 0x300000, 0x9, 0x4, 0xffffffc0, 0xeb2, 0x3, 0x1, 0xc1a6, 0x2, 0x1ad1, 0x6, 0x1000, 0x8001, 0x6], [0x2, 0x8000000, 0xffff, 0x4, 0x4b59, 0x8000, 0x7fffffff, 0x40, 0x4, 0x2, 0x1, 0x421, 0x8, 0x20, 0x0, 0x5, 0x81, 0x8, 0x7, 0x6, 0x8022, 0x80000001, 0x3, 0x9, 0x7, 0x4, 0x3, 0x4, 0x9, 0x81, 0x8, 0x9, 0x9, 0x80000001, 0x2, 0x2, 0x0, 0x8, 0x1, 0x1, 0x0, 0x101, 0x8001, 0x7, 0x1, 0x0, 0x7ff, 0x0, 0x20, 0x7ff, 0x7, 0x3ff, 0x7, 0x0, 0x10001, 0x20, 0x0, 0x1, 0x7ff, 0x8, 0x81, 0xfffffff9, 0x5, 0x4], [0x80000000, 0x100, 0x7ff, 0x6, 0x8, 0xe9, 0xfffffff7, 0x4, 0x8000, 0x0, 0x8000, 0x9, 0x6, 0xffff, 0x7, 0x4970d28, 0x3b, 0x6, 0x9, 0x1, 0x4, 0x8, 0x37, 0x5, 0x80000000, 0x101, 0x2, 0x4, 0x71ca, 0x7, 0x0, 0x7, 0x3ff, 0x5527, 0x3, 0x1, 0x101, 0x3f, 0x4, 0x1, 0x8000000, 0x7fffffff, 0x7, 0x1, 0x5ee, 0x9, 0x0, 0x4, 0x5, 0xab, 0x800, 0x8000, 0x47, 0x7, 0x800, 0x0, 0x4, 0x0, 0x80, 0x2, 0x1, 0x4, 0xf6, 0x2], [0x200, 0x1, 0x20, 0x7fce, 0xa5, 0xfffffffa, 0x20, 0x86, 0x2, 0x88, 0x1, 0x1, 0x800, 0x100, 0xf3a0, 0x75, 0xcf, 0x4, 0x8, 0x200, 0xfffffbff, 0xf992, 0x4, 0x8, 0x3, 0xab58, 0x6, 0x7ff, 0xb7b5, 0x3, 0x880, 0x8, 0x6, 0x77f, 0x4, 0x656, 0x8, 0x101, 0x6, 0x66, 0x2, 0x0, 0x7, 0xe3e1, 0x9, 0x269, 0x1f, 0x80000000, 0x8001, 0x5bd, 0xfffffeff, 0x6, 0x80000000, 0xe7af, 0x40, 0x2, 0x400, 0xb063, 0x8000, 0x7, 0x7fff, 0x7ff], 0xf, [':.:\x00', 'context', '):\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x800}, 0x40480c0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7b0e272b, 0x2, 0x4, 0x8001, 0x8, 0x6}, {0x2, 0x6, 0x753ba2f, 0x2, 0x4, 0x7ff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000800) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d00)={&(0x7f0000001580)={0x780, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10100000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x9, 0x1, 0x6}, {0x4, 0x1f, 0x1f, 0x9}, {0x3, 0x40, 0x81, 0x6}, {0xfff9, 0x2, 0x67, 0x1b1d2d89}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x56}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3a95fecf}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8d70}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) 21:43:31 executing program 5: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$CDROMSTART(r1, 0x5308) r2 = memfd_secret(0x80000) ioctl$CDROMRESUME(r2, 0x5302) r3 = socket(0x0, 0xa, 0xad) bind$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x7, @none, 0x2, 0x2}, 0xe) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000200)) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2c8, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4af}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "765a107ecdc5b8bd591fd7880085f640d4878ad1354ccae876c0af0c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "5a160e6be7cc770a1068bdd2fb2603c896bb7ee7f2f1df98fd303d76d3bcf214cc1cb2baec2032e418a8883b551b17c8c1e7df48ba08f4493e021685a24187a478e06e73dda04cf68f6401aa144b9ffbe9a757954b452ed3cc945494c0ac2a26fd803b230aa53be90d058345893b8bdff0fdb086e327f09353e5cbd7f414936be741158576dd86ac1fba4f3bccfbfeb022f803eae6d0fc"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xac0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x417be4c5c5ac043e}, 0x48040) r4 = syz_open_dev$hiddev(&(0x7f0000000600), 0x4, 0x2d8300) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000000640)={0x1, 0x3, 0x8001}) r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x80) ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f00000006c0)={0x1, 0x1, 0x6}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r3) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000740)=0x3) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0) ioctl$CDROMRESET(r6, 0x5312) ioctl$CDROMEJECT_SW(r6, 0x530f, 0x1) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}}, 0x24000004) 21:43:31 executing program 6: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x28000040}, 0x20004000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140), 0x1) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, 0x453, 0x800, 0x70bd25, 0x25dfdbfd, "3e27b68820449398e450cb47702168f56bd462b48f7bab457bc9add9ce8753dee5e27b7fbfce640a77effebac7939c3ba145fd2917a1cb15fe854d1129faf57da9b2160c3d59fd4b9da87b09ded4b4aac7559ca9c034313c1d256c80678647eaa12d923a6c6098457d14eb20132de4c6a1a270d67e6bf399de1d3d067579693bbb56494ffa48ceeaa6e362045fd5ceec9546e4f5cd02b053b5b04affbff1601b2a48f4a9059502cb3fa633eca8ad4d22d53eca1fed0c", ["", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x80c0}, 0x20004080) r1 = memfd_secret(0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x9d9, 0x1, {{0x1a, 0x4, 0x3, 0x6, 0x68, 0x68, 0x0, 0xa6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @cipso={0x86, 0x3e, 0x3, [{0x1, 0xc, "98cbc7242818811b3407"}, {0x0, 0x4, '#/'}, {0x1, 0x9, "f8b7b6a387b62d"}, {0x5, 0x2}, {0x7, 0x4, "f5f4"}, {0x2, 0x3, ')'}, {0x0, 0x7, "80807e15f0"}, {0x6, 0x8, "0fdb308b74ea"}, {0x5, 0x7, "821e0091bc"}]}, @end, @timestamp_prespec={0x44, 0x14, 0x72, 0x3, 0x6, [{@loopback, 0x7398}, {@private=0xa010101, 0x20}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000480)={'erspan0\x00', r2, 0x7, 0x10, 0x1, 0x2, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x68, 0x6, 0x0, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0xc, 0x88, 0x0, 0x0, [0x2b, 0x200]}, @timestamp_prespec={0x44, 0x24, 0x67, 0x3, 0x4, [{@private=0xa010102, 0x6}, {@empty, 0x1}, {@private=0xa010100, 0x3f}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0xc, [{@private=0xa010102, 0xffff}, {@multicast1, 0x6d4}]}, @timestamp_prespec={0x44, 0x3c, 0x36, 0x3, 0x6, [{@local, 0x10000}, {@multicast1, 0x200}, {@multicast2}, {@private=0xa010102, 0xffff}, {@multicast2, 0x3}, {@multicast2, 0x7}, {@empty}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'sit0\x00', r2, 0x0, 0x8, 0x37, 0xfff, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8000, 0x700, 0xa2, 0x2}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x10c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x140, 0x0, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbf96}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000840)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), r1) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_FLOW={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r1) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004000c}, 0x4000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000c80)) 21:43:31 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4008000) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x4, 0x70bd29, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8855}, 0x4000040) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x10001, 0x100) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000002c0)) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x454, 0x3f3, 0x800, 0x70bd2d, 0x25dfdbfe, {0x4, 0x2, 0x2, [0x20, 0xab04, 0x5, 0x8, 0x1, 0x2d83, 0x6f, 0xf9, 0xcf, 0x5, 0x4, 0x69, 0x9, 0x29e, 0xa28d, 0x2, 0x40, 0x7, 0xffff, 0xfff, 0x10000, 0x5a, 0xfffeffff, 0x20, 0x8, 0x80000001, 0x7f, 0x709e, 0x6, 0x3f, 0x3, 0x3ff, 0x10000, 0x80000000, 0xffffffff, 0x3, 0x67, 0x6, 0x80000000, 0x7, 0x56d7, 0x9, 0x5, 0x3, 0x3, 0x400, 0x6f9, 0x3, 0x7, 0x9, 0x8, 0x45, 0x8, 0x5, 0x2, 0x7fffffff, 0x49d6, 0x2, 0x1000, 0x7, 0x4, 0x4, 0x1, 0x80000000], [0xaef, 0x9da, 0x401, 0xf35, 0x3ff, 0x5, 0x1000, 0x1, 0x66f, 0x7, 0x7, 0x2, 0x4, 0x9, 0xd9, 0x7, 0x1, 0x101, 0x1, 0x401, 0x0, 0xf8, 0x80, 0x4, 0x4, 0x0, 0x9, 0x40, 0xfa, 0xc0000000, 0x9, 0x5d78f63b, 0x100, 0x0, 0xffffffff, 0x5, 0x400, 0x3, 0xfffff001, 0x200, 0x1, 0x6, 0x2, 0x81, 0xfff, 0x10000, 0x6, 0x8000, 0x0, 0x6, 0x80000000, 0x1, 0xa3d, 0x4, 0x43120c67, 0x94, 0xf44, 0x2, 0xfff, 0x401, 0x4, 0x200, 0xa8, 0x1f], [0x2, 0x0, 0xffff, 0x40, 0x1f, 0x0, 0x100, 0x400, 0x9, 0x7, 0xffffffff, 0x6, 0x2, 0x7a, 0xffffffff, 0x3, 0x3, 0x7, 0x0, 0x0, 0x8628, 0x2, 0x3ff, 0x0, 0xa7, 0x20, 0x3, 0xc01, 0x0, 0x73e4613c, 0x6, 0x3, 0x2, 0xffff0000, 0x9, 0x0, 0x85, 0x3, 0x61, 0x5, 0x6, 0x1, 0x800, 0x7, 0x8, 0x5, 0x8, 0x5, 0xfffff8ce, 0x4c59863b, 0x68, 0x4, 0x1, 0x3, 0x2, 0x7, 0x4, 0x8, 0x1, 0x7, 0x2, 0x28, 0x9, 0x10001], [0xffffff80, 0xbd92, 0x200, 0xfffffffb, 0x4, 0x2, 0x3, 0x3, 0x4, 0x3ff, 0x2, 0x4, 0x2, 0x4, 0x1f, 0x80000000, 0x269, 0xa1, 0x3, 0xfffffffd, 0xfffffffa, 0x1, 0x3, 0x7, 0x4, 0x3, 0x8e7, 0x60000, 0x9, 0x7, 0x5, 0x4, 0x3, 0x800, 0x7f, 0x2, 0x3d46, 0x1, 0x2, 0x4, 0x4, 0xfffffe00, 0x9, 0x2, 0x5, 0x9, 0xffffffff, 0x1f, 0x0, 0x8763, 0x3, 0x2, 0x8, 0x7ff, 0x6, 0x299, 0x8, 0x8, 0x400000, 0xff, 0x8, 0x7, 0x71, 0x8], 0x31, ['\'@+,]!:\x88\x00', '{-\\*\xcf-$.\'&!&$Q\x00', ',!!^%^\x00', '#\xd6$>]%[\x00', '/dev/full\x00']}, ["", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x18, 0x3f9, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1}, ["", ""]}, 0x18}}, 0x55bdc2f19b162e82) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000940)=0x2) r4 = syz_open_dev$loop(&(0x7f0000000980), 0x0, 0x400080) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f00000009c0)) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000a00)={0x1, 0x100, 0x4, 0x5, 0x6, 0x5}) sendmsg$AUDIT_USER(r2, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000a0}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xc8, 0x3ed, 0x400, 0x70bd26, 0x25dfdbfd, "46318d366404ec05c18544c55256947a4f949797496b41369de0ca9e3b15e0da916b6db1244bef7edf8a763fe492ee2eb687d64c2695e3f4e4b3c53a055d3e567e84b6521e28839aee0e6a644a4863d0a58ee6750fd224b8983a0b015bf3b3a387280728dcae9dead15aef20c2c3f9f97733d64fc04146ad5ef20e5358d00ba37933bed5b4cfdd4d1b71fca4932a81f5630e5ebe0fbd8cfaa8c6f9c85e33046cf49cf40a2f3de37991b4cc0b883857259afa627233985f", ["", "", "", "", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x44) syz_genetlink_get_family_id$team(&(0x7f0000000c00), r2) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000c40)) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000c80)=0x6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000cc0)=0x800, 0x4) [ 61.605225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.607837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.609098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.611385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.612390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.614073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.618195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.619523] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.621149] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.622215] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.623935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.625069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.629552] Bluetooth: hci0: HCI_REQ-0x0c1a [ 61.643829] Bluetooth: hci1: HCI_REQ-0x0c1a [ 61.656782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.662872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.668743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.699130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.700858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.721285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.734882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.736557] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.737939] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.739652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.741033] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.742124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.743314] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.747694] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.748241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.751935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.754649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.756100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.759702] Bluetooth: