Warning: Permanently added '[localhost]:34721' (ECDSA) to the list of known hosts. 2022/10/02 05:14:33 fuzzer started 2022/10/02 05:14:33 dialing manager at localhost:35095 syzkaller login: [ 42.090382] cgroup: Unknown subsys name 'net' [ 42.206403] cgroup: Unknown subsys name 'rlimit' 2022/10/02 05:14:47 syscalls: 203 2022/10/02 05:14:47 code coverage: enabled 2022/10/02 05:14:47 comparison tracing: enabled 2022/10/02 05:14:47 extra coverage: enabled 2022/10/02 05:14:47 setuid sandbox: enabled 2022/10/02 05:14:47 namespace sandbox: enabled 2022/10/02 05:14:47 Android sandbox: enabled 2022/10/02 05:14:47 fault injection: enabled 2022/10/02 05:14:47 leak checking: enabled 2022/10/02 05:14:47 net packet injection: enabled 2022/10/02 05:14:47 net device setup: enabled 2022/10/02 05:14:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 05:14:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 05:14:47 USB emulation: enabled 2022/10/02 05:14:47 hci packet injection: enabled 2022/10/02 05:14:47 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 05:14:47 802.15.4 emulation: enabled 2022/10/02 05:14:47 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 05:14:48 starting 8 fuzzer processes 05:14:48 executing program 0: r0 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcd61}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffc01}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x39}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3}, 0x800) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x88000, 0x12d, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) waitid$P_PIDFD(0x3, r1, &(0x7f0000000380), 0x1, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000500), 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x101240, 0x2, 0x7}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x400840, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x40011) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x1a1602, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5, {0x7f4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000900)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0/file0\x00'}) utimensat(r9, &(0x7f0000000940)='./file0\x00', &(0x7f00000009c0)={{0x0, 0x2710}}, 0x0) 05:14:48 executing program 1: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/243) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r0 = msgget$private(0x0, 0x624) msgsnd(r0, &(0x7f0000000100)={0x3, "9654f9e8fb55b511ee8f36710d45d2fd6b9b0ba0593e9bf0bd579f889fb4143cde1ecedcc04b4e8aac868ee50ce25d0f294e7858529ccd69b9637ce5a488a1a06f930e10c7c7776fc1ec1d1ec76c0badb95e5527c210dd5530820521c40dec17c73fb2c558e6e8"}, 0x6f, 0x800) r1 = msgget(0x2, 0x214) msgrcv(r1, &(0x7f0000000180)={0x0, ""/240}, 0xf8, 0x0, 0x2000) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/107) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000300)=""/4096) msgsnd(r0, &(0x7f0000001300)={0x0, "d46fb9e45622f203694c2c3f5d6ce0b7a99a70194dd49bf2e5c9c2919ad1bc2c7dad2b691c000d2e52a759656edd8edf23d878f8b6d70e1c424efd60a3aa9c27b03fcd595989e252c6847f9d9e6546af56d708a4c61fa51fc480b50447d5640536afa29ef790cca0aa519ecdc9ec778a133d6bb992b9ae252f8900362de26af6fea0dd0d36cebf1e94339d84af0d2b9e8a23ce57cef9c610695fbe23212ef39f39cdbf8157f33b2fd7ec4c9bebbbc51598a967f52dec83809de8ff3fdd0bb0b5d70be1b40f74e01cd66c535e8c64e7ca78c35a4b1e601963"}, 0xe0, 0x800) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001400)=""/255) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001500)=""/152) msgrcv(r0, &(0x7f00000015c0)={0x0, ""/230}, 0xee, 0x3, 0x800) syz_io_uring_setup(0x7c91, &(0x7f00000016c0)={0x0, 0x41b3, 0x0, 0x0, 0x283}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001740), &(0x7f0000001780)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000017c0)=@IORING_OP_NOP={0x0, 0x5}, 0x9) r3 = msgget$private(0x0, 0x4) msgrcv(r3, &(0x7f0000001800)={0x0, ""/56}, 0x40, 0x1, 0x1000) msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000001840)=""/37) r4 = socket(0x2b, 0x5, 0x200) sendmsg$NFT_BATCH(r4, &(0x7f0000002000)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001d80)={{0x14}, [@NFT_MSG_DELCHAIN={0xb8, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x445a}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6bf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ef3d148}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x18494f55}]}]}, @NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb284}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x85}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}], {0x14}}, 0x228}, 0x1, 0x0, 0x0, 0xc800}, 0x804) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000002040)=""/132) 05:14:48 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x442, 0x23, 0x18}, 0x18) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3, 0x40}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x20}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9ea}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x7fffffff, 0x81}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) getpeername(r3, &(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x80) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) accept4(r5, &(0x7f0000000a80)=@qipcrtr, &(0x7f0000000b00)=0x80, 0x800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r11 = accept(r7, &(0x7f0000000b80)=@ax25={{0x3, @bcast}, [@netrom, @default, @bcast, @remote, @remote, @null, @bcast, @default]}, &(0x7f0000000c00)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000d00)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000d80)={0x0, @l2={0x1f, 0x6, @any, 0x8}, @can={0x1d, r12}, @llc={0x1a, 0x5, 0x0, 0x2, 0x1, 0xf8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x7, 0x0, 0x0, 0x0, 0xd047, &(0x7f0000000d40)='geneve0\x00', 0xfffffffffffffc00, 0x600000000000, 0x101}) syz_io_uring_setup(0x4e4d, &(0x7f0000000e00)={0x0, 0xe858, 0x4, 0x1, 0x9b, 0x0, r10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)) syz_io_uring_submit(r13, 0x0, &(0x7f0000000f80)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, &(0x7f0000000f00)={0x20000000}, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x2) 05:14:48 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5320}, 0x1}, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r8, 0x0, 0xfffffe00, &(0x7f0000000540)="f4edcf44f16e26de843d36224aaa3c0e4566e0e3b609b976e4f789fe5a108645fa578149ead8ed00ac3b5f3fe28fdb926eed0ff3a8ca65", 0x37) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r10 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) [ 56.696224] audit: type=1400 audit(1664687689.017:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:14:49 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) recvmmsg(r1, &(0x7f0000008f00)=[{{&(0x7f0000000200)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/111, 0x6f}], 0x1, &(0x7f0000000340)=""/220, 0xdc}, 0x6}, {{&(0x7f0000000440)=@x25={0x9, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000700)=""/179, 0xb3}], 0x4, &(0x7f0000000800)=""/71, 0x47}, 0x4}, {{&(0x7f0000000880)=@l2tp, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000900)=""/20, 0x14}, {&(0x7f0000000940)=""/78, 0x4e}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/92, 