hci3: HCI_REQ-0x0c1a [ 61.761115] Bluetooth: hci2: HCI_REQ-0x0c1a [ 61.795822] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.797073] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.798778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.800924] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.802834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.803809] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.804746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.820108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.821113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.826213] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.830386] Bluetooth: hci6: HCI_REQ-0x0c1a [ 61.890798] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.892367] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.895183] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.896466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.897608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.899239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.918367] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.920624] Bluetooth: hci4: HCI_REQ-0x0c1a [ 61.930621] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.932463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.936966] Bluetooth: hci5: HCI_REQ-0x0c1a [ 63.687855] Bluetooth: hci1: command 0x0409 tx timeout [ 63.687882] Bluetooth: hci0: command 0x0409 tx timeout [ 63.815529] Bluetooth: hci2: command 0x0409 tx timeout [ 63.815603] Bluetooth: hci3: command 0x0409 tx timeout [ 63.878554] Bluetooth: hci6: command 0x0409 tx timeout [ 63.878580] Bluetooth: hci7: command 0x0409 tx timeout [ 63.942546] Bluetooth: hci4: command 0x0409 tx timeout [ 64.006514] Bluetooth: hci5: command 0x0409 tx timeout [ 65.734504] Bluetooth: hci1: command 0x041b tx timeout [ 65.735296] Bluetooth: hci0: command 0x041b tx timeout [ 65.862488] Bluetooth: hci3: command 0x041b tx timeout [ 65.863749] Bluetooth: hci2: command 0x041b tx timeout [ 65.926770] Bluetooth: hci7: command 0x041b tx timeout [ 65.927574] Bluetooth: hci6: command 0x041b tx timeout [ 65.990511] Bluetooth: hci4: command 0x041b tx timeout [ 66.054551] Bluetooth: hci5: command 0x041b tx timeout [ 67.783516] Bluetooth: hci0: command 0x040f tx timeout [ 67.783979] Bluetooth: hci1: command 0x040f tx timeout [ 67.911460] Bluetooth: hci2: command 0x040f tx timeout [ 67.911899] Bluetooth: hci3: command 0x040f tx timeout [ 67.974570] Bluetooth: hci6: command 0x040f tx timeout [ 67.974978] Bluetooth: hci7: command 0x040f tx timeout [ 68.039444] Bluetooth: hci4: command 0x040f tx timeout [ 68.103465] Bluetooth: hci5: command 0x040f tx timeout [ 69.831511] Bluetooth: hci1: command 0x0419 tx timeout [ 69.831973] Bluetooth: hci0: command 0x0419 tx timeout [ 69.959530] Bluetooth: hci3: command 0x0419 tx timeout [ 69.959963] Bluetooth: hci2: command 0x0419 tx timeout [ 70.023539] Bluetooth: hci7: command 0x0419 tx timeout [ 70.023972] Bluetooth: hci6: command 0x0419 tx timeout [ 70.086431] Bluetooth: hci4: command 0x0419 tx timeout [ 70.150449] Bluetooth: hci5: command 0x0419 tx timeout [ 117.246348] loop2: detected capacity change from 0 to 16383 [ 117.395018] loop2: detected capacity change from 0 to 16383 21:44:28 executing program 2: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x401, 0x2d2, 0x200}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x3, 0x1, 0xfffffffe, 0x7}) r0 = memfd_secret(0x80000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000000c0)={0x1, 0x2, 0x7}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000100)=0x1) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3ff) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000180)=[{r1, 0x8208}, {r2, 0x160}, {r0, 0x8041}, {r0, 0x24}, {0xffffffffffffffff, 0x8650}], 0x5, 0x6) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="f3bfd8e400a7f703d1c5369077bc47cf44bff241efa796cae19c61612cb3a66c1c49879d2d4b7c8e77b6834f3e972826ef2d61b2a4079b9036effdee0c03f8d36ba5be03babbec8d8cb3bc281b078d5e8008fb2af1414e15c4fff8c8355a84a8a4250e50df1705ef6c52e6fd026d4bb51956271e1e652dc1d77acfbc815699ef0f02e20ddea42f773b7089adc631f4fa922146fb38d1bf54d2fb2f4debda87c3a3045b", 0xa3, 0xffffffffffffffff}], 0x1000, &(0x7f0000000340)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@nobarrier}, {@noinit_itable}, {@lazytime}], [{@obj_user={'obj_user', 0x3d, '*\t)'}}, {@fsname={'fsname', 0x3d, '\''}}, {@smackfsroot}, {@seclabel}, {@seclabel}]}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000003c0)) r3 = memfd_secret(0x80000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x2204c004) socketpair(0xf, 0x2, 0x9, &(0x7f0000000500)={0xffffffffffffffff}) connect$bt_l2cap(r4, &(0x7f0000000540)={0x1f, 0xfffc, @none, 0x800}, 0xe) r5 = memfd_secret(0x0) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0xfa6d) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 117.624558] loop2: detected capacity change from 0 to 16383 21:44:29 executing program 2: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x401, 0x2d2, 0x200}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x3, 0x1, 0xfffffffe, 0x7}) r0 = memfd_secret(0x80000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000000c0)={0x1, 0x2, 0x7}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000100)=0x1) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3ff) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000180)=[{r1, 0x8208}, {r2, 0x160}, {r0, 0x8041}, {r0, 0x24}, {0xffffffffffffffff, 0x8650}], 0x5, 0x6) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="f3bfd8e400a7f703d1c5369077bc47cf44bff241efa796cae19c61612cb3a66c1c49879d2d4b7c8e77b6834f3e972826ef2d61b2a4079b9036effdee0c03f8d36ba5be03babbec8d8cb3bc281b078d5e8008fb2af1414e15c4fff8c8355a84a8a4250e50df1705ef6c52e6fd026d4bb51956271e1e652dc1d77acfbc815699ef0f02e20ddea42f773b7089adc631f4fa922146fb38d1bf54d2fb2f4debda87c3a3045b", 0xa3, 0xffffffffffffffff}], 0x1000, &(0x7f0000000340)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@nobarrier}, {@noinit_itable}, {@lazytime}], [{@obj_user={'obj_user', 0x3d, '*\t)'}}, {@fsname={'fsname', 0x3d, '\''}}, {@smackfsroot}, {@seclabel}, {@seclabel}]}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000003c0)) r3 = memfd_secret(0x80000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x2204c004) socketpair(0xf, 0x2, 0x9, &(0x7f0000000500)={0xffffffffffffffff}) connect$bt_l2cap(r4, &(0x7f0000000540)={0x1f, 0xfffc, @none, 0x800}, 0xe) r5 = memfd_secret(0x0) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0xfa6d) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 117.914271] loop2: detected capacity change from 0 to 16383 21:44:29 executing program 2: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x401, 0x2d2, 0x200}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x3, 0x1, 0xfffffffe, 0x7}) r0 = memfd_secret(0x80000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000000c0)={0x1, 0x2, 0x7}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000100)=0x1) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3ff) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000180)=[{r1, 0x8208}, {r2, 0x160}, {r0, 0x8041}, {r0, 0x24}, {0xffffffffffffffff, 0x8650}], 0x5, 0x6) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="f3bfd8e400a7f703d1c5369077bc47cf44bff241efa796cae19c61612cb3a66c1c49879d2d4b7c8e77b6834f3e972826ef2d61b2a4079b9036effdee0c03f8d36ba5be03babbec8d8cb3bc281b078d5e8008fb2af1414e15c4fff8c8355a84a8a4250e50df1705ef6c52e6fd026d4bb51956271e1e652dc1d77acfbc815699ef0f02e20ddea42f773b7089adc631f4fa922146fb38d1bf54d2fb2f4debda87c3a3045b", 0xa3, 0xffffffffffffffff}], 0x1000, &(0x7f0000000340)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@nobarrier}, {@noinit_itable}, {@lazytime}], [{@obj_user={'obj_user', 0x3d, '*\t)'}}, {@fsname={'fsname', 0x3d, '\''}}, {@smackfsroot}, {@seclabel}, {@seclabel}]}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000003c0)) r3 = memfd_secret(0x80000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x2204c004) socketpair(0xf, 0x2, 0x9, &(0x7f0000000500)={0xffffffffffffffff}) connect$bt_l2cap(r4, &(0x7f0000000540)={0x1f, 0xfffc, @none, 0x800}, 0xe) r5 = memfd_secret(0x0) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0xfa6d) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 118.251908] loop2: detected capacity change from 0 to 16383 21:44:29 executing program 2: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x401, 0x2d2, 0x200}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x3, 0x1, 0xfffffffe, 0x7}) r0 = memfd_secret(0x80000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000000c0)={0x1, 0x2, 0x7}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000100)=0x1) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3ff) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000180)=[{r1, 0x8208}, {r2, 0x160}, {r0, 0x8041}, {r0, 0x24}, {0xffffffffffffffff, 0x8650}], 0x5, 0x6) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="f3bfd8e400a7f703d1c5369077bc47cf44bff241efa796cae19c61612cb3a66c1c49879d2d4b7c8e77b6834f3e972826ef2d61b2a4079b9036effdee0c03f8d36ba5be03babbec8d8cb3bc281b078d5e8008fb2af1414e15c4fff8c8355a84a8a4250e50df1705ef6c52e6fd026d4bb51956271e1e652dc1d77acfbc815699ef0f02e20ddea42f773b7089adc631f4fa922146fb38d1bf54d2fb2f4debda87c3a3045b", 0xa3, 0xffffffffffffffff}], 0x1000, &(0x7f0000000340)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@nobarrier}, {@noinit_itable}, {@lazytime}], [{@obj_user={'obj_user', 0x3d, '*\t)'}}, {@fsname={'fsname', 0x3d, '\''}}, {@smackfsroot}, {@seclabel}, {@seclabel}]}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000003c0)) r3 = memfd_secret(0x80000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x2204c004) socketpair(0xf, 0x2, 0x9, &(0x7f0000000500)={0xffffffffffffffff}) connect$bt_l2cap(r4, &(0x7f0000000540)={0x1f, 0xfffc, @none, 0x800}, 0xe) memfd_secret(0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 118.480216] loop2: detected capacity change from 0 to 16383 21:44:29 executing program 2: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x401, 0x2d2, 0x200}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x3, 0x1, 0xfffffffe, 0x7}) r0 = memfd_secret(0x80000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000000c0)={0x1, 0x2, 0x7}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000100)=0x1) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3ff) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000180)=[{r1, 0x8208}, {r2, 0x160}, {r0, 0x8041}, {r0, 0x24}, {0xffffffffffffffff, 0x8650}], 0x5, 0x6) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="f3bfd8e400a7f703d1c5369077bc47cf44bff241efa796cae19c61612cb3a66c1c49879d2d4b7c8e77b6834f3e972826ef2d61b2a4079b9036effdee0c03f8d36ba5be03babbec8d8cb3bc281b078d5e8008fb2af1414e15c4fff8c8355a84a8a4250e50df1705ef6c52e6fd026d4bb51956271e1e652dc1d77acfbc815699ef0f02e20ddea42f773b7089adc631f4fa922146fb38d1bf54d2fb2f4debda87c3a3045b", 0xa3, 0xffffffffffffffff}], 0x1000, &(0x7f0000000340)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@nobarrier}, {@noinit_itable}, {@lazytime}], [{@obj_user={'obj_user', 0x3d, '*\t)'}}, {@fsname={'fsname', 0x3d, '\''}}, {@smackfsroot}, {@seclabel}, {@seclabel}]}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000003c0)) r3 = memfd_secret(0x80000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x2204c004) socketpair(0xf, 0x2, 0x9, &(0x7f0000000500)={0xffffffffffffffff}) connect$bt_l2cap(r4, &(0x7f0000000540)={0x1f, 0xfffc, @none, 0x800}, 0xe) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 118.769707] loop2: detected capacity change from 0 to 16383 [ 123.481607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.483799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.485486] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.489306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.501852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.503561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.511609] Bluetooth: hci0: HCI_REQ-0x0c1a [ 123.511826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.520340] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.523507] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.526552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.530323] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.536369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.550586] Bluetooth: hci2: HCI_REQ-0x0c1a [ 123.562231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.564909] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.566832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.569922] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.571949] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 123.573681] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 123.578022] Bluetooth: hci7: HCI_REQ-0x0c1a [ 123.612585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.617234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.620706] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.624187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.625654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.628494] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.630878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.636191] Bluetooth: hci5: HCI_REQ-0x0c1a [ 123.637673] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.649070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.652704] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.660841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.672697] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.682075] Bluetooth: hci3: HCI_REQ-0x0c1a [ 125.574538] Bluetooth: hci2: command 0x0409 tx timeout [ 125.574668] Bluetooth: hci0: command 0x0409 tx timeout [ 125.576163] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 125.638605] Bluetooth: hci7: command 0x0409 tx timeout [ 125.702539] Bluetooth: hci3: command 0x0409 tx timeout [ 125.704035] Bluetooth: hci5: command 0x0409 tx timeout [ 127.622685] Bluetooth: hci0: command 0x041b tx timeout [ 127.623853] Bluetooth: hci2: command 0x041b tx timeout [ 127.686502] Bluetooth: hci7: command 0x041b tx timeout [ 127.750518] Bluetooth: hci5: command 0x041b tx timeout [ 127.751342] Bluetooth: hci3: command 0x041b tx timeout [ 129.671475] Bluetooth: hci2: command 0x040f tx timeout [ 129.672041] Bluetooth: hci0: command 0x040f tx timeout [ 129.735517] Bluetooth: hci7: command 0x040f tx timeout [ 129.799468] Bluetooth: hci3: command 0x040f tx timeout [ 129.800020] Bluetooth: hci5: command 0x040f tx timeout [ 130.119465] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 131.718521] Bluetooth: hci0: command 0x0419 tx timeout [ 131.718988] Bluetooth: hci2: command 0x0419 tx timeout [ 131.783511] Bluetooth: hci7: command 0x0419 tx timeout [ 131.847456] Bluetooth: hci5: command 0x0419 tx timeout [ 131.847900] Bluetooth: hci3: command 0x0419 tx timeout [ 132.465750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.468743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.470529] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.477660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.480225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 132.483536] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.490299] Bluetooth: hci4: HCI_REQ-0x0c1a [ 134.534539] Bluetooth: hci4: command 0x0409 tx timeout [ 136.582450] Bluetooth: hci4: command 0x041b tx timeout [ 138.631474] Bluetooth: hci4: command 0x040f tx timeout [ 140.680415] Bluetooth: hci4: command 0x0419 tx timeout 21:45:32 executing program 5: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$CDROMSTART(r1, 0x5308) r2 = memfd_secret(0x80000) ioctl$CDROMRESUME(r2, 0x5302) r3 = socket(0x0, 0xa, 0xad) bind$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x7, @none, 0x2, 0x2}, 0xe) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000200)) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2c8, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4af}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "765a107ecdc5b8bd591fd7880085f640d4878ad1354ccae876c0af0c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "5a160e6be7cc770a1068bdd2fb2603c896bb7ee7f2f1df98fd303d76d3bcf214cc1cb2baec2032e418a8883b551b17c8c1e7df48ba08f4493e021685a24187a478e06e73dda04cf68f6401aa144b9ffbe9a757954b452ed3cc945494c0ac2a26fd803b230aa53be90d058345893b8bdff0fdb086e327f09353e5cbd7f414936be741158576dd86ac1fba4f3bccfbfeb022f803eae6d0fc"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xac0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x417be4c5c5ac043e}, 0x48040) r4 = syz_open_dev$hiddev(&(0x7f0000000600), 0x4, 0x2d8300) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000000640)={0x1, 0x3, 0x8001}) r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x80) ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f00000006c0)={0x1, 0x1, 0x6}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r3) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000740)=0x3) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0) ioctl$CDROMRESET(r6, 0x5312) ioctl$CDROMEJECT_SW(r6, 0x530f, 0x1) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}}, 0x24000004) 21:45:32 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) r0 = io_uring_setup(0x123f, &(0x7f0000000040)={0x0, 0xf557, 0x0, 0x2, 0x10e}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x551040, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) r2 = io_uring_setup(0x41c5, &(0x7f0000000140)={0x0, 0x1c92, 0x0, 0x0, 0x129, 0x0, r1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x18, 0x5, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0x8000, 0x0, &(0x7f00000001c0)=[r0, r3, 0xffffffffffffffff, r0, r4]}, 0x5) poll(&(0x7f0000000240)=[{r1, 0x7261aa60e7995c9a}], 0x1, 0x2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0xf, 0x3, 0x39) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000380), 0x224000, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r1, r6, r7, r8, r5, r4, r9, r10], 0x8) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000440)={0x3, 0x200, 0x7fff, 0x9, 0xfffff801, 0x8001}) 21:45:32 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4008000) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x4, 0x70bd29, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8855}, 0x4000040) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x10001, 0x100) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000002c0)) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x454, 0x3f3, 0x800, 0x70bd2d, 0x25dfdbfe, {0x4, 0x2, 0x2, [0x20, 0xab04, 0x5, 0x8, 0x1, 0x2d83, 0x6f, 0xf9, 0xcf, 0x5, 0x4, 0x69, 0x9, 0x29e, 0xa28d, 0x2, 0x40, 0x7, 0xffff, 0xfff, 0x10000, 0x5a, 0xfffeffff, 0x20, 0x8, 0x80000001, 0x7f, 0x709e, 0x6, 0x3f, 0x3, 0x3ff, 0x10000, 0x80000000, 0xffffffff, 0x3, 0x67, 0x6, 0x80000000, 0x7, 0x56d7, 0x9, 0x5, 0x3, 0x3, 0x400, 0x6f9, 0x3, 0x7, 0x9, 0x8, 0x45, 0x8, 0x5, 0x2, 0x7fffffff, 0x49d6, 0x2, 0x1000, 0x7, 0x4, 0x4, 0x1, 0x80000000], [0xaef, 0x9da, 0x401, 0xf35, 0x3ff, 0x5, 0x1000, 0x1, 0x66f, 0x7, 0x7, 0x2, 0x4, 0x9, 0xd9, 0x7, 0x1, 0x101, 0x1, 0x401, 0x0, 0xf8, 0x80, 0x4, 0x4, 0x0, 0x9, 0x40, 0xfa, 0xc0000000, 0x9, 0x5d78f63b, 0x100, 0x0, 0xffffffff, 0x5, 0x400, 0x3, 0xfffff001, 0x200, 0x1, 0x6, 0x2, 0x81, 0xfff, 0x10000, 0x6, 0x8000, 0x0, 0x6, 0x80000000, 0x1, 0xa3d, 0x4, 0x43120c67, 0x94, 0xf44, 0x2, 0xfff, 0x401, 0x4, 0x200, 0xa8, 0x1f], [0x2, 0x0, 0xffff, 0x40, 0x1f, 0x0, 0x100, 0x400, 0x9, 0x7, 0xffffffff, 0x6, 0x2, 0x7a, 0xffffffff, 0x3, 0x3, 0x7, 0x0, 0x0, 0x8628, 0x2, 0x3ff, 0x0, 0xa7, 0x20, 0x3, 0xc01, 0x0, 0x73e4613c, 0x6, 0x3, 0x2, 0xffff0000, 0x9, 0x0, 0x85, 0x3, 0x61, 0x5, 0x6, 0x1, 0x800, 0x7, 0x8, 0x5, 0x8, 0x5, 0xfffff8ce, 0x4c59863b, 0x68, 0x4, 0x1, 0x3, 0x2, 0x7, 0x4, 0x8, 0x1, 0x7, 0x2, 0x28, 0x9, 0x10001], [0xffffff80, 0xbd92, 0x200, 0xfffffffb, 0x4, 0x2, 0x3, 0x3, 0x4, 0x3ff, 0x2, 0x4, 0x2, 0x4, 0x1f, 0x80000000, 0x269, 0xa1, 0x3, 0xfffffffd, 0xfffffffa, 0x1, 0x3, 0x7, 0x4, 0x3, 0x8e7, 0x60000, 0x9, 0x7, 0x5, 0x4, 0x3, 0x800, 0x7f, 0x2, 0x3d46, 0x1, 0x2, 0x4, 0x4, 0xfffffe00, 0x9, 0x2, 0x5, 0x9, 0xffffffff, 0x1f, 0x0, 0x8763, 0x3, 0x2, 0x8, 0x7ff, 0x6, 0x299, 0x8, 0x8, 0x400000, 0xff, 0x8, 0x7, 0x71, 0x8], 0x31, ['\'@+,]!:\x88\x00', '{-\\*\xcf-$.\'&!&$Q\x00', ',!!^%^\x00', '#\xd6$>]%[\x00', '/dev/full\x00']}, ["", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x18, 0x3f9, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1}, ["", ""]}, 0x18}}, 0x55bdc2f19b162e82) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000940)=0x2) r4 = syz_open_dev$loop(&(0x7f0000000980), 0x0, 0x400080) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f00000009c0)) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000a00)={0x1, 0x100, 0x4, 0x5, 0x6, 0x5}) sendmsg$AUDIT_USER(r2, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000a0}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xc8, 0x3ed, 0x400, 0x70bd26, 0x25dfdbfd, "46318d366404ec05c18544c55256947a4f949797496b41369de0ca9e3b15e0da916b6db1244bef7edf8a763fe492ee2eb687d64c2695e3f4e4b3c53a055d3e567e84b6521e28839aee0e6a644a4863d0a58ee6750fd224b8983a0b015bf3b3a387280728dcae9dead15aef20c2c3f9f97733d64fc04146ad5ef20e5358d00ba37933bed5b4cfdd4d1b71fca4932a81f5630e5ebe0fbd8cfaa8c6f9c85e33046cf49cf40a2f3de37991b4cc0b883857259afa627233985f", ["", "", "", "", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x44) syz_genetlink_get_family_id$team(&(0x7f0000000c00), r2) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000c40)) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000c80)=0x6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000cc0)=0x800, 0x4) 21:45:32 executing program 4: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r0, 0x42, 0x55de}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) r1 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xcf, 0x2, &(0x7f0000000340)=[{&(0x7f0000000200)="0746c068f53a99a3db571c9b8ca5c316eb1b4e9fda13db206f90fbcfcc592b09aaaa417059e993b947353b17ededa614c86e6cced1c9730f071ffcc3837b63306fc9ce43c2d62726f1f12d965c432e7e5fb9352d44643a62153b3d05ed97a3400d70d2354664019a", 0x68, 0x1}, {&(0x7f0000000280)="d7ff36ccc148c5b30ef2225eaba070088b3844b5b46a4cbe788db13d0224e25429d7ed502eb21b5ff85292eca9b2ebf4b6e5fd151a8451dea4574c7046bad6d5e51e870da87f48766d26a4f1f527922ae91dbec231a1dc74c478d739a13f22e017adc09a2f66b1302c1d0e661a0ffe45fea322e1bf67cbe525b9ed631b08e85b67f8cdb9658a929c8ab7f71cb9", 0x8d, 0x3f}], 0x1100002, &(0x7f0000000380)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}], [{@subj_user={'subj_user', 0x3d, '\'.'