0x5c}, {&(0x7f0000000b40)=""/150, 0x96}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/117, 0x75}, {&(0x7f0000001c80)=""/172, 0xac}], 0x8}, 0x4}, {{&(0x7f0000001dc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001e40)=""/145, 0x91}, {&(0x7f0000001f00)=""/251, 0xfb}, {&(0x7f0000002000)=""/131, 0x83}, {&(0x7f00000020c0)=""/18, 0x12}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/214, 0xd6}, {&(0x7f0000002240)=""/186, 0xba}], 0x7, &(0x7f0000002380)=""/249, 0xf9}, 0x5}, {{&(0x7f0000002480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/51, 0x33}, {&(0x7f0000004540)=""/69, 0x45}, {&(0x7f00000045c0)=""/163, 0xa3}, {&(0x7f0000004680)=""/34, 0x22}], 0x6, &(0x7f0000004740)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005740)=@nfc, 0x80, &(0x7f0000006c80)=[{&(0x7f00000057c0)=""/213, 0xd5}, {&(0x7f00000058c0)=""/234, 0xea}, {&(0x7f00000059c0)=""/80, 0x50}, {&(0x7f0000005a40)=""/196, 0xc4}, {&(0x7f0000005b40)=""/174, 0xae}, {&(0x7f0000005c00)=""/115, 0x73}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x7, &(0x7f0000006d00)=""/210, 0xd2}, 0x2}, {{&(0x7f0000006e00)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000007080)=[{&(0x7f0000006e80)=""/251, 0xfb}, {&(0x7f0000006f80)=""/93, 0x5d}, {&(0x7f0000007000)=""/85, 0x55}], 0x3, &(0x7f00000070c0)=""/72, 0x48}, 0x9}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000007140)=""/240, 0xf0}, {&(0x7f0000007240)=""/143, 0x8f}, {&(0x7f0000007300)=""/67, 0x43}], 0x3, &(0x7f00000073c0)=""/238, 0xee}, 0x9}, {{&(0x7f00000074c0)=@isdn, 0x80, &(0x7f0000007980)=[{&(0x7f0000007540)=""/182, 0xb6}, {&(0x7f0000007600)=""/236, 0xec}, {&(0x7f0000007700)=""/12, 0xc}, {&(0x7f0000007740)=""/78, 0x4e}, {&(0x7f00000077c0)=""/206, 0xce}, {&(0x7f00000078c0)=""/42, 0x2a}, {&(0x7f0000007900)=""/99, 0x63}], 0x7}, 0x5}, {{&(0x7f0000007a00)=@nfc_llcp, 0x80, &(0x7f0000007e80)=[{&(0x7f0000007a80)=""/92, 0x5c}, {&(0x7f0000007b00)=""/164, 0xa4}, {&(0x7f0000007bc0)=""/24, 0x18}, {&(0x7f0000007c00)=""/36, 0x24}, {&(0x7f0000007c40)=""/121, 0x79}, {&(0x7f0000007cc0)=""/19, 0x13}, {&(0x7f0000007d00)=""/173, 0xad}, {&(0x7f0000007dc0)=""/151, 0x97}], 0x8, &(0x7f0000007f00)=""/4096, 0x1000}, 0x1}], 0xa, 0x60, &(0x7f0000009180)) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000009280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000009240)={&(0x7f00000091c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008040}, 0x893) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000009380)={&(0x7f00000092c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000009340)={&(0x7f0000009300)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000093c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = accept4(r6, 0x0, &(0x7f0000009400), 0x80000) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000009440)={'veth1_to_hsr\x00', @ifru_addrs=@generic}) getsockname(r7, &(0x7f0000009480)=@caif=@dbg, &(0x7f0000009500)=0x80) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000009640)={&(0x7f0000009540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000009600)={&(0x7f0000009580)={0x54, 0x1, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x40) getpeername(r6, &(0x7f0000009680)=@qipcrtr, &(0x7f0000009700)=0x80) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000009780), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000009880)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000009980)={&(0x7f0000009740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000009940)={&(0x7f00000098c0)={0x64, r8, 0x118, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40850}, 0x4000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000009a80)={&(0x7f00000099c0)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000009a40)={&(0x7f0000009a00)={0x24, r8, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x33}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000009ac0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000009b40)={{0x1, 0x1, 0x18}, './file0\x00'}) 05:14:49 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) faccessat2(r1, &(0x7f00000001c0)='./file1\x00', 0xb1, 0x200) write$tcp_congestion(r0, &(0x7f0000000200)='hybla\x00', 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x0, 0x80000001, 0x368d]}, &(0x7f0000000340)=0x44) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x40}}, './file1\x00'}) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000440), 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) faccessat(r2, &(0x7f00000004c0)='./file1/file0\x00', 0x68) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xfffffffa}}, './file1\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000540), 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000580)={0x1, 'wg1\x00', {}, 0x40}) pidfd_getfd(0xffffffffffffffff, r3, 0x0) 05:14:49 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008045}, 0x4810) r3 = accept4(r1, &(0x7f0000000200)=@ax25={{0x3, @null}, [@remote, @bcast, @rose, @netrom, @default, @default, @remote, @rose]}, &(0x7f0000000280)=0x80, 0x800) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r3) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x76}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004854}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000002740)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7a}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xb0a0a6acb183c9fb}, 0x8000) mknodat$loop(r1, &(0x7f00000028c0)='./file0\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002900)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendmsg$NFT_BATCH(r9, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={{0x14}, [@NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x1) 05:14:49 executing program 7: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/4096) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000001000)={0xfe, "bd55af36fb3bd09b36c8d15889cbe1b143da6e7647e117b541c71e95b34e2a8d8c1e3e8c2225f7cc942b033e66550f9c712416aba056f61d067eb84cdec43449"}) getsockname(0xffffffffffffffff, &(0x7f0000001080)=@alg, &(0x7f0000001100)=0x80) write$hidraw(0xffffffffffffffff, &(0x7f0000001140)="6b8d8602e2d4f6751fe52db1b4718609595705902ebe55d662dc32c6b9124e37f32b4a8f76e88db5dbf1980f4e55b0ab59e57cd423a6875c997c31cb9ce22d317d7fa7f9d3161f3b262fb8ccbb75bc7e71c430caeb74d383dc9c49bc4c4de07d4d868d29d77ccfb3ad2e1677cf325b6ecded86b85e6922421f06d1cc83d02f4698c65fbc131efff8c2870cfa9a4fdc875daefe9fe4ec792beeda5f9ca5feee85851b", 0xa2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)) r1 = accept(r0, &(0x7f0000001280)=@alg, &(0x7f0000001300)=0x80) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4040) r2 = socket(0x29, 0xa3db1203c8e3f401, 0x2) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000001c40)=0x4, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) accept(r0, 0x0, &(0x7f0000001cc0)) mknodat$loop(r4, &(0x7f0000001d00)='./file0/file0\x00', 0x20, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r3, {0x400, 0x8}}, './file0/file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x30) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002080)) [ 