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_lt}, {@permit_directio}, {@euid_lt={'euid<', 0xee01}}, {@euid_lt}, {@euid_lt={'euid<', 0xee01}}, {@seclabel}]}) mknodat(r1, &(0x7f0000000480)='./file0\x00', 0x1, 0xf89e) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0x0, @fixed}, &(0x7f0000000500)=0xe, 0x80000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x1, 0x7ff, 0x0, 0xffffffffffffffff, 0x4, 0x55}, {0x9, 0x4884, 0x7fffffff, 0x10000, 0x200, 0x7f}], ['\x00', '\x00', '\x00', '\x00']}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000700)=0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000740)={0x2, [0x0, 0x0]}) bind$bt_l2cap(r2, &(0x7f0000000780)={0x1f, 0x8, @none, 0x3, 0x1}, 0xe) open$dir(&(0x7f00000007c0)='./file0\x00', 0x44100, 0x4) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000840)={0x430, 0x3f3, 0x10, 0x70bd29, 0x25dfdbfd, {0x2, 0x1, 0x2d, [0xffff9734, 0x206c, 0xef, 0xfffffffa, 0x5, 0x1f, 0xfffffffc, 0x0, 0x400, 0x7fff, 0x4, 0xfffffde2, 0x100, 0x1, 0x9, 0xfffffff7, 0x5, 0xffffffff, 0x100, 0x5, 0x3, 0x3, 0x3, 0x6, 0x5, 0x9, 0x8, 0x0, 0xab2d, 0x66b9, 0x200, 0x1ff, 0x4, 0x100, 0x9, 0x2, 0x9, 0xcd, 0x2, 0x4ce, 0xf5, 0x96, 0x80, 0x6, 0x3, 0x81, 0xc757, 0x401, 0x1, 0x3, 0x300000, 0x9, 0x4, 0xffffffc0, 0xeb2, 0x3, 0x1, 0xc1a6, 0x2, 0x1ad1, 0x6, 0x1000, 0x8001, 0x6], [0x2, 0x8000000, 0xffff, 0x4, 0x4b59, 0x8000, 0x7fffffff, 0x40, 0x4, 0x2, 0x1, 0x421, 0x8, 0x20, 0x0, 0x5, 0x81, 0x8, 0x7, 0x6, 0x8022, 0x80000001, 0x3, 0x9, 0x7, 0x4, 0x3, 0x4, 0x9, 0x81, 0x8, 0x9, 0x9, 0x80000001, 0x2, 0x2, 0x0, 0x8, 0x1, 0x1, 0x0, 0x101, 0x8001, 0x7, 0x1, 0x0, 0x7ff, 0x0, 0x20, 0x7ff, 0x7, 0x3ff, 0x7, 0x0, 0x10001, 0x20, 0x0, 0x1, 0x7ff, 0x8, 0x81, 0xfffffff9, 0x5, 0x4], [0x80000000, 0x100, 0x7ff, 0x6, 0x8, 0xe9, 0xfffffff7, 0x4, 0x8000, 0x0, 0x8000, 0x9, 0x6, 0xffff, 0x7, 0x4970d28, 0x3b, 0x6, 0x9, 0x1, 0x4, 0x8, 0x37, 0x5, 0x80000000, 0x101, 0x2, 0x4, 0x71ca, 0x7, 0x0, 0x7, 0x3ff, 0x5527, 0x3, 0x1, 0x101, 0x3f, 0x4, 0x1, 0x8000000, 0x7fffffff, 0x7, 0x1, 0x5ee, 0x9, 0x0, 0x4, 0x5, 0xab, 0x800, 0x8000, 0x47, 0x7, 0x800, 0x0, 0x4, 0x0, 0x80, 0x2, 0x1, 0x4, 0xf6, 0x2], [0x200, 0x1, 0x20, 0x7fce, 0xa5, 0xfffffffa, 0x20, 0x86, 0x2, 0x88, 0x1, 0x1, 0x800, 0x100, 0xf3a0, 0x75, 0xcf, 0x4, 0x8, 0x200, 0xfffffbff, 0xf992, 0x4, 0x8, 0x3, 0xab58, 0x6, 0x7ff, 0xb7b5, 0x3, 0x880, 0x8, 0x6, 0x77f, 0x4, 0x656, 0x8, 0x101, 0x6, 0x66, 0x2, 0x0, 0x7, 0xe3e1, 0x9, 0x269, 0x1f, 0x80000000, 0x8001, 0x5bd, 0xfffffeff, 0x6, 0x80000000, 0xe7af, 0x40, 0x2, 0x400, 0xb063, 0x8000, 0x7, 0x7fff, 0x7ff], 0xf, [':.:\x00', 'context', '):\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x800}, 0x40480c0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7b0e272b, 0x2, 0x4, 0x8001, 0x8, 0x6}, {0x2, 0x6, 0x753ba2f, 0x2, 0x4, 0x7ff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000800) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d00)={&(0x7f0000001580)={0x780, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10100000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x9, 0x1, 0x6}, {0x4, 0x1f, 0x1f, 0x9}, {0x3, 0x40, 0x81, 0x6}, {0xfff9, 0x2, 0x67, 0x1b1d2d89}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x56}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3a95fecf}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8d70}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) 21:45:32 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x81000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x104, 0x464, 0x400, 0x70bd25, 0x25dfdbfe, "b49492f777e997cfddf06963b3528384f346277064c3d5d492ac010524532b091e573fc07e871b1a4808b9aa9fb8be644f9b58fb8c8217f55ee3739b2dcfa6b55ea483d4cf3e1814860ff51528acd6a8a5dd698f9394bdde8ab5d199d221f02129eec8e84bab07929873291caa4985824eecf4372afe8daeb4ba4e49af9684ec9dcb0b980b59ac6d375d406c5246f1a93b2394c23fb7033c64dfdb891cc5fad6f6bf19bdee1555ed42ba12fafd039b26eeb80f793534755fbf26a73567dde9ad7d3159584411821905d05bc0032698dedfdfa9ad5bff8eda4e4a8fe24948a59f384674b2932cf29c736de7cef520dae3f5043eb5"}, 0x104}, 0x1, 0x0, 0x0, 0x40a80c0}, 0x48040) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000300)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000340)) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x3f7, 0x300, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) socketpair(0x1d, 0x0, 0x668b3ab9, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x3, 0x0, &(0x7f00000004c0)=[r0, r3, r1, r0, r1, r1, r0]}, 0x7) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000540)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x4, 0x6, 0x4, 0x68b, 0x0, 0x9}, {0x1, 0x6, 0x0, 0x2, 0x9b, 0xfffffffffffffffe}], ['\x00', '\x00', '\x00']}) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8a0}, 0x4000081) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x330, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9bf2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb20e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x13}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf14be000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5ca}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x16e2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x807}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}]}, @TIPC_NLA_LINK={0x13c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5df}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x195}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000c40)={0x0, 0x2800, 0x5, 0x8, 0x0, 0x3f, 0x5}, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000c80)) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000cc0)={0x3, 0xfffffffeffffffff, 0x6, 0x7}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000d00)={0x9, 0x9}) 21:45:32 executing program 3: syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r0 = io_uring_setup(0x3188, &(0x7f0000000040)={0x0, 0x1f6b, 0x20, 0x0, 0x247}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x107800, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x216443, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x80, 0x8ce7, {{0x2e, 0x4, 0x0, 0x22, 0xb8, 0x64, 0x0, 0x3e, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xe8, 0x3, 0x0, [{@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x3}]}, @rr={0x7, 0xb, 0x33, [@remote, @empty]}, @lsrr={0x83, 0x27, 0x73, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x94, 0x2}, @end, @timestamp_addr={0x44, 0x14, 0xc6, 0x1, 0x9, [{@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x87, 0x3, 0xe, [{@local, 0x6}, {@multicast2, 0x3}, {@local, 0xfffff000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x3}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1c0, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f0000000580)) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r4) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x10) ioctl$SNAPSHOT_FREE(r4, 0x3305) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) ioctl$CDROM_SELECT_SPEED(r4, 0x5322, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000740)={0x1f, 0x0, @none}, &(0x7f0000000780)=0xe, 0xc00) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000800)={0x4, &(0x7f00000007c0)=[{0xf6, 0x0, 0x2, 0x9}, {0x7f, 0x7f, 0x40, 0x9}, {0x6, 0x3, 0x40, 0xb3}, {0x2, 0xe, 0x5, 0x7fff}]}) r9 = openat$cgroup_pressure(r4, &(0x7f0000000840)='cpu.pressure\x00', 0x2, 0x0) poll(&(0x7f0000000880)=[{r4, 0x4048}, {r6, 0x400}, {r7, 0x3410}, {r0, 0xc064}, {r8, 0x2008}, {r9, 0x8000}], 0x6, 0x0) read$snapshot(r2, &(0x7f00000008c0)=""/197, 0xc5) 21:45:32 executing program 6: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x28000040}, 0x20004000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140), 0x1) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, 0x453, 0x800, 0x70bd25, 0x25dfdbfd, "3e27b68820449398e450cb47702168f56bd462b48f7bab457bc9add9ce8753dee5e27b7fbfce640a77effebac7939c3ba145fd2917a1cb15fe854d1129faf57da9b2160c3d59fd4b9da87b09ded4b4aac7559ca9c034313c1d256c80678647eaa12d923a6c6098457d14eb20132de4c6a1a270d67e6bf399de1d3d067579693bbb56494ffa48ceeaa6e362045fd5ceec9546e4f5cd02b053b5b04affbff1601b2a48f4a9059502cb3fa633eca8ad4d22d53eca1fed0c", ["", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x80c0}, 0x20004080) r1 = memfd_secret(0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x9d9, 0x1, {{0x1a, 0x4, 0x3, 0x6, 0x68, 0x68, 0x0, 0xa6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @cipso={0x86, 0x3e, 0x3, [{0x1, 0xc, "98cbc7242818811b3407"}, {0x0, 0x4, '#/'}, {0x1, 0x9, "f8b7b6a387b62d"}, {0x5, 0x2}, {0x7, 0x4, "f5f4"}, {0x2, 0x3, ')'}, {0x0, 0x7, "80807e15f0"}, {0x6, 0x8, "0fdb308b74ea"}, {0x5, 0x7, "821e0091bc"}]}, @end, @timestamp_prespec={0x44, 0x14, 0x72, 0x3, 0x6, [{@loopback, 0x7398}, {@private=0xa010101, 0x20}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000480)={'erspan0\x00', r2, 0x7, 0x10, 0x1, 0x2, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x68, 0x6, 0x0, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0xc, 0x88, 0x0, 0x0, [0x2b, 0x200]}, @timestamp_prespec={0x44, 0x24, 0x67, 0x3, 0x4, [{@private=0xa010102, 0x6}, {@empty, 0x1}, {@private=0xa010100, 0x3f}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0xc, [{@private=0xa010102, 0xffff}, {@multicast1, 0x6d4}]}, @timestamp_prespec={0x44, 0x3c, 0x36, 0x3, 0x6, [{@local, 0x10000}, {@multicast1, 0x200}, {@multicast2}, {@private=0xa010102, 0xffff}, {@multicast2, 0x3}, {@multicast2, 0x7}, {@empty}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'sit0\x00', r2, 0x0, 0x8, 0x37, 0xfff, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8000, 0x700, 0xa2, 0x2}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x10c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x140, 0x0, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbf96}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000840)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), r1) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_FLOW={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r1) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004000c}, 0x4000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000c80)) 21:45:32 executing program 2: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x401, 0x2d2, 0x200}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x3, 0x1, 0xfffffffe, 0x7}) r0 = memfd_secret(0x80000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000000c0)={0x1, 0x2, 0x7}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000100)=0x1) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3ff) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000180)=[{r1, 0x8208}, {r2, 0x160}, {r0, 0x8041}, {r0, 0x24}, {0xffffffffffffffff, 0x8650}], 0x5, 0x6) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="f3bfd8e400a7f703d1c5369077bc47cf44bff241efa796cae19c61612cb3a66c1c49879d2d4b7c8e77b6834f3e972826ef2d61b2a4079b9036effdee0c03f8d36ba5be03babbec8d8cb3bc281b078d5e8008fb2af1414e15c4fff8c8355a84a8a4250e50df1705ef6c52e6fd026d4bb51956271e1e652dc1d77acfbc815699ef0f02e20ddea42f773b7089adc631f4fa922146fb38d1bf54d2fb2f4debda87c3a3045b", 0xa3, 0xffffffffffffffff}], 0x1000, &(0x7f0000000340)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@nobarrier}, {@noinit_itable}, {@lazytime}], [{@obj_user={'obj_user', 0x3d, '*\t)'}}, {@fsname={'fsname', 0x3d, '\''}}, {@smackfsroot}, {@seclabel}, {@seclabel}]}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000003c0)) r3 = memfd_secret(0x80000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x2204c004) socketpair(0xf, 0x2, 0x9, &(0x7f0000000500)) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 181.686385] loop2: detected capacity change from 0 to 16383 21:45:33 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4008000) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x4, 0x70bd29, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8855}, 0x4000040) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x10001, 0x100) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000002c0)) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x454, 0x3f3, 0x800, 0x70bd2d, 0x25dfdbfe, {0x4, 0x2, 0x2, [0x20, 0xab04, 0x5, 0x8, 0x1, 0x2d83, 0x6f, 0xf9, 0xcf, 0x5, 0x4, 0x69, 0x9, 0x29e, 0xa28d, 0x2, 0x40, 0x7, 0xffff, 0xfff, 0x10000, 0x5a, 0xfffeffff, 0x20, 0x8, 0x80000001, 0x7f, 0x709e, 0x6, 0x3f, 0x3, 0x3ff, 0x10000, 0x80000000, 0xffffffff, 0x3, 0x67, 0x6, 0x80000000, 0x7, 0x56d7, 0x9, 0x5, 0x3, 0x3, 0x400, 0x6f9, 0x3, 0x7, 0x9, 0x8, 0x45, 0x8, 0x5, 0x2, 0x7fffffff, 0x49d6, 0x2, 0x1000, 0x7, 0x4, 0x4, 0x1, 0x80000000], [0xaef, 0x9da, 0x401, 0xf35, 0x3ff, 0x5, 0x1000, 0x1, 0x66f, 0x7, 0x7, 0x2, 0x4, 0x9, 0xd9, 0x7, 0x1, 0x101, 0x1, 0x401, 0x0, 0xf8, 0x80, 0x4, 0x4, 0x0, 0x9, 0x40, 0xfa, 0xc0000000, 0x9, 0x5d78f63b, 0x100, 0x0, 0xffffffff, 0x5, 0x400, 0x3, 0xfffff001, 0x200, 0x1, 0x6, 0x2, 0x81, 0xfff, 0x10000, 0x6, 0x8000, 0x0, 0x6, 0x80000000, 0x1, 0xa3d, 0x4, 0x43120c67, 0x94, 0xf44, 0x2, 0xfff, 0x401, 0x4, 0x200, 0xa8, 0x1f], [0x2, 0x0, 0xffff, 0x40, 0x1f, 0x0, 0x100, 0x400, 0x9, 0x7, 0xffffffff, 0x6, 0x2, 0x7a, 0xffffffff, 0x3, 0x3, 0x7, 0x0, 0x0, 0x8628, 0x2, 0x3ff, 0x0, 0xa7, 0x20, 0x3, 0xc01, 0x0, 0x73e4613c, 0x6, 0x3, 0x2, 0xffff0000, 0x9, 0x0, 0x85, 0x3, 0x61, 0x5, 0x6, 0x1, 0x800, 0x7, 0x8, 0x5, 0x8, 0x5, 0xfffff8ce, 0x4c59863b, 0x68, 0x4, 0x1, 0x3, 0x2, 0x7, 0x4, 0x8, 0x1, 0x7, 0x2, 0x28, 0x9, 0x10001], [0xffffff80, 0xbd92, 0x200, 0xfffffffb, 0x4, 0x2, 0x3, 0x3, 0x4, 0x3ff, 0x2, 0x4, 0x2, 0x4, 0x1f, 0x80000000, 0x269, 0xa1, 0x3, 0xfffffffd, 0xfffffffa, 0x1, 0x3, 0x7, 0x4, 0x3, 0x8e7, 0x60000, 0x9, 0x7, 0x5, 0x4, 0x3, 0x800, 0x7f, 0x2, 0x3d46, 0x1, 0x2, 0x4, 0x4, 0xfffffe00, 0x9, 0x2, 0x5, 0x9, 0xffffffff, 0x1f, 0x0, 0x8763, 0x3, 0x2, 0x8, 0x7ff, 0x6, 0x299, 0x8, 0x8, 0x400000, 0xff, 0x8, 0x7, 0x71, 0x8], 0x31, ['\'@+,]!:\x88\x00', '{-\\*\xcf-$.