58.070603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.072344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.074074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.075524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.078431] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.080876] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.082186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.087328] Bluetooth: hci1: HCI_REQ-0x0c1a [ 58.094056] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.100056] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.109899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.111453] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.121095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.135453] Bluetooth: hci0: HCI_REQ-0x0c1a [ 58.161380] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.161834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.165470] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.167351] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 58.169305] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 58.170659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.172828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.172920] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.175396] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 58.177012] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.178399] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.179755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.182067] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 58.186439] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 58.195513] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 58.196964] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 58.199151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.200249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 58.202324] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 58.203877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 58.204996] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.206235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 58.207867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.212975] Bluetooth: hci7: HCI_REQ-0x0c1a [ 58.213914] Bluetooth: hci3: HCI_REQ-0x0c1a [ 58.213969] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.218267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 58.234292] Bluetooth: hci6: HCI_REQ-0x0c1a [ 58.234515] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 58.237276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 58.242603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.245142] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.246370] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.249672] Bluetooth: hci5: HCI_REQ-0x0c1a [ 58.281678] Bluetooth: hci4: HCI_REQ-0x0c1a [ 60.150013] Bluetooth: hci1: command 0x0409 tx timeout [ 60.150046] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 60.151153] Bluetooth: hci0: command 0x0409 tx timeout [ 60.277673] Bluetooth: hci3: command 0x0409 tx timeout [ 60.278809] Bluetooth: hci6: command 0x0409 tx timeout [ 60.280176] Bluetooth: hci7: command 0x0409 tx timeout [ 60.341707] Bluetooth: hci4: command 0x0409 tx timeout [ 60.342702] Bluetooth: hci5: command 0x0409 tx timeout [ 62.197718] Bluetooth: hci0: command 0x041b tx timeout [ 62.198682] Bluetooth: hci1: command 0x041b tx timeout [ 62.325777] Bluetooth: hci7: command 0x041b tx timeout [ 62.326548] Bluetooth: hci6: command 0x041b tx timeout [ 62.327342] Bluetooth: hci3: command 0x041b tx timeout [ 62.389669] Bluetooth: hci5: command 0x041b tx timeout [ 62.389735] Bluetooth: hci4: command 0x041b tx timeout [ 63.023280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.035916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.039307] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.042839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.047738] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.048592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.051319] Bluetooth: hci2: HCI_REQ-0x0c1a [ 64.246638] Bluetooth: hci1: command 0x040f tx timeout [ 64.247128] Bluetooth: hci0: command 0x040f tx timeout [ 64.373627] Bluetooth: hci3: command 0x040f tx timeout [ 64.374106] Bluetooth: hci6: command 0x040f tx timeout [ 64.374502] Bluetooth: hci7: command 0x040f tx timeout [ 64.437613] Bluetooth: hci4: command 0x040f tx timeout [ 64.438621] Bluetooth: hci5: command 0x040f tx timeout [ 65.077629] Bluetooth: hci2: command 0x0409 tx timeout [ 66.293615] Bluetooth: hci0: command 0x0419 tx timeout [ 66.294096] Bluetooth: hci1: command 0x0419 tx timeout [ 66.421636] Bluetooth: hci7: command 0x0419 tx timeout [ 66.422112] Bluetooth: hci6: command 0x0419 tx timeout [ 66.422531] Bluetooth: hci3: command 0x0419 tx timeout [ 66.485652] Bluetooth: hci5: command 0x0419 tx timeout [ 66.486117] Bluetooth: hci4: command 0x0419 tx timeout [ 67.125785] Bluetooth: hci2: command 0x041b tx timeout [ 69.173675] Bluetooth: hci2: command 0x040f tx timeout [ 71.221671] Bluetooth: hci2: command 0x0419 tx timeout 05:15:44 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5320}, 0x1}, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r8, 0x0, 0xfffffe00, &(0x7f0000000540)="f4edcf44f16e26de843d36224aaa3c0e4566e0e3b609b976e4f789fe5a108645fa578149ead8ed00ac3b5f3fe28fdb926eed0ff3a8ca65", 0x37) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r10 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:15:44 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5320}, 0x1}, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r8, 0x0, 0xfffffe00, &(0x7f0000000540)="f4edcf44f16e26de843d36224aaa3c0e4566e0e3b609b976e4f789fe5a108645fa578149ead8ed00ac3b5f3fe28fdb926eed0ff3a8ca65", 0x37) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r10 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:15:44 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5320}, 0x1}, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r8, 0x0, 0xfffffe00, &(0x7f0000000540)="f4edcf44f16e26de843d36224aaa3c0e4566e0e3b609b976e4f789fe5a108645fa578149ead8ed00ac3b5f3fe28fdb926eed0ff3a8ca65", 0x37) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r10 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:15:44 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5320}, 0x1}, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r8, 0x0, 0xfffffe00, &(0x7f0000000540)="f4edcf44f16e26de843d36224aaa3c0e4566e0e3b609b976e4f789fe5a108645fa578149ead8ed00ac3b5f3fe28fdb926eed0ff3a8ca65", 0x37) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r10 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:15:45 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5320}, 0x1}, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r8, 0x0, 0xfffffe00, &(0x7f0000000540)="f4edcf44f16e26de843d36224aaa3c0e4566e0e3b609b976e4f789fe5a108645fa578149ead8ed00ac3b5f3fe28fdb926eed0ff3a8ca65", 0x37) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:15:45 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5320}, 0x1}, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r8, 0x0, 0xfffffe00, &(0x7f0000000540)="f4edcf44f16e26de843d36224aaa3c0e4566e0e3b609b976e4f789fe5a108645fa578149ead8ed00ac3b5f3fe28fdb926eed0ff3a8ca65", 0x37) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:15:45 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5320}, 0x1}, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r8, 0x0, 0xfffffe00, &(0x7f0000000540)="f4edcf44f16e26de843d36224aaa3c0e4566e0e3b609b976e4f789fe5a108645fa578149ead8ed00ac3b5f3fe28fdb926eed0ff3a8ca65", 0x37) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:15:45 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5320}, 0x1}, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r8, 0x0, 0xfffffe00, &(0x7f0000000540)="f4edcf44f16e26de843d36224aaa3c0e4566e0e3b609b976e4f789fe5a108645fa578149ead8ed00ac3b5f3fe28fdb926eed0ff3a8ca65", 0x37) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) [ 119.431285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.433393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.437028] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.441943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.446163] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.447752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.454964] Bluetooth: hci1: HCI_REQ-0x0c1a [ 119.488228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.491671] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.493345] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.499192] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.506762] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 119.508225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.523671] Bluetooth: hci6: HCI_REQ-0x0c1a [ 121.398597] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 121.462612] Bluetooth: hci1: command 0x0409 tx timeout [ 121.525613] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 121.589626] Bluetooth: hci6: command 0x0409 tx timeout [ 123.510608] Bluetooth: hci1: command 0x041b tx timeout [ 123.577817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.579466] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.580383] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.582876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.585131] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.586018] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.589443] Bluetooth: hci0: HCI_REQ-0x0c1a [ 123.637672] Bluetooth: hci6: command 0x041b tx timeout [ 123.718496] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.720195] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.721159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.725308] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.734729] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.736291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.739014] Bluetooth: hci5: HCI_REQ-0x0c1a [ 125.557614] Bluetooth: hci1: command 0x040f tx timeout [ 125.621681] Bluetooth: hci0: command 0x0409 tx timeout [ 125.685665] Bluetooth: hci6: command 0x040f tx timeout [ 125.749664] Bluetooth: hci5: command 0x0409 tx timeout [ 127.605625] Bluetooth: hci1: command 0x0419 tx timeout [ 127.669617] Bluetooth: hci0: command 0x041b tx timeout [ 127.733621] Bluetooth: hci6: command 0x0419 tx timeout [ 127.797613] Bluetooth: hci5: command 0x041b tx timeout [ 129.718667] Bluetooth: hci0: command 0x040f tx timeout [ 129.845809] Bluetooth: hci5: command 0x040f tx timeout [ 131.765593] Bluetooth: hci0: command 0x0419 tx timeout [ 131.893605] Bluetooth: hci5: command 0x0419 tx timeout 05:16:34 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5320}, 0x1}, 0x9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:16:34 executing program 0: r0 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcd61}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffc01}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x39}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3}, 0x800) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x88000, 0x12d, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) waitid$P_PIDFD(0x3, r1, &(0x7f0000000380), 0x1, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000500), 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x101240, 0x2, 0x7}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x400840, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x40011) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x1a1602, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5, {0x7f4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000900)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0/file0\x00'}) utimensat(r9, &(0x7f0000000940)='./file0\x00', &(0x7f00000009c0)={{0x0, 0x2710}}, 0x0) 05:16:34 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x442, 0x23, 0x18}, 0x18) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3, 0x40}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x20}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9ea}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x7fffffff, 0x81}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) getpeername(r3, &(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x80) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) accept4(r5, &(0x7f0000000a80)=@qipcrtr, &(0x7f0000000b00)=0x80, 0x800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r11 = accept(r7, &(0x7f0000000b80)=@ax25={{0x3, @bcast}, [@netrom, @default, @bcast, @remote, @remote, @null, @bcast, @default]}, &(0x7f0000000c00)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000d00)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000d80)={0x0, @l2={0x1f, 0x6, @any, 0x8}, @can={0x1d, r12}, @llc={0x1a, 0x5, 0x0, 0x2, 0x1, 0xf8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x7, 0x0, 0x0, 0x0, 0xd047, &(0x7f0000000d40)='geneve0\x00', 0xfffffffffffffc00, 0x600000000000, 0x101}) syz_io_uring_setup(0x4e4d, &(0x7f0000000e00)={0x0, 0xe858, 0x4, 0x1, 0x9b, 0x0, r10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)) syz_io_uring_submit(r13, 0x0, &(0x7f0000000f80)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, &(0x7f0000000f00)={0x20000000}, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x2) 05:16:34 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) faccessat2(r1, &(0x7f00000001c0)='./file1\x00', 0xb1, 0x200) write$tcp_congestion(r0, &(0x7f0000000200)='hybla\x00', 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x0, 0x80000001, 0x368d]}, &(0x7f0000000340)=0x44) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x40}}, './file1\x00'}) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000440), 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) faccessat(r2, &(0x7f00000004c0)='./file1/file0\x00', 0x68) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xfffffffa}}, './file1\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000540), 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000580)={0x1, 'wg1\x00', {}, 0x40}) pidfd_getfd(0xffffffffffffffff, r3, 0x0) 05:16:34 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008045}, 0x4810) r3 = accept4(r1, &(0x7f0000000200)=@ax25={{0x3, @null}, [@remote, @bcast, @rose, @netrom, @default, @default, @remote, @rose]}, &(0x7f0000000280)=0x80, 