\'&!&$Q\x00', ',!!^%^\x00', '#\xd6$>]%[\x00', '/dev/full\x00']}, ["", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x18, 0x3f9, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1}, ["", ""]}, 0x18}}, 0x55bdc2f19b162e82) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000940)=0x2) r4 = syz_open_dev$loop(&(0x7f0000000980), 0x0, 0x400080) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f00000009c0)) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000a00)={0x1, 0x100, 0x4, 0x5, 0x6, 0x5}) sendmsg$AUDIT_USER(r2, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000a0}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xc8, 0x3ed, 0x400, 0x70bd26, 0x25dfdbfd, "46318d366404ec05c18544c55256947a4f949797496b41369de0ca9e3b15e0da916b6db1244bef7edf8a763fe492ee2eb687d64c2695e3f4e4b3c53a055d3e567e84b6521e28839aee0e6a644a4863d0a58ee6750fd224b8983a0b015bf3b3a387280728dcae9dead15aef20c2c3f9f97733d64fc04146ad5ef20e5358d00ba37933bed5b4cfdd4d1b71fca4932a81f5630e5ebe0fbd8cfaa8c6f9c85e33046cf49cf40a2f3de37991b4cc0b883857259afa627233985f", ["", "", "", "", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x44) syz_genetlink_get_family_id$team(&(0x7f0000000c00), r2) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000c40)) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000c80)=0x6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000cc0)=0x800, 0x4) [ 187.782968] Bluetooth: hci6: command 0x0406 tx timeout [ 187.783000] Bluetooth: hci1: command 0x0406 tx timeout [ 189.318531] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 189.319578] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.320287] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.321365] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 189.323111] Call Trace: [ 189.323498] [ 189.324080] __schedule+0x893/0x2470 [ 189.324650] ? io_schedule_timeout+0x150/0x150 [ 189.325272] ? do_raw_spin_lock+0x121/0x260 [ 189.325904] ? rwlock_bug.part.0+0x90/0x90 [ 189.326514] schedule+0xda/0x1b0 [ 189.327020] rescuer_thread+0x851/0xdb0 [ 189.327611] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.328310] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.329033] ? lockdep_hardirqs_on+0x79/0x100 [ 189.329697] ? worker_thread+0x1260/0x1260 [ 189.330295] kthread+0x2ed/0x3a0 [ 189.330812] ? kthread_complete_and_exit+0x40/0x40 [ 189.331531] ret_from_fork+0x22/0x30 [ 189.332085] [ 189.332440] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 189.333318] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.334077] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.335146] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 189.336301] Call Trace: [ 189.336674] [ 189.336993] __schedule+0x893/0x2470 [ 189.337545] ? io_schedule_timeout+0x150/0x150 [ 189.338161] ? do_raw_spin_lock+0x121/0x260 [ 189.338791] ? rwlock_bug.part.0+0x90/0x90 [ 189.339418] schedule+0xda/0x1b0 [ 189.339895] rescuer_thread+0x851/0xdb0 [ 189.340472] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.341146] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.341843] ? lockdep_hardirqs_on+0x79/0x100 [ 189.342481] ? worker_thread+0x1260/0x1260 [ 189.343075] kthread+0x2ed/0x3a0 [ 189.343564] ? kthread_complete_and_exit+0x40/0x40 [ 189.344249] ret_from_fork+0x22/0x30 [ 189.344807] [ 189.345130] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 189.346034] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.346791] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.347853] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 189.349011] Call Trace: [ 189.349369] [ 189.349722] __schedule+0x893/0x2470 [ 189.350259] ? io_schedule_timeout+0x150/0x150 [ 189.350944] ? do_raw_spin_lock+0x121/0x260 [ 189.351579] ? rwlock_bug.part.0+0x90/0x90 [ 189.352181] schedule+0xda/0x1b0 [ 189.352696] rescuer_thread+0x851/0xdb0 [ 189.353267] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.353994] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.354711] ? lockdep_hardirqs_on+0x79/0x100 [ 189.355346] ? worker_thread+0x1260/0x1260 [ 189.355971] kthread+0x2ed/0x3a0 [ 189.356477] ? kthread_complete_and_exit+0x40/0x40 [ 189.357168] ret_from_fork+0x22/0x30 [ 189.357756] [ 189.358088] INFO: task netns:6 blocked for more than 143 seconds. [ 189.358948] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.359699] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.360761] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 189.361921] Call Trace: [ 189.362285] [ 189.362642] __schedule+0x893/0x2470 [ 189.363193] ? io_schedule_timeout+0x150/0x150 [ 189.363861] ? do_raw_spin_lock+0x121/0x260 [ 189.364498] ? rwlock_bug.part.0+0x90/0x90 [ 189.365112] schedule+0xda/0x1b0 [ 189.365621] rescuer_thread+0x851/0xdb0 [ 189.366186] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.366919] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.367646] ? lockdep_hardirqs_on+0x79/0x100 [ 189.368281] ? worker_thread+0x1260/0x1260 [ 189.368907] kthread+0x2ed/0x3a0 [ 189.369418] ? kthread_complete_and_exit+0x40/0x40 [ 189.370105] ret_from_fork+0x22/0x30 [ 189.370681] [ 189.371036] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 189.371953] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.372754] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.373835] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 189.375017] Workqueue: 0x0 (events_highpri) [ 189.375678] Call Trace: [ 189.376044] [ 189.376380] __schedule+0x893/0x2470 [ 189.376962] ? io_schedule_timeout+0x150/0x150 [ 189.377658] schedule+0xda/0x1b0 [ 189.378152] worker_thread+0x15f/0x1260 [ 189.378800] ? process_one_work+0x16a0/0x16a0 [ 189.379485] kthread+0x2ed/0x3a0 [ 189.379972] ? kthread_complete_and_exit+0x40/0x40 [ 189.380695] ret_from_fork+0x22/0x30 [ 189.381254] [ 189.381646] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 189.382603] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.383348] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.384425] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 189.385605] Call Trace: [ 189.385965] [ 189.386291] __schedule+0x893/0x2470 [ 189.386878] ? io_schedule_timeout+0x150/0x150 [ 189.387552] ? do_raw_spin_lock+0x121/0x260 [ 189.388159] ? rwlock_bug.part.0+0x90/0x90 [ 189.388800] schedule+0xda/0x1b0 [ 189.389291] rescuer_thread+0x851/0xdb0 [ 189.389897] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.390625] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.391350] ? lockdep_hardirqs_on+0x79/0x100 [ 189.392020] ? worker_thread+0x1260/0x1260 [ 189.392659] kthread+0x2ed/0x3a0 [ 189.393146] ? kthread_complete_and_exit+0x40/0x40 [ 189.393870] ret_from_fork+0x22/0x30 [ 189.394455] [ 189.394796] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 189.395927] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.396821] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.398081] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 189.399488] Call Trace: [ 189.399913] [ 189.400298] __schedule+0x893/0x2470 [ 189.400977] ? io_schedule_timeout+0x150/0x150 [ 189.401774] ? mark_held_locks+0x9e/0xe0 [ 189.402500] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.403349] schedule+0xda/0x1b0 [ 189.403970] rcu_tasks_one_gp+0x3db/0xc10 [ 189.404722] rcu_tasks_kthread+0x80/0xa0 [ 189.405452] ? rcu_tasks_postscan+0x10/0x10 [ 189.406220] kthread+0x2ed/0x3a0 [ 189.406868] ? kthread_complete_and_exit+0x40/0x40 [ 189.407755] ret_from_fork+0x22/0x30 [ 189.408460] [ 189.408874] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 189.410029] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.410990] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.412295] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 189.413743] Workqueue: 0x0 (rcu_gp) [ 189.414417] Call Trace: [ 189.414881] [ 189.415277] __schedule+0x893/0x2470 [ 189.415978] ? io_schedule_timeout+0x150/0x150 [ 189.416824] schedule+0xda/0x1b0 [ 189.417444] worker_thread+0x15f/0x1260 [ 189.418178] ? process_one_work+0x16a0/0x16a0 [ 189.419003] kthread+0x2ed/0x3a0 [ 189.419625] ? kthread_complete_and_exit+0x40/0x40 [ 189.420509] ret_from_fork+0x22/0x30 [ 189.421180] [ 189.422149] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 189.423365] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.424299] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.425623] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 189.427067] Workqueue: 0x0 (kblockd) [ 189.427764] Call Trace: [ 189.428199] [ 189.428621] __schedule+0x893/0x2470 [ 189.429285] ? io_schedule_timeout+0x150/0x150 [ 189.430104] schedule+0xda/0x1b0 [ 189.430723] worker_thread+0x15f/0x1260 [ 189.431494] ? process_one_work+0x16a0/0x16a0 [ 189.432294] kthread+0x2ed/0x3a0 [ 189.432918] ? kthread_complete_and_exit+0x40/0x40 [ 189.433790] ret_from_fork+0x22/0x30 [ 189.434493] [ 189.434919] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 189.436073] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.436984] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.438303] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 189.439728] Call Trace: [ 189.440158] [ 189.440577] __schedule+0x893/0x2470 [ 189.441244] ? io_schedule_timeout+0x150/0x150 [ 189.442042] ? do_raw_spin_lock+0x121/0x260 [ 189.442835] ? rwlock_bug.part.0+0x90/0x90 [ 189.443601] schedule+0xda/0x1b0 [ 189.444194] rescuer_thread+0x851/0xdb0 [ 189.444924] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.445798] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.446685] ? lockdep_hardirqs_on+0x79/0x100 [ 189.447506] ? worker_thread+0x1260/0x1260 [ 189.448232] kthread+0x2ed/0x3a0 [ 189.448852] ? kthread_complete_and_exit+0x40/0x40 [ 189.449718] ret_from_fork+0x22/0x30 [ 189.450378] [ 189.450880] [ 189.450880] Showing all locks held in the system: [ 189.451926] 1 lock held by rcu_tasks_kthre/11: [ 189.452716] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 189.454373] 1 lock held by khungtaskd/25: [ 189.455085] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 189.456612] 1 lock held by in:imklog/191: [ 189.457309] 2 locks held by syz-executor/6662: [ 189.458100] [ 189.458416] ============================================= [ 189.458416] 21:45:44 executing program 5: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$CDROMSTART(r1, 0x5308) r2 = memfd_secret(0x80000) ioctl$CDROMRESUME(r2, 0x5302) r3 = socket(0x0, 0xa, 0xad) bind$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x7, @none, 0x2, 0x2}, 