0x800) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r3) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x76}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004854}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000002740)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7a}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xb0a0a6acb183c9fb}, 0x8000) mknodat$loop(r1, &(0x7f00000028c0)='./file0\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002900)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendmsg$NFT_BATCH(r9, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={{0x14}, [@NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x1) 05:16:34 executing program 7: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/4096) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000001000)={0xfe, "bd55af36fb3bd09b36c8d15889cbe1b143da6e7647e117b541c71e95b34e2a8d8c1e3e8c2225f7cc942b033e66550f9c712416aba056f61d067eb84cdec43449"}) getsockname(0xffffffffffffffff, &(0x7f0000001080)=@alg, &(0x7f0000001100)=0x80) write$hidraw(0xffffffffffffffff, &(0x7f0000001140)="6b8d8602e2d4f6751fe52db1b4718609595705902ebe55d662dc32c6b9124e37f32b4a8f76e88db5dbf1980f4e55b0ab59e57cd423a6875c997c31cb9ce22d317d7fa7f9d3161f3b262fb8ccbb75bc7e71c430caeb74d383dc9c49bc4c4de07d4d868d29d77ccfb3ad2e1677cf325b6ecded86b85e6922421f06d1cc83d02f4698c65fbc131efff8c2870cfa9a4fdc875daefe9fe4ec792beeda5f9ca5feee85851b", 0xa2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)) r1 = accept(r0, &(0x7f0000001280)=@alg, &(0x7f0000001300)=0x80) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4040) r2 = socket(0x29, 0xa3db1203c8e3f401, 0x2) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000001c40)=0x4, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) accept(r0, 0x0, &(0x7f0000001cc0)) mknodat$loop(r4, &(0x7f0000001d00)='./file0/file0\x00', 0x20, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r3, {0x400, 0x8}}, './file0/file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x30) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002080)) 05:16:34 executing program 1: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/243) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r0 = msgget$private(0x0, 0x624) msgsnd(r0, &(0x7f0000000100)={0x3, "9654f9e8fb55b511ee8f36710d45d2fd6b9b0ba0593e9bf0bd579f889fb4143cde1ecedcc04b4e8aac868ee50ce25d0f294e7858529ccd69b9637ce5a488a1a06f930e10c7c7776fc1ec1d1ec76c0badb95e5527c210dd5530820521c40dec17c73fb2c558e6e8"}, 0x6f, 0x800) r1 = msgget(0x2, 0x214) msgrcv(r1, &(0x7f0000000180)={0x0, ""/240}, 0xf8, 0x0, 0x2000) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/107) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000300)=""/4096) msgsnd(r0, &(0x7f0000001300)={0x0, "d46fb9e45622f203694c2c3f5d6ce0b7a99a70194dd49bf2e5c9c2919ad1bc2c7dad2b691c000d2e52a759656edd8edf23d878f8b6d70e1c424efd60a3aa9c27b03fcd595989e252c6847f9d9e6546af56d708a4c61fa51fc480b50447d5640536afa29ef790cca0aa519ecdc9ec778a133d6bb992b9ae252f8900362de26af6fea0dd0d36cebf1e94339d84af0d2b9e8a23ce57cef9c610695fbe23212ef39f39cdbf8157f33b2fd7ec4c9bebbbc51598a967f52dec83809de8ff3fdd0bb0b5d70be1b40f74e01cd66c535e8c64e7ca78c35a4b1e601963"}, 0xe0, 0x800) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001400)=""/255) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001500)=""/152) msgrcv(r0, &(0x7f00000015c0)={0x0, ""/230}, 0xee, 0x3, 0x800) syz_io_uring_setup(0x7c91, &(0x7f00000016c0)={0x0, 0x41b3, 0x0, 0x0, 0x283}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001740), &(0x7f0000001780)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000017c0)=@IORING_OP_NOP={0x0, 0x5}, 0x9) r3 = msgget$private(0x0, 0x4) msgrcv(r3, &(0x7f0000001800)={0x0, ""/56}, 0x40, 0x1, 0x1000) msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000001840)=""/37) r4 = socket(0x2b, 0x5, 0x200) sendmsg$NFT_BATCH(r4, &(0x7f0000002000)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001d80)={{0x14}, [@NFT_MSG_DELCHAIN={0xb8, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x445a}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6bf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ef3d148}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x18494f55}]}]}, @NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb284}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x85}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}], {0x14}}, 0x228}, 0x1, 0x0, 0x0, 0xc800}, 0x804) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000002040)=""/132) 05:16:34 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) recvmmsg(r1, &(0x7f0000008f00)=[{{&(0x7f0000000200)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/111, 0x6f}], 0x1, &(0x7f0000000340)=""/220, 0xdc}, 0x6}, {{&(0x7f0000000440)=@x25={0x9, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000700)=""/179, 0xb3}], 0x4, &(0x7f0000000800)=""/71, 0x47}, 0x4}, {{&(0x7f0000000880)=@l2tp, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000900)=""/20, 0x14}, {&(0x7f0000000940)=""/78, 0x4e}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/92, 0x5c}, {&(0x7f0000000b40)=""/150, 0x96}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/117, 0x75}, {&(0x7f0000001c80)=""/172, 0xac}], 0x8}, 0x4}, {{&(0x7f0000001dc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001e40)=""/145, 0x91}, {&(0x7f0000001f00)=""/251, 0xfb}, {&(0x7f0000002000)=""/131, 0x83}, {&(0x7f00000020c0)=""/18, 0x12}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/214, 0xd6}, {&(0x7f0000002240)=""/186, 0xba}], 0x7, &(0x7f0000002380)=""/249, 0xf9}, 0x5}, {{&(0x7f0000002480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/51, 0x33}, {&(0x7f0000004540)=""/69, 0x45}, {&(0x7f00000045c0)=""/163, 0xa3}, {&(0x7f0000004680)=""/34, 0x22}], 0x6, &(0x7f0000004740)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005740)=@nfc, 0x80, &(0x7f0000006c80)=[{&(0x7f00000057c0)=""/213, 0xd5}, {&(0x7f00000058c0)=""/234, 0xea}, {&(0x7f00000059c0)=""/80, 0x50}, {&(0x7f0000005a40)=""/196, 0xc4}, {&(0x7f0000005b40)=""/174, 0xae}, {&(0x7f0000005c00)=""/115, 0x73}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x7, &(0x7f0000006d00)=""/210, 0xd2}, 0x2}, {{&(0x7f0000006e00)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000007080)=[{&(0x7f0000006e80)=""/251, 0xfb}, {&(0x7f0000006f80)=""/93, 0x5d}, {&(0x7f0000007000)=""/85, 0x55}], 0x3, &(0x7f00000070c0)=""/72, 0x48}, 0x9}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000007140)=""/240, 0xf0}, {&(0x7f0000007240)=""/143, 0x8f}, {&(0x7f0000007300)=""/67, 0x43}], 0x3, &(0x7f00000073c0)=""/238, 0xee}, 0x9}, {{&(0x7f00000074c0)=@isdn, 0x80, &(0x7f0000007980)=[{&(0x7f0000007540)=""/182, 0xb6}, {&(0x7f0000007600)=""/236, 0xec}, {&(0x7f0000007700)=""/12, 0xc}, {&(0x7f0000007740)=""/78, 0x4e}, {&(0x7f00000077c0)=""/206, 0xce}, {&(0x7f00000078c0)=""/42, 0x2a}, {&(0x7f0000007900)=""/99, 0x63}], 0x7}, 0x5}, {{&(0x7f0000007a00)=@nfc_llcp, 0x80, &(0x7f0000007e80)=[{&(0x7f0000007a80)=""/92, 0x5c}, {&(0x7f0000007b00)=""/164, 0xa4}, {&(0x7f0000007bc0)=""/24, 0x18}, {&(0x7f0000007c00)=""/36, 0x24}, {&(0x7f0000007c40)=""/121, 0x79}, {&(0x7f0000007cc0)=""/19, 0x13}, {&(0x7f0000007d00)=""/173, 0xad}, {&(0x7f0000007dc0)=""/151, 0x97}], 0x8, &(0x7f0000007f00)=""/4096, 0x1000}, 0x1}], 0xa, 