0xe) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000200)) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2c8, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4af}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "765a107ecdc5b8bd591fd7880085f640d4878ad1354ccae876c0af0c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "5a160e6be7cc770a1068bdd2fb2603c896bb7ee7f2f1df98fd303d76d3bcf214cc1cb2baec2032e418a8883b551b17c8c1e7df48ba08f4493e021685a24187a478e06e73dda04cf68f6401aa144b9ffbe9a757954b452ed3cc945494c0ac2a26fd803b230aa53be90d058345893b8bdff0fdb086e327f09353e5cbd7f414936be741158576dd86ac1fba4f3bccfbfeb022f803eae6d0fc"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xac0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x417be4c5c5ac043e}, 0x48040) r4 = syz_open_dev$hiddev(&(0x7f0000000600), 0x4, 0x2d8300) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000000640)={0x1, 0x3, 0x8001}) r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x80) ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f00000006c0)={0x1, 0x1, 0x6}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r3) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000740)=0x3) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0) ioctl$CDROMRESET(r6, 0x5312) ioctl$CDROMEJECT_SW(r6, 0x530f, 0x1) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}}, 0x24000004) 21:45:44 executing program 4: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r0, 0x42, 0x55de}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) r1 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xcf, 0x2, &(0x7f0000000340)=[{&(0x7f0000000200)="0746c068f53a99a3db571c9b8ca5c316eb1b4e9fda13db206f90fbcfcc592b09aaaa417059e993b947353b17ededa614c86e6cced1c9730f071ffcc3837b63306fc9ce43c2d62726f1f12d965c432e7e5fb9352d44643a62153b3d05ed97a3400d70d2354664019a", 0x68, 0x1}, {&(0x7f0000000280)="d7ff36ccc148c5b30ef2225eaba070088b3844b5b46a4cbe788db13d0224e25429d7ed502eb21b5ff85292eca9b2ebf4b6e5fd151a8451dea4574c7046bad6d5e51e870da87f48766d26a4f1f527922ae91dbec231a1dc74c478d739a13f22e017adc09a2f66b1302c1d0e661a0ffe45fea322e1bf67cbe525b9ed631b08e85b67f8cdb9658a929c8ab7f71cb9", 0x8d, 0x3f}], 0x1100002, &(0x7f0000000380)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}], [{@subj_user={'subj_user', 0x3d, '\'.'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_lt}, {@permit_directio}, {@euid_lt={'euid<', 0xee01}}, {@euid_lt}, {@euid_lt={'euid<', 0xee01}}, {@seclabel}]}) mknodat(r1, &(0x7f0000000480)='./file0\x00', 0x1, 0xf89e) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0x0, @fixed}, &(0x7f0000000500)=0xe, 0x80000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x1, 0x7ff, 0x0, 0xffffffffffffffff, 0x4, 0x55}, {0x9, 0x4884, 0x7fffffff, 0x10000, 0x200, 0x7f}], ['\x00', '\x00', '\x00', '\x00']}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000700)=0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000740)={0x2, [0x0, 0x0]}) bind$bt_l2cap(r2, &(0x7f0000000780)={0x1f, 0x8, @none, 0x3, 0x1}, 0xe) open$dir(&(0x7f00000007c0)='./file0\x00', 0x44100, 0x4) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000840)={0x430, 0x3f3, 0x10, 0x70bd29, 0x25dfdbfd, {0x2, 0x1, 0x2d, [0xffff9734, 0x206c, 0xef, 0xfffffffa, 0x5, 0x1f, 0xfffffffc, 0x0, 0x400, 0x7fff, 0x4, 0xfffffde2, 0x100, 0x1, 0x9, 0xfffffff7, 0x5, 0xffffffff, 0x100, 0x5, 0x3, 0x3, 0x3, 0x6, 0x5, 0x9, 0x8, 0x0, 0xab2d, 0x66b9, 0x200, 0x1ff, 0x4, 0x100, 0x9, 0x2, 0x9, 0xcd, 0x2, 0x4ce, 0xf5, 0x96, 0x80, 0x6, 0x3, 0x81, 0xc757, 0x401, 0x1, 0x3, 0x300000, 0x9, 0x4, 0xffffffc0, 0xeb2, 0x3, 0x1, 0xc1a6, 0x2, 0x1ad1, 0x6, 0x1000, 0x8001, 0x6], [0x2, 0x8000000, 0xffff, 0x4, 0x4b59, 0x8000, 0x7fffffff, 0x40, 0x4, 0x2, 0x1, 0x421, 0x8, 0x20, 0x0, 0x5, 0x81, 0x8, 0x7, 0x6, 0x8022, 0x80000001, 0x3, 0x9, 0x7, 0x4, 0x3, 0x4, 0x9, 0x81, 0x8, 0x9, 0x9, 0x80000001, 0x2, 0x2, 0x0, 0x8, 0x1, 0x1, 0x0, 0x101, 0x8001, 0x7, 0x1, 0x0, 0x7ff, 0x0, 0x20, 0x7ff, 0x7, 0x3ff, 0x7, 0x0, 0x10001, 0x20, 0x0, 0x1, 0x7ff, 0x8, 0x81, 0xfffffff9, 0x5, 0x4], [0x80000000, 0x100, 0x7ff, 0x6, 0x8, 0xe9, 0xfffffff7, 0x4, 0x8000, 0x0, 0x8000, 0x9, 0x6, 0xffff, 0x7, 0x4970d28, 0x3b, 0x6, 0x9, 0x1, 0x4, 0x8, 0x37, 0x5, 0x80000000, 0x101, 0x2, 0x4, 0x71ca, 0x7, 0x0, 0x7, 0x3ff, 0x5527, 0x3, 0x1, 0x101, 0x3f, 0x4, 0x1, 0x8000000, 0x7fffffff, 0x7, 0x1, 0x5ee, 0x9, 0x0, 0x4, 0x5, 0xab, 0x800, 0x8000, 0x47, 0x7, 0x800, 0x0, 0x4, 0x0, 0x80, 0x2, 0x1, 0x4, 0xf6, 0x2], [0x200, 0x1, 0x20, 0x7fce, 0xa5, 0xfffffffa, 0x20, 0x86, 0x2, 0x88, 0x1, 0x1, 0x800, 0x100, 0xf3a0, 0x75, 0xcf, 0x4, 0x8, 0x200, 0xfffffbff, 0xf992, 0x4, 0x8, 0x3, 0xab58, 0x6, 0x7ff, 0xb7b5, 0x3, 0x880, 0x8, 0x6, 0x77f, 0x4, 0x656, 0x8, 0x101, 0x6, 0x66, 0x2, 0x0, 0x7, 0xe3e1, 0x9, 0x269, 0x1f, 0x80000000, 0x8001, 0x5bd, 0xfffffeff, 0x6, 0x80000000, 0xe7af, 0x40, 0x2, 0x400, 0xb063, 0x8000, 0x7, 0x7fff, 0x7ff], 0xf, [':.:\x00', 'context', '):\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x800}, 0x40480c0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7b0e272b, 0x2, 0x4, 0x8001, 0x8, 0x6}, {0x2, 0x6, 0x753ba2f, 0x2, 0x4, 0x7ff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000800) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d00)={&(0x7f0000001580)={0x780, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10100000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x9, 0x1, 0x6}, {0x4, 0x1f, 0x1f, 0x9}, {0x3, 0x40, 0x81, 0x6}, {0xfff9, 0x2, 0x67, 0x1b1d2d89}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x56}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3a95fecf}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8d70}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) 21:45:44 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) r0 = io_uring_setup(0x123f, &(0x7f0000000040)={0x0, 0xf557, 0x0, 0x2, 0x10e}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x551040, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) r2 = io_uring_setup(0x41c5, &(0x7f0000000140)={0x0, 0x1c92, 0x0, 0x0, 0x129, 0x0, r1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x18, 0x5, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0x8000, 0x0, &(0x7f00000001c0)=[r0, r3, 0xffffffffffffffff, r0, r4]}, 0x5) poll(&(0x7f0000000240)=[{r1, 0x7261aa60e7995c9a}], 0x1, 0x2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0xf, 0x3, 0x39) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000380), 0x224000, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r1, r6, r7, r8, r5, r4, r9, r10], 0x8) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000440)={0x3, 0x200, 0x7fff, 0x9, 0xfffff801, 0x8001}) 21:45:44 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4008000) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x4, 0x70bd29, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8855}, 0x4000040) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x10001, 0x100) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000002c0)) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x454, 0x3f3, 0x800, 0x70bd2d, 0x25dfdbfe, {0x4, 0x2, 0x2, [0x20, 0xab04, 0x5, 0x8, 0x1, 0x2d83, 0x6f, 0xf9, 0xcf, 0x5, 0x4, 0x69, 0x9, 0x29e, 0xa28d, 0x2, 0x40, 0x7, 0xffff, 0xfff, 0x10000, 0x5a, 0xfffeffff, 0x20, 0x8, 0x80000001, 0x7f, 0x709e, 0x6, 0x3f, 0x3, 0x3ff, 0x10000, 0x80000000, 0xffffffff, 0x3, 0x67, 0x6, 0x80000000, 0x7, 0x56d7, 0x9, 0x5, 0x3, 0x3, 0x400, 0x6f9, 0x3, 0x7, 0x9, 0x8, 0x45, 0x8, 0x5, 0x2, 0x7fffffff, 0x49d6, 0x2, 0x1000, 0x7, 0x4, 0x4, 0x1, 0x80000000], [0xaef, 0x9da, 0x401, 0xf35, 0x3ff, 0x5, 0x1000, 0x1, 0x66f, 0x7, 0x7, 0x2, 0x4, 0x9, 0xd9, 0x7, 0x1, 0x101, 0x1, 0x401, 0x0, 0xf8, 0x80, 0x4, 0x4, 0x0, 0x9, 0x40, 0xfa, 0xc0000000, 0x9, 0x5d78f63b, 0x100, 0x0, 0xffffffff, 0x5, 0x400, 0x3, 0xfffff001, 0x200, 0x1, 0x6, 0x2, 0x81, 0xfff, 0x10000, 0x6, 0x8000, 0x0, 0x6, 0x80000000, 0x1, 0xa3d, 0x4, 0x43120c67, 0x94, 0xf44, 0x2, 0xfff, 0x401, 0x4, 0x200, 0xa8, 0x1f], [0x2, 0x0, 0xffff, 0x40, 0x1f, 0x0, 0x100, 0x400, 0x9, 0x7, 0xffffffff, 0x6, 0x2, 0x7a, 0xffffffff, 0x3, 0x3, 0x7, 0x0, 0x0, 0x8628, 0x2, 0x3ff, 0x0, 0xa7, 0x20, 0x3, 0xc01, 0x0, 0x73e4613c, 0x6, 0x3, 0x2, 0xffff0000, 0x9, 0x0, 0x85, 0x3, 0x61, 0x5, 0x6, 0x1, 0x800, 0x7, 0x8, 0x5, 0x8, 0x5, 0xfffff8ce, 0x4c59863b, 0x68, 0x4, 0x1, 0x3, 0x2, 0x7, 0x4, 0x8, 0x1, 0x7, 0x2, 0x28, 0x9, 0x10001], [0xffffff80, 0xbd92, 0x200, 0xfffffffb, 0x4, 0x2, 0x3, 0x3, 0x4, 0x3ff, 0x2, 0x4, 0x2, 0x4, 0x1f, 0x80000000, 0x269, 0xa1, 0x3, 0xfffffffd, 0xfffffffa, 0x1, 0x3, 0x7, 0x4, 0x3, 0x8e7, 0x60000, 0x9, 0x7, 0x5, 0x4, 0x3, 0x800, 0x7f, 0x2, 0x3d46, 0x1, 0x2, 0x4, 0x4, 0xfffffe00, 0x9, 0x2, 0x5, 0x9, 0xffffffff, 0x1f, 0x0, 0x8763, 0x3, 0x2, 0x8, 0x7ff, 0x6, 0x299, 0x8, 0x8, 0x400000, 0xff, 0x8, 0x7, 0x71, 0x8], 0x31, ['\'@+,]!:\x88\x00', '{-\\*\xcf-$.\'&!&$Q\x00', ',!!^%^\x00', '#\xd6$>]%[\x00', '/dev/full\x00']}, ["", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x18, 0x3f9, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1}, ["", ""]}, 0x18}}, 0x55bdc2f19b162e82) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000940)=0x2) r4 = syz_open_dev$loop(&(0x7f0000000980), 0x0, 0x400080) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f00000009c0)) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000a00)={0x1, 0x100, 0x4, 0x5, 0x6, 0x5}) sendmsg$AUDIT_USER(r2, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000a0}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xc8, 0x3ed, 0x400, 0x70bd26, 0x25dfdbfd, "46318d366404ec05c18544c55256947a4f949797496b41369de0ca9e3b15e0da916b6db1244bef7edf8a763fe492ee2eb687d64c2695e3f4e4b3c53a055d3e567e84b6521e28839aee0e6a644a4863d0a58ee6750fd224b8983a0b015bf3b3a387280728dcae9dead15aef20c2c3f9f97733d64fc04146ad5ef20e5358d00ba37933bed5b4cfdd4d1b71fca4932a81f5630e5ebe0fbd8cfaa8c6f9c85e33046cf49cf40a2f3de37991b4cc0b883857259afa627233985f", ["", "", "", "", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x44) syz_genetlink_get_family_id$team(&(0x7f0000000c00), r2) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000c40)) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000c80)=0x6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000cc0)=0x800, 0x4) 21:45:44 executing program 3: syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r0 = io_uring_setup(0x3188, &(0x7f0000000040)={0x0, 0x1f6b, 0x20, 0x0, 0x247}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x107800, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x216443, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x80, 0x8ce7, {{0x2e, 0x4, 0x0, 0x22, 0xb8, 0x64, 0x0, 0x3e, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xe8, 0x3, 0x0, [{@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x3}]}, @rr={0x7, 0xb, 0x33, [@remote, @empty]}, @lsrr={0x83, 0x27, 0x73, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x94, 0x2}, @end, @timestamp_addr={0x44, 0x14, 0xc6, 0x1, 0x9, [{@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x87, 0x3, 0xe, [{@local, 0x6}, {@multicast2, 0x3}, {@local, 0xfffff000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x3}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1c0, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f0000000580)) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r4) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x10) ioctl$SNAPSHOT_FREE(r4, 0x3305) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) ioctl$CDROM_SELECT_SPEED(r4, 0x5322, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000740)={0x1f, 0x0, @none}, &(0x7f0000000780)=0xe, 0xc00) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000800)={0x4, &(0x7f00000007c0)=[{0xf6, 0x0, 0x2, 0x9}, {0x7f, 0x7f, 0x40, 0x9}, {0x6, 0x3, 0x40, 0xb3}, {0x2, 0xe, 0x5, 0x7fff}]}) r9 = openat$cgroup_pressure(r4, &(0x7f0000000840)='cpu.pressure\x00', 0x2, 0x0) poll(&(0x7f0000000880)=[{r4, 0x4048}, {r6, 0x400}, {r7, 0x3410}, {r0, 0xc064}, {r8, 0x2008}, {r9, 0x8000}], 0x6, 