0x60, &(0x7f0000009180)) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000009280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000009240)={&(0x7f00000091c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008040}, 0x893) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000009380)={&(0x7f00000092c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000009340)={&(0x7f0000009300)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000093c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = accept4(r6, 0x0, &(0x7f0000009400), 0x80000) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000009440)={'veth1_to_hsr\x00', @ifru_addrs=@generic}) getsockname(r7, &(0x7f0000009480)=@caif=@dbg, &(0x7f0000009500)=0x80) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000009640)={&(0x7f0000009540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000009600)={&(0x7f0000009580)={0x54, 0x1, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x40) getpeername(r6, &(0x7f0000009680)=@qipcrtr, &(0x7f0000009700)=0x80) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000009780), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000009880)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000009980)={&(0x7f0000009740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000009940)={&(0x7f00000098c0)={0x64, r8, 0x118, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40850}, 0x4000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000009a80)={&(0x7f00000099c0)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000009a40)={&(0x7f0000009a00)={0x24, r8, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x33}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000009ac0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000009b40)={{0x1, 0x1, 0x18}, './file0\x00'}) 05:16:34 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) faccessat2(r1, &(0x7f00000001c0)='./file1\x00', 0xb1, 0x200) write$tcp_congestion(r0, &(0x7f0000000200)='hybla\x00', 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x0, 0x80000001, 0x368d]}, &(0x7f0000000340)=0x44) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x40}}, './file1\x00'}) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000440), 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) faccessat(r2, &(0x7f00000004c0)='./file1/file0\x00', 0x68) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xfffffffa}}, './file1\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000540), 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000580)={0x1, 'wg1\x00', {}, 0x40}) pidfd_getfd(0xffffffffffffffff, r3, 0x0) 05:16:47 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5320}, 0x1}, 0x9) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:16:47 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) faccessat2(r1, &(0x7f00000001c0)='./file1\x00', 0xb1, 0x200) write$tcp_congestion(r0, &(0x7f0000000200)='hybla\x00', 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x0, 0x80000001, 0x368d]}, &(0x7f0000000340)=0x44) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x40}}, './file1\x00'}) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000440), 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) faccessat(r2, &(0x7f00000004c0)='./file1/file0\x00', 0x68) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xfffffffa}}, './file1\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000540), 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000580)={0x1, 'wg1\x00', {}, 0x40}) pidfd_getfd(0xffffffffffffffff, r3, 0x0) 05:16:47 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) recvmmsg(r1, &(0x7f0000008f00)=[{{&(0x7f0000000200)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/111, 0x6f}], 0x1, &(0x7f0000000340)=""/220, 0xdc}, 0x6}, {{&(0x7f0000000440)=@x25={0x9, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000700)=""/179, 0xb3}], 0x4, &(0x7f0000000800)=""/71, 0x47}, 0x4}, {{&(0x7f0000000880)=@l2tp, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000900)=""/20, 0x14}, {&(0x7f0000000940)=""/78, 0x4e}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/92, 0x5c}, {&(0x7f0000000b40)=""/150, 0x96}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/117, 0x75}, {&(0x7f0000001c80)=""/172, 0xac}], 0x8}, 0x4}, {{&(0x7f0000001dc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001e40)=""/145, 0x91}, {&(0x7f0000001f00)=""/251, 0xfb}, {&(0x7f0000002000)=""/131, 0x83}, {&(0x7f00000020c0)=""/18, 0x12}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/214, 0xd6}, {&(0x7f0000002240)=""/186, 0xba}], 0x7, &(0x7f0000002380)=""/249, 0xf9}, 0x5}, {{&(0x7f0000002480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/51, 0x33}, {&(0x7f0000004540)=""/69, 0x45}, {&(0x7f00000045c0)=""/163, 0xa3}, {&(0x7f0000004680)=""/34, 0x22}], 0x6, &(0x7f0000004740)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005740)=@nfc, 0x80, &(0x7f0000006c80)=[{&(0x7f00000057c0)=""/213, 0xd5}, {&(0x7f00000058c0)=""/234, 0xea}, {&(0x7f00000059c0)=""/80, 0x50}, {&(0x7f0000005a40)=""/196, 0xc4}, {&(0x7f0000005b40)=""/174, 0xae}, {&(0x7f0000005c00)=""/115, 0x73}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x7, &(0x7f0000006d00)=""/210, 0xd2}, 0x2}, {{&(0x7f0000006e00)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000007080)=[{&(0x7f0000006e80)=""/251, 0xfb}, {&(0x7f0000006f80)=""/93, 0x5d}, {&(0x7f0000007000)=""/85, 0x55}], 0x3, &(0x7f00000070c0)=""/72, 0x48}, 0x9}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000007140)=""/240, 0xf0}, {&(0x7f0000007240)=""/143, 0x8f}, {&(0x7f0000007300)=""/67, 0x43}], 0x3, &(0x7f00000073c0)=""/238, 0xee}, 0x9}, {{&(0x7f00000074c0)=@isdn, 0x80, &(0x7f0000007980)=[{&(0x7f0000007540)=""/182, 0xb6}, {&(0x7f0000007600)=""/236, 0xec}, {&(0x7f0000007700)=""/12, 0xc}, {&(0x7f0000007740)=""/78, 0x4e}, {&(0x7f00000077c0)=""/206, 0xce}, {&(0x7f00000078c0)=""/42, 0x2a}, {&(0x7f0000007900)=""/99, 0x63}], 0x7}, 0x5}, {{&(0x7f0000007a00)=@nfc_llcp, 0x80, &(0x7f0000007e80)=[{&(0x7f0000007a80)=""/92, 0x5c}, {&(0x7f0000007b00)=""/164, 0xa4}, {&(0x7f0000007bc0)=""/24, 0x18}, {&(0x7f0000007c00)=""/36, 0x24}, {&(0x7f0000007c40)=""/121, 0x79}, {&(0x7f0000007cc0)=""/19, 0x13}, {&(0x7f0000007d00)=""/173, 0xad}, {&(0x7f0000007dc0)=""/151, 0x97}], 0x8, &(0x7f0000007f00)=""/4096, 0x1000}, 0x1}], 0xa, 0x60, &(0x7f0000009180)) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000009280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000009240)={&(0x7f00000091c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008040}, 0x893) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000009380)={&(0x7f00000092c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000009340)={&(0x7f0000009300)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000093c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = accept4(r6, 0x0, &(0x7f0000009400), 0x80000) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000009440)={'veth1_to_hsr\x00', @ifru_addrs=@generic}) getsockname(r7, &(0x7f0000009480)=@caif=@dbg, &(0x7f0000009500)=0x80) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000009640)={&(0x7f0000009540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000009600)={&(0x7f0000009580)={0x54, 0x1, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x40) getpeername(r6, &(0x7f0000009680)=@qipcrtr, &(0x7f0000009700)=0x80) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000009780), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000009880)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000009980)={&(0x7f0000009740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000009940)={&(0x7f00000098c0)={0x64, r8, 0x118, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40850}, 0x4000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000009a80)={&(0x7f00000099c0)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000009a40)={&(0x7f0000009a00)={0x24, r8, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x33}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000009ac0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000009b40)={{0x1, 0x1, 0x18}, './file0\x00'}) 05:16:47 executing program 1: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/243) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r0 = msgget$private(0x0, 0x624) msgsnd(r0, &(0x7f0000000100)={0x3, "9654f9e8fb55b511ee8f36710d45d2fd6b9b0ba0593e9bf0bd579f889fb4143cde1ecedcc04b4e8aac868ee50ce25d0f294e7858529ccd69b9637ce5a488a1a06f930e10c7c7776fc1ec1d1ec76c0badb95e5527c210dd5530820521c40dec17c73fb2c558e6e8"}, 0x6f, 0x800) r1 = msgget(0x2, 0x214) msgrcv(r1, &(0x7f0000000180)={0x0, ""/240}, 0xf8, 0x0, 0x2000) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/107) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000300)=""/4096) msgsnd(r0, &(0x7f0000001300)={0x0, "d46fb9e45622f203694c2c3f5d6ce0b7a99a70194dd49bf2e5c9c2919ad1bc2c7dad2b691c000d2e52a759656edd8edf23d878f8b6d70e1c424efd60a3aa9c27b03fcd595989e252c6847f9d9e6546af56d708a4c61fa51fc480b50447d5640536afa29ef790cca0aa519ecdc9ec778a133d6bb992b9ae252f8900362de26af6fea0dd0d36cebf1e94339d84af0d2b9e8a23ce57cef9c610695fbe23212ef39f39cdbf8157f33b2fd7ec4c9bebbbc51598a967f52dec83809de8ff3fdd0bb0b5d70be1b40f74e01cd66c535e8c64e7ca78c35a4b1e601963"}, 0xe0, 0x800) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001400)=""/255) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001500)=""/152) msgrcv(r0, &(0x7f00000015c0)={0x0, ""/230}, 0xee, 0x3, 0x800) syz_io_uring_setup(0x7c91, &(0x7f00000016c0)={0x0, 0x41b3, 0x0, 0x0, 0x283}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001740), &(0x7f0000001780)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000017c0)=@IORING_OP_NOP={0x0, 0x5}, 0x9) r3 = msgget$private(0x0, 0x4) msgrcv(r3, &(0x7f0000001800)={0x0, ""/56}, 0x40, 0x1, 0x1000) msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000001840)=""/37) r4 = socket(0x2b, 0x5, 0x200) sendmsg$NFT_BATCH(r4, &(0x7f0000002000)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001d80)={{0x14}, [@NFT_MSG_DELCHAIN={0xb8, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x445a}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6bf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ef3d148}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x18494f55}]}]}, @NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb284}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x85}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}], {0x14}}, 0x228}, 0x1, 0x0, 0x0, 0xc800}, 0x804) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000002040)=""/132) 05:16:47 executing program 7: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/4096) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000001000)={0xfe, "bd55af36fb3bd09b36c8d15889cbe1b143da6e7647e117b541c71e95b34e2a8d8c1e3e8c2225f7cc942b033e66550f9c712416aba056f61d067eb84cdec43449"}) getsockname(0xffffffffffffffff, &(0x7f0000001080)=@alg, &(0x7f0000001100)=0x80) write$hidraw(0xffffffffffffffff, &(0x7f0000001140)="6b8d8602e2d4f6751fe52db1b4718609595705902ebe55d662dc32c6b9124e37f32b4a8f76e88db5dbf1980f4e55b0ab59e57cd423a6875c997c31cb9ce22d317d7fa7f9d3161f3b262fb8ccbb75bc7e71c430caeb74d383dc9c49bc4c4de07d4d868d29d77ccfb3ad2e1677cf325b6ecded86b85e6922421f06d1cc83d02f4698c65fbc131efff8c2870cfa9a4fdc875daefe9fe4ec792beeda5f9ca5feee85851b", 0xa2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)) r1 = accept(r0, &(0x7f0000001280)=@alg, &(0x7f0000001300)=0x80) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4040) r2 = socket(0x29, 0xa3db1203c8e3f401, 0x2) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000001c40)=0x4, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) accept(r0, 0x0, &(0x7f0000001cc0)) mknodat$loop(r4, &(0x7f0000001d00)='./file0/file0\x00', 0x20, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r3, {0x400, 0x8}}, './file0/file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x30) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002080)) 05:16:47 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x442, 0x23, 0x18}, 0x18) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3, 0x40}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x20}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9ea}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x7fffffff, 0x81}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) getpeername(r3, &(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x80) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) accept4(r5, &(0x7f0000000a80)=@qipcrtr, &(0x7f0000000b00)=0x80, 0x800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r11 = accept(r7, &(0x7f0000000b80)=@ax25={{0x3, @bcast}, [@netrom, @default, @bcast, @remote, @remote, @null, @bcast, @default]}, &(0x7f0000000c00)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000d00)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000d80)={0x0, @l2={0x1f, 0x6, @any, 0x8}, @can={0x1d, r12}, @llc={0x1a, 0x5, 0x0, 0x2, 0x1, 0xf8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x7, 0x0, 0x0, 0x0, 0xd047, &(0x7f0000000d40)='geneve0\x00', 0xfffffffffffffc00, 0x600000000000, 0x101}) syz_io_uring_setup(0x4e4d, &(0x7f0000000e00)={0x0, 0xe858, 0x4, 0x1, 0x9b, 0x0, r10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)) syz_io_uring_submit(r13, 0x0, &(0x7f0000000f80)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, &(0x7f0000000f00)={0x20000000}, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x2) 05:16:47 executing program 0: r0 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcd61}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffc01}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x39}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3}, 0x800) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x88000, 0x12d, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) waitid$P_PIDFD(0x3, r1, &(0x7f0000000380), 0x1, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000500), 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x101240, 0x2, 0x7}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x400840, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x40011) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x1a1602, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5, {0x7f4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000900)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0/file0\x00'}) utimensat(r9, &(0x7f0000000940)='./file0\x00', &(0x7f00000009c0)={{0x0, 0x2710}}, 0x0) 05:16:47 