0x0) read$snapshot(r2, &(0x7f00000008c0)=""/197, 0xc5) 21:45:44 executing program 2: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x401, 0x2d2, 0x200}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x3, 0x1, 0xfffffffe, 0x7}) r0 = memfd_secret(0x80000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000000c0)={0x1, 0x2, 0x7}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000100)=0x1) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3ff) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000180)=[{r1, 0x8208}, {r2, 0x160}, {r0, 0x8041}, {r0, 0x24}, {0xffffffffffffffff, 0x8650}], 0x5, 0x6) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="f3bfd8e400a7f703d1c5369077bc47cf44bff241efa796cae19c61612cb3a66c1c49879d2d4b7c8e77b6834f3e972826ef2d61b2a4079b9036effdee0c03f8d36ba5be03babbec8d8cb3bc281b078d5e8008fb2af1414e15c4fff8c8355a84a8a4250e50df1705ef6c52e6fd026d4bb51956271e1e652dc1d77acfbc815699ef0f02e20ddea42f773b7089adc631f4fa922146fb38d1bf54d2fb2f4debda87c3a3045b", 0xa3, 0xffffffffffffffff}], 0x1000, &(0x7f0000000340)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@nobarrier}, {@noinit_itable}, {@lazytime}], [{@obj_user={'obj_user', 0x3d, '*\t)'}}, {@fsname={'fsname', 0x3d, '\''}}, {@smackfsroot}, {@seclabel}, {@seclabel}]}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000003c0)) r3 = memfd_secret(0x80000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x2204c004) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 21:45:44 executing program 6: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x28000040}, 0x20004000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140), 0x1) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, 0x453, 0x800, 0x70bd25, 0x25dfdbfd, "3e27b68820449398e450cb47702168f56bd462b48f7bab457bc9add9ce8753dee5e27b7fbfce640a77effebac7939c3ba145fd2917a1cb15fe854d1129faf57da9b2160c3d59fd4b9da87b09ded4b4aac7559ca9c034313c1d256c80678647eaa12d923a6c6098457d14eb20132de4c6a1a270d67e6bf399de1d3d067579693bbb56494ffa48ceeaa6e362045fd5ceec9546e4f5cd02b053b5b04affbff1601b2a48f4a9059502cb3fa633eca8ad4d22d53eca1fed0c", ["", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x80c0}, 0x20004080) r1 = memfd_secret(0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x9d9, 0x1, {{0x1a, 0x4, 0x3, 0x6, 0x68, 0x68, 0x0, 0xa6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @cipso={0x86, 0x3e, 0x3, [{0x1, 0xc, "98cbc7242818811b3407"}, {0x0, 0x4, '#/'}, {0x1, 0x9, "f8b7b6a387b62d"}, {0x5, 0x2}, {0x7, 0x4, "f5f4"}, {0x2, 0x3, ')'}, {0x0, 0x7, "80807e15f0"}, {0x6, 0x8, "0fdb308b74ea"}, {0x5, 0x7, "821e0091bc"}]}, @end, @timestamp_prespec={0x44, 0x14, 0x72, 0x3, 0x6, [{@loopback, 0x7398}, {@private=0xa010101, 0x20}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000480)={'erspan0\x00', r2, 0x7, 0x10, 0x1, 0x2, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x68, 0x6, 0x0, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0xc, 0x88, 0x0, 0x0, [0x2b, 0x200]}, @timestamp_prespec={0x44, 0x24, 0x67, 0x3, 0x4, [{@private=0xa010102, 0x6}, {@empty, 0x1}, {@private=0xa010100, 0x3f}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0xc, [{@private=0xa010102, 0xffff}, {@multicast1, 0x6d4}]}, @timestamp_prespec={0x44, 0x3c, 0x36, 0x3, 0x6, [{@local, 0x10000}, {@multicast1, 0x200}, {@multicast2}, {@private=0xa010102, 0xffff}, {@multicast2, 0x3}, {@multicast2, 0x7}, {@empty}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'sit0\x00', r2, 0x0, 0x8, 0x37, 0xfff, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8000, 0x700, 0xa2, 0x2}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x10c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x140, 0x0, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbf96}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000840)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), r1) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_FLOW={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r1) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004000c}, 0x4000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000c80)) 21:45:44 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x81000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x104, 0x464, 0x400, 0x70bd25, 0x25dfdbfe, "b49492f777e997cfddf06963b3528384f346277064c3d5d492ac010524532b091e573fc07e871b1a4808b9aa9fb8be644f9b58fb8c8217f55ee3739b2dcfa6b55ea483d4cf3e1814860ff51528acd6a8a5dd698f9394bdde8ab5d199d221f02129eec8e84bab07929873291caa4985824eecf4372afe8daeb4ba4e49af9684ec9dcb0b980b59ac6d375d406c5246f1a93b2394c23fb7033c64dfdb891cc5fad6f6bf19bdee1555ed42ba12fafd039b26eeb80f793534755fbf26a73567dde9ad7d3159584411821905d05bc0032698dedfdfa9ad5bff8eda4e4a8fe24948a59f384674b2932cf29c736de7cef520dae3f5043eb5"}, 0x104}, 0x1, 0x0, 0x0, 0x40a80c0}, 0x48040) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000300)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000340)) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x3f7, 0x300, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) socketpair(0x1d, 0x0, 0x668b3ab9, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x3, 0x0, &(0x7f00000004c0)=[r0, r3, r1, r0, r1, r1, r0]}, 0x7) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000540)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x4, 0x6, 0x4, 0x68b, 0x0, 0x9}, {0x1, 0x6, 0x0, 0x2, 0x9b, 0xfffffffffffffffe}], ['\x00', '\x00', '\x00']}) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8a0}, 0x4000081) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x330, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9bf2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb20e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x13}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf14be000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5ca}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x16e2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x807}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}]}, @TIPC_NLA_LINK={0x13c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5df}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x195}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000c40)={0x0, 0x2800, 0x5, 0x8, 0x0, 0x3f, 0x5}, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000c80)) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000cc0)={0x3, 0xfffffffeffffffff, 0x6, 0x7}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000d00)={0x9, 0x9}) [ 193.613848] loop2: detected capacity change from 0 to 16383 21:45:44 executing program 4: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r0, 0x42, 0x55de}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) r1 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xcf, 0x2, &(0x7f0000000340)=[{&(0x7f0000000200)="0746c068f53a99a3db571c9b8ca5c316eb1b4e9fda13db206f90fbcfcc592b09aaaa417059e993b947353b17ededa614c86e6cced1c9730f071ffcc3837b63306fc9ce43c2d62726f1f12d965c432e7e5fb9352d44643a62153b3d05ed97a3400d70d2354664019a", 0x68, 0x1}, {&(0x7f0000000280)="d7ff36ccc148c5b30ef2225eaba070088b3844b5b46a4cbe788db13d0224e25429d7ed502eb21b5ff85292eca9b2ebf4b6e5fd151a8451dea4574c7046bad6d5e51e870da87f48766d26a4f1f527922ae91dbec231a1dc74c478d739a13f22e017adc09a2f66b1302c1d0e661a0ffe45fea322e1bf67cbe525b9ed631b08e85b67f8cdb9658a929c8ab7f71cb9", 0x8d, 0x3f}], 0x1100002, &(0x7f0000000380)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}], [{@subj_user={'subj_user', 0x3d, '\'.'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_lt}, {@permit_directio}, {@euid_lt={'euid<', 0xee01}}, {@euid_lt}, {@euid_lt={'euid<', 0xee01}}, {@seclabel}]}) mknodat(r1, &(0x7f0000000480)='./file0\x00', 0x1, 0xf89e) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0x0, @fixed}, &(0x7f0000000500)=0xe, 0x80000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x1, 0x7ff, 0x0, 0xffffffffffffffff, 0x4, 0x55}, {0x9, 0x4884, 0x7fffffff, 0x10000, 0x200, 0x7f}], ['\x00', '\x00', '\x00', '\x00']}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000700)=0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000740)={0x2, [0x0, 0x0]}) bind$bt_l2cap(r2, &(0x7f0000000780)={0x1f, 0x8, @none, 0x3, 0x1}, 0xe) open$dir(&(0x7f00000007c0)='./file0\x00', 0x44100, 0x4) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000840)={0x430, 0x3f3, 0x10, 0x70bd29, 0x25dfdbfd, {0x2, 0x1, 0x2d, [0xffff9734, 0x206c, 0xef, 0xfffffffa, 0x5, 0x1f, 0xfffffffc, 0x0, 0x400, 0x7fff, 0x4, 0xfffffde2, 0x100, 0x1, 0x9, 0xfffffff7, 0x5, 0xffffffff, 0x100, 0x5, 0x3, 0x3, 0x3, 0x6, 0x5, 0x9, 0x8, 0x0, 0xab2d, 0x66b9, 0x200, 0x1ff, 0x4, 0x100, 0x9, 0x2, 0x9, 0xcd, 0x2, 0x4ce, 0xf5, 0x96, 0x80, 0x6, 0x3, 0x81, 0xc757, 0x401, 0x1, 0x3, 0x300000, 0x9, 0x4, 0xffffffc0, 0xeb2, 0x3, 0x1, 0xc1a6, 0x2, 0x1ad1, 0x6, 0x1000, 0x8001, 0x6], [0x2, 0x8000000, 0xffff, 0x4, 0x4b59, 0x8000, 0x7fffffff, 0x40, 0x4, 0x2, 0x1, 0x421, 0x8, 0x20, 0x0, 0x5, 0x81, 0x8, 0x7, 0x6, 0x8022, 0x80000001, 0x3, 0x9, 0x7, 0x4, 0x3, 0x4, 0x9, 0x81, 0x8, 0x9, 0x9, 0x80000001, 0x2, 0x2, 0x0, 0x8, 0x1, 0x1, 0x0, 0x101, 0x8001, 0x7, 0x1, 0x0, 0x7ff, 0x0, 0x20, 0x7ff, 0x7, 0x3ff, 0x7, 0x0, 0x10001, 0x20, 0x0, 0x1, 0x7ff, 0x8, 0x81, 0xfffffff9, 0x5, 0x4], [0x80000000, 0x100, 0x7ff, 0x6, 0x8, 0xe9, 0xfffffff7, 0x4, 0x8000, 0x0, 0x8000, 0x9, 0x6, 0xffff, 0x7, 0x4970d28, 0x3b, 0x6, 0x9, 0x1, 0x4, 0x8, 0x37, 0x5, 0x80000000, 0x101, 0x2, 0x4, 0x71ca, 0x7, 0x0, 0x7, 0x3ff, 0x5527, 0x3, 0x1, 0x101, 0x3f, 0x4, 0x1, 0x8000000, 0x7fffffff, 0x7, 0x1, 0x5ee, 0x9, 0x0, 0x4, 0x5, 0xab, 0x800, 0x8000, 0x47, 0x7, 0x800, 0x0, 0x4, 0x0, 0x80, 0x2, 0x1, 0x4, 0xf6, 0x2], [0x200, 0x1, 0x20, 0x7fce, 0xa5, 0xfffffffa, 0x20, 0x86, 0x2, 0x88, 0x1, 0x1, 0x800, 0x100, 0xf3a0, 0x75, 0xcf, 0x4, 0x8, 0x200, 0xfffffbff, 0xf992, 0x4, 0x8, 0x3, 0xab58, 0x6, 0x7ff, 0xb7b5, 0x3, 0x880, 0x8, 0x6, 0x77f, 0x4, 0x656, 0x8, 0x101, 0x6, 0x66, 0x2, 0x0, 0x7, 0xe3e1, 0x9, 0x269, 0x1f, 0x80000000, 0x8001, 0x5bd, 0xfffffeff, 0x6, 0x80000000, 0xe7af, 0x40, 0x2, 0x400, 0xb063, 0x8000, 0x7, 0x7fff, 0x7ff], 0xf, [':.:\x00', 'context', '):\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x800}, 0x40480c0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7b0e272b, 0x2, 0x4, 0x8001, 0x8, 0x6}, {0x2, 0x6, 0x753ba2f, 0x2, 0x4, 0x7ff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000800) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d00)={&(0x7f0000001580)={0x780, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10100000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x9, 0x1, 0x6}, {0x4, 0x1f, 0x1f, 0x9}, {0x3, 0x40, 0x81, 0x6}, {0xfff9, 0x2, 0x67, 0x1b1d2d89}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x56}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3a95fecf}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8d70}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) 21:45:44 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4008000) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x4, 0x70bd29, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8855}, 0x4000040) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x10001, 0x100) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000002c0)) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x454, 0x3f3, 0x800, 0x70bd2d, 0x25dfdbfe, {0x4, 0x2, 0x2, [0x20, 0xab04, 0x5, 0x8, 0x1, 0x2d83, 0x6f, 0xf9, 0xcf, 0x5, 0x4, 0x69, 0x9, 0x29e, 0xa28d, 0x2, 0x40, 0x7, 0xffff, 0xfff, 0x10000, 0x5a, 0xfffeffff, 0x20, 0x8, 0x80000001, 0x7f, 0x709e, 0x6, 0x3f, 0x3, 0x3ff, 0x10000, 0x80000000, 0xffffffff, 0x3, 0x67, 0x6, 0x80000000, 0x7, 0x56d7, 0x9, 0x5, 0x3, 0x3, 0x400, 0x6f9, 0x3, 0x7, 0x9, 0x8, 0x45, 0x8, 0x5, 0x2, 0x7fffffff, 0x49d6, 0x2, 0x1000, 0x7, 0x4, 0x4, 0x1, 0x80000000], [0xaef, 0x9da, 0x401, 0xf35, 0x3ff, 0x5, 0x1000, 0x1, 0x66f, 0x7, 0x7, 0x2, 0x4, 0x9, 0xd9, 0x7, 0x1, 0x101, 0x1, 0x401, 0x0, 0xf8, 0x80, 0x4, 0x4, 0x0, 0x9, 0x40, 0xfa, 0xc0000000, 0x9, 0x5d78f63b, 0x100, 0x0, 0xffffffff, 0x5, 0x400, 0x3, 0xfffff001, 0x200, 0x1, 0x6, 0x2, 0x81, 0xfff, 0x10000, 0x6, 0x8000, 0x0, 0x6, 0x80000000, 0x1, 0xa3d, 0x4, 0x43120c67, 0x94, 0xf44, 0x2, 0xfff, 0x401, 0x4, 0x200, 0xa8, 0x1f], [0x2, 0x0, 0xffff, 0x40, 0x1f, 0x0, 0x100, 0x400, 0x9, 0x7, 0xffffffff, 0x6, 0x2, 0x7a, 0xffffffff, 0x3, 0x3, 0x7, 0x0, 0x0, 0x8628, 0x2, 0x3ff, 0x0, 0xa7, 0x20, 0x3, 0xc01, 0x0, 0x73e4613c, 0x6, 0x3, 0x2, 0xffff0000, 0x9, 0x0, 0x85, 0x3, 0x61, 0x5, 0x6, 0x1, 0x800, 0x7, 0x8, 0x5, 0x8, 0x5, 0xfffff8ce, 0x4c59863b, 0x68, 0x4, 0x1, 0x3, 0x2, 0x7, 0x4, 0x8, 0x1, 0x7, 0x2, 0x28, 0x9, 0x10001], [0xffffff80, 0xbd92, 0x200, 0xfffffffb, 0x4, 0x2, 0x3, 0x3, 0x4, 0x3ff, 0x2, 0x4, 0x2, 0x4, 0x1f, 0x80000000, 0x269, 0xa1, 0x3, 0xfffffffd, 0xfffffffa, 0x1, 0x3, 0x7, 0x4, 0x3, 0x8e7, 0x60000, 0x9, 0x7, 0x5, 0x4, 0x3, 0x800, 0x7f, 0x2, 0x3d46, 0x1, 0x2, 0x4, 0x4, 0xfffffe00, 0x9, 0x2, 0x5, 0x9, 0xffffffff, 0x1f, 0x0, 0x8763, 0x3, 0x2, 0x8, 0x7ff, 0x6, 0x299, 0x8, 0x8, 0x400000, 0xff, 0x8, 0x7, 0x71, 0x8], 0x31, ['\'@+,]!:\x88\x00', '{-\\*\xcf-$.\'&!&$Q\x00', ',!!^%^\x00', '#\xd6$>]%[\x00', '/dev/full\x00']}, ["", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x18, 0x3f9, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1}, ["", ""]}, 0x18}}, 0x55bdc2f19b162e82) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000940)=0x2) r4 = syz_open_dev$loop(&(0x7f0000000980), 0x0, 0x400080) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f00000009c0)) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000a00)={0x1, 0x100, 0x4, 0x5, 0x6, 0x5}) sendmsg$AUDIT_USER(r2, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000a0}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xc8, 0x3ed, 0x400, 0x70bd26, 0x25dfdbfd, "46318d366404ec05c18544c55256947a4f949797496b41369de0ca9e3b15e0da916b6db1244bef7edf8a763fe492ee2eb687d64c2695e3f4e4b3c53a055d3e567e84b6521e28839aee0e6a644a4863d0a58ee6750fd224b8983a0b015bf3b3a387280728dcae9dead15aef20c2c3f9f97733d64fc04146ad5ef20e5358d00ba37933bed5b4cfdd4d1b71fca4932a81f5630e5ebe0fbd8cfaa8c6f9c85e33046cf49cf40a2f3de37991b4cc0b883857259afa627233985f", ["", "", "", "", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x44) syz_genetlink_get_family_id$team(&(0x7f0000000c00), r2) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000c40)) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000cc0)=0x800, 0x4) 21:45:45 executing program 2: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x401, 0x2d2, 0x200}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x3, 0x1, 0xfffffffe, 0x7}) r0 = memfd_secret(0x80000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000000c0)={0x1, 0x2, 0x7}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000100)=0x1) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3ff) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000180)=[{r1, 0x8208}, {r2, 0x160}, {r0, 0x8041}, {r0, 0x24}, {0xffffffffffffffff, 0x8650}], 0x5, 0x6) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="f3bfd8e400a7f703d1c5369077bc47cf44bff241efa796cae19c61612cb3a66c1c49879d2d4b7c8e77b6834f3e972826ef2d61b2a4079b9036effdee0c03f8d36ba5be03babbec8d8cb3bc281b078d5e8008fb2af1414e15c4fff8c8355a84a8a4250e50df1705ef6c52e6fd026d4bb51956271e1e652dc1d77acfbc815699ef0f02e20ddea42f773b7089adc631f4fa922146fb38d1bf54d2fb2f4debda87c3a3045b", 0xa3, 0xffffffffffffffff}], 0x1000, &(0x7f0000000340)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@nobarrier}, {@noinit_itable}, {@lazytime}], [{@obj_user={'obj_user', 0x3d, '*\t)'}}, {@fsname={'fsname', 0x3d, '\''}}, {@smackfsroot}, {@seclabel}, {@seclabel}]}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000003c0)) memfd_secret(0x80000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 21:45:45 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4008000) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x4, 0x70bd29, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8855}, 0x4000040) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x10001, 0x100) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000002c0)) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x454, 0x3f3, 0x800, 0x70bd2d, 0x25dfdbfe, {0x4, 0x2, 0x2, [0x20, 0xab04, 0x5, 0x8, 0x1, 0x2d83, 0x6f, 0xf9, 0xcf, 0x5, 0x4, 0x69, 0x9, 0x29e, 0xa28d, 0x2, 0x40, 0x7, 0xffff, 0xfff, 0x10000, 0x5a, 0xfffeffff, 0x20, 0x8, 0x80000001, 0x7f, 0x709e, 0x6, 0x3f, 0x3, 0x3ff, 0x10000, 0x80000000, 0xffffffff, 0x3, 0x67, 0x6, 0x80000000, 0x7, 0x56d7, 0x9, 0x5, 0x3, 0x3, 0x400, 0x6f9, 0x3, 0x7, 0x9, 0x8, 0x45, 0x8, 0x5, 0x2, 0x7fffffff, 0x49d6, 0x2, 0x1000, 0x7, 0x4, 0x4, 0x1, 0x80000000], [0xaef, 0x9da, 0x401, 0xf35, 0x3ff, 0x5, 0x1000, 0x1, 0x66f, 0x7, 0x7, 0x2, 0x4, 0x9, 0xd9, 0x7, 0x1, 0x101, 0x1, 0x401, 0x0, 0xf8, 0x80, 0x4, 0x4, 0x0, 0x9, 0x40, 0xfa, 0xc0000000, 0x9, 0x5d78f63b, 0x100, 0x0, 0xffffffff, 0x5, 0x400, 0x3, 0xfffff001, 0x200, 0x1, 0x6, 0x2, 0x81, 0xfff, 0x10000, 0x6, 0x8000, 0x0, 0x6, 0x80000000, 0x1, 0xa3d, 0x4, 0x43120c67, 0x94, 0xf44, 0x2, 0xfff, 0x401, 0x4, 0x200, 0xa8, 0x1f], [0x2, 0x0, 0xffff, 0x40, 0x1f, 0x0, 0x100, 0x400, 0x9, 0x7, 0xffffffff, 0x6, 0x2, 0x7a, 0xffffffff, 0x3, 0x3, 0x7, 0x0, 0x0, 0x8628, 0x2, 0x3ff, 0x0, 0xa7, 0x20, 0x3, 0xc01, 0x0, 0x73e4613c, 0x6, 0x3, 0x2, 0xffff0000, 0x9, 0x0, 0x85, 0x3, 0x61, 0x5, 0x6, 0x1, 0x800, 0x7, 0x8, 0x5, 0x8, 0x5, 0xfffff8ce, 0x4c59863b, 0x68, 0x4, 0x1, 0x3, 0x2, 0x7, 0x4, 0x8, 0x1, 0x7, 0x2, 0x28, 0x9, 0x10001], [0xffffff80, 0xbd92, 0x200, 0xfffffffb, 0x4, 0x2, 0x3, 0x3, 0x4, 0x3ff, 0x2, 0x4, 0x2, 0x4, 0x1f, 0x80000000, 0x269, 0xa1, 0x3, 0xfffffffd, 0xfffffffa, 0x1, 0x3, 0x7, 0x4, 0x3, 0x8e7, 0x60000, 0x9, 0x7, 0x5, 0x4, 0x3, 0x800, 0x7f, 0x2, 0x3d46, 0x1, 0x2, 0x4, 0x4, 0xfffffe00, 0x9, 0x2, 0x5, 0x9, 0xffffffff, 0x1f, 0x0, 0x8763, 0x3, 0x2, 0x8, 0x7ff, 0x6, 0x299, 0x8, 0x8, 0x400000, 0xff, 0x8, 0x7, 0x71, 0x8], 0x31, ['\'@+,]!:\x88\x00', '{-\\*\xcf-$.\'&!&$Q\x00', ',!!^%^\x00', '#\xd6$>]%[\x00', '/dev/full\x00']}, ["", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x18, 0x3f9, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1}, ["", ""]}, 0x18}}, 0x55bdc2f19b162e82) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000940)=0x2) r4 = syz_open_dev$loop(&(0x7f0000000980), 0x0, 0x400080) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f00000009c0)) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000a00)={0x1, 0x100, 0x4, 0x5, 0x6, 0x5}) sendmsg$AUDIT_USER(r2, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000a0}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xc8, 0x3ed, 0x400, 0x70bd26, 0x25dfdbfd, "46318d366404ec05c18544c55256947a4f949797496b41369de0ca9e3b15e0da916b6db1244bef7edf8a763fe492ee2eb687d64c2695e3f4e4b3c53a055d3e567e84b6521e28839aee0e6a644a4863d0a58ee6750fd224b8983a0b015bf3b3a387280728dcae9dead15aef20c2c3f9f97733d64fc04146ad5ef20e5358d00ba37933bed5b4cfdd4d1b71fca4932a81f5630e5ebe0fbd8cfaa8c6f9c85e33046cf49cf40a2f3de37991b4cc0b883857259afa627233985f", ["", "", "", "", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x44) syz_genetlink_get_family_id$team(&(0x7f0000000c00), r2) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000cc0)=0x800, 0x4) [ 193.912758] loop2: detected capacity change from 0 to 16383 21:45:45 executing program 4: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r0, 0x42, 0x55de}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) r1 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xcf, 0x2, &(0x7f0000000340)=[{&(0x7f0000000200)="0746c068f53a99a3db571c9b8ca5c316eb1b4e9fda13db206f90fbcfcc592b09aaaa417059e993b947353b17ededa614c86e6cced1c9730f071ffcc3837b63306fc9ce43c2d62726f1f12d965c432e7e5fb9352d44643a62153b3d05ed97a3400d70d2354664019a", 0x68, 0x1}, {&(0x7f0000000280)="d7ff36ccc148c5b30ef2225eaba070088b3844b5b46a4cbe788db13d0224e25429d7ed502eb21b5ff85292eca9b2ebf4b6e5fd151a8451dea4574c7046bad6d5e51e870da87f48766d26a4f1f527922ae91dbec231a1dc74c478d739a13f22e017adc09a2f66b1302c1d0e661a0ffe45fea322e1bf67cbe525b9ed631b08e85b67f8cdb9658a929c8ab7f71cb9", 0x8d, 0x3f}], 0x1100002, &(0x7f0000000380)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}], [{@subj_user={'subj_user', 0x3d, '\'.'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_lt}, {@permit_directio}, {@euid_lt={'euid<', 0xee01}}, {@euid_lt}, {@euid_lt={'euid<', 0xee01}}, {@seclabel}]}) mknodat(r1, &(0x7f0000000480)='./file0\x00', 0x1, 0xf89e) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0x0, @fixed}, &(0x7f0000000500)=0xe, 0x80000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x1, 0x7ff, 0x0, 0xffffffffffffffff, 0x4, 0x55}, {0x9, 0x4884, 0x7fffffff, 0x10000, 0x200, 0x7f}], ['\x00', '\x00', '\x00', '\x00']}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000700)=0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000740)={0x2, [0x0, 0x0]}) bind$bt_l2cap(r2, &(0x7f0000000780)={0x1f, 0x8, @none, 0x3, 0x1}, 0xe) open$dir(&(0x7f00000007c0)='./file0\x00', 0x44100, 0x4) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000840)={0x430, 0x3f3, 0x10, 0x70bd29, 0x25dfdbfd, {0x2, 0x1, 0x2d, [0xffff9734, 0x206c, 0xef, 0xfffffffa, 0x5, 0x1f, 0xfffffffc, 0x0, 0x400, 0x7fff, 0x4, 0xfffffde2, 0x100, 0x1, 0x9, 0xfffffff7, 0x5, 0xffffffff, 0x100, 0x5, 0x3, 0x3, 0x3, 0x6, 0x5, 0x9, 0x8, 0x0, 0xab2d, 0x66b9, 0x200, 0x1ff, 0x4, 0x100, 0x9, 0x2, 0x9, 0xcd, 0x2, 0x4ce, 0xf5, 0x96, 0x80, 0x6, 0x3, 0x81, 0xc757, 0x401, 0x1, 0x3, 0x300000, 0x9, 0x4, 0xffffffc0, 0xeb2, 0x3, 0x1, 0xc1a6, 0x2, 0x1ad1, 0x6, 0x1000, 0x8001, 0x6], [0x2, 0x8000000, 0xffff, 0x4, 0x4b59, 0x8000, 0x7fffffff, 0x40, 0x4, 0x2, 0x1, 0x421, 0x8, 0x20, 0x0, 0x5, 0x81, 0x8, 0x7, 0x6, 0x8022, 0x80000001, 0x3, 0x9, 0x7, 0x4, 0x3, 0x4, 0x9, 0x81, 0x8, 0x9, 0x9, 0x80000001, 0x2, 0x2, 0x0, 0x8, 0x1, 0x1, 0x0, 0x101, 0x8001, 0x7, 0x1, 0x0, 0x7ff, 0x0, 0x20, 0x7ff, 0x7, 0x3ff, 0x7, 0x0, 0x10001, 0x20, 0x0, 0x1, 0x7ff, 0x8, 0x81, 0xfffffff9, 0x5, 0x4], [0x80000000, 0x100, 0x7ff, 0x6, 0x8, 0xe9, 0xfffffff7, 0x4, 0x8000, 0x0, 0x8000, 0x9, 0x6, 0xffff, 0x7, 0x4970d28, 0x3b, 0x6, 0x9, 0x1, 0x4, 0x8, 0x37, 0x5, 0x80000000, 0x101, 0x2, 0x4, 0x71ca, 0x7, 0x0, 0x7, 0x3ff, 0x5527, 0x3, 0x1, 0x101, 0x3f, 0x4, 0x1, 0x8000000, 0x7fffffff, 0x7, 0x1, 0x5ee, 0x9, 0x0, 0x4, 0x5, 0xab, 0x800, 0x8000, 0x47, 0x7, 0x800, 0x0, 0x4, 0x0, 0x80, 0x2, 0x1, 0x4, 0xf6, 0x2], [0x200, 0x1, 0x20, 0x7fce, 0xa5, 0xfffffffa, 0x20, 0x86, 0x2, 0x88, 0x1, 0x1, 0x800, 0x100, 0xf3a0, 0x75, 0xcf, 0x4, 0x8, 0x200, 0xfffffbff, 0xf992, 0x4, 0x8, 0x3, 0xab58, 0x6, 0x7ff, 0xb7b5, 0x3, 0x880, 0x8, 0x6, 0x77f, 0x4, 0x656, 0x8, 0x101, 0x6, 0x66, 0x2, 0x0, 0x7, 0xe3e1, 0x9, 0x269, 0x1f, 0x80000000, 0x8001, 0x5bd, 0xfffffeff, 0x6, 0x80000000, 0xe7af, 0x40, 0x2, 0x400, 0xb063, 0x8000, 0x7, 0x7fff, 0x7ff], 0xf, [':.:\x00', 'context', '):\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x800}, 0x40480c0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7b0e272b, 0x2, 0x4, 0x8001, 0x8, 0x6}, {0x2, 0x6, 0x753ba2f, 0x2, 0x4, 0x7ff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000800) VM DIAGNOSIS: 21:45:40 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802c88a438 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff86cd4959 RBP=ffff88802c88a459 RSP=ffff88803475f890 R8 =0000000000000000 R9 =dffffc0000000000 R10=fffffbfff0d9a6f8 R11=0000000000000001 R12=ffff88802c889ac0 R13=ffff88802c88a488 R14=0000000000000000 R15=0000000000000002 RIP=ffffffff8129b78e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556e22400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d7a4b7f648 CR3=000000001882e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff413781ac0 CR3=000000000f46a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 41563ce000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000