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008045}, 0x4810) r3 = accept4(r1, &(0x7f0000000200)=@ax25={{0x3, @null}, [@remote, @bcast, @rose, @netrom, @default, @default, @remote, @rose]}, &(0x7f0000000280)=0x80, 0x800) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r3) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x76}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004854}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000002740)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7a}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xb0a0a6acb183c9fb}, 0x8000) mknodat$loop(r1, &(0x7f00000028c0)='./file0\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002900)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendmsg$NFT_BATCH(r9, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={{0x14}, [@NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x1) 05:16:47 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x4846, &(0x7f0000000400)={0x0, 0xf1b0, 0x8, 0x2, 0x1c2, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:16:47 executing program 7: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/4096) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000001000)={0xfe, "bd55af36fb3bd09b36c8d15889cbe1b143da6e7647e117b541c71e95b34e2a8d8c1e3e8c2225f7cc942b033e66550f9c712416aba056f61d067eb84cdec43449"}) getsockname(0xffffffffffffffff, &(0x7f0000001080)=@alg, &(0x7f0000001100)=0x80) write$hidraw(0xffffffffffffffff, &(0x7f0000001140)="6b8d8602e2d4f6751fe52db1b4718609595705902ebe55d662dc32c6b9124e37f32b4a8f76e88db5dbf1980f4e55b0ab59e57cd423a6875c997c31cb9ce22d317d7fa7f9d3161f3b262fb8ccbb75bc7e71c430caeb74d383dc9c49bc4c4de07d4d868d29d77ccfb3ad2e1677cf325b6ecded86b85e6922421f06d1cc83d02f4698c65fbc131efff8c2870cfa9a4fdc875daefe9fe4ec792beeda5f9ca5feee85851b", 0xa2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)) r1 = accept(r0, &(0x7f0000001280)=@alg, &(0x7f0000001300)=0x80) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4040) r2 = socket(0x29, 0xa3db1203c8e3f401, 0x2) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000001c40)=0x4, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) accept(r0, 0x0, &(0x7f0000001cc0)) mknodat$loop(r4, &(0x7f0000001d00)='./file0/file0\x00', 0x20, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r3, {0x400, 0x8}}, './file0/file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x30) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002080)) 05:16:47 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:16:47 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) faccessat2(r1, &(0x7f00000001c0)='./file1\x00', 0xb1, 0x200) write$tcp_congestion(r0, &(0x7f0000000200)='hybla\x00', 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x0, 0x80000001, 0x368d]}, &(0x7f0000000340)=0x44) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x40}}, './file1\x00'}) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000440), 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) faccessat(r2, &(0x7f00000004c0)='./file1/file0\x00', 0x68) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xfffffffa}}, './file1\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000540), 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000580)={0x1, 'wg1\x00', {}, 0x40}) 05:16:47 executing program 7: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/4096) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000001000)={0xfe, "bd55af36fb3bd09b36c8d15889cbe1b143da6e7647e117b541c71e95b34e2a8d8c1e3e8c2225f7cc942b033e66550f9c712416aba056f61d067eb84cdec43449"}) getsockname(0xffffffffffffffff, &(0x7f0000001080)=@alg, &(0x7f0000001100)=0x80) write$hidraw(0xffffffffffffffff, &(0x7f0000001140)="6b8d8602e2d4f6751fe52db1b4718609595705902ebe55d662dc32c6b9124e37f32b4a8f76e88db5dbf1980f4e55b0ab59e57cd423a6875c997c31cb9ce22d317d7fa7f9d3161f3b262fb8ccbb75bc7e71c430caeb74d383dc9c49bc4c4de07d4d868d29d77ccfb3ad2e1677cf325b6ecded86b85e6922421f06d1cc83d02f4698c65fbc131efff8c2870cfa9a4fdc875daefe9fe4ec792beeda5f9ca5feee85851b", 0xa2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)) r1 = accept(r0, &(0x7f0000001280)=@alg, &(0x7f0000001300)=0x80) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4040) r2 = socket(0x29, 0xa3db1203c8e3f401, 0x2) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000001c40)=0x4, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) accept(r0, 0x0, &(0x7f0000001cc0)) mknodat$loop(r4, &(0x7f0000001d00)='./file0/file0\x00', 0x20, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r3, {0x400, 0x8}}, './file0/file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x30) 05:16:47 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x442, 0x23, 0x18}, 0x18) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3, 0x40}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x20}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9ea}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x7fffffff, 0x81}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) getpeername(r3, &(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x80) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) accept4(r5, &(0x7f0000000a80)=@qipcrtr, &(0x7f0000000b00)=0x80, 0x800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r11 = accept(r7, &(0x7f0000000b80)=@ax25={{0x3, @bcast}, [@netrom, @default, @bcast, @remote, @remote, @null, @bcast, @default]}, &(0x7f0000000c00)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000d00)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000d80)={0x0, @l2={0x1f, 0x6, @any, 0x8}, @can={0x1d, r12}, @llc={0x1a, 0x5, 0x0, 0x2, 0x1, 0xf8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x7, 0x0, 0x0, 0x0, 0xd047, &(0x7f0000000d40)='geneve0\x00', 0xfffffffffffffc00, 0x600000000000, 0x101}) syz_io_uring_setup(0x4e4d, &(0x7f0000000e00)={0x0, 0xe858, 0x4, 0x1, 0x9b, 0x0, r10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)) syz_io_uring_submit(r13, 0x0, &(0x7f0000000f80)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, &(0x7f0000000f00)={0x20000000}, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x2) 05:16:47 executing program 0: r0 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcd61}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffc01}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x39}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3}, 0x800) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x88000, 0x12d, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) waitid$P_PIDFD(0x3, r1, &(0x7f0000000380), 0x1, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000500), 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x101240, 0x2, 0x7}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x400840, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x40011) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x1a1602, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5, {0x7f4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000900)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0/file0\x00'}) utimensat(r9, &(0x7f0000000940)='./file0\x00', &(0x7f00000009c0)={{0x0, 0x2710}}, 0x0) 05:16:47 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x3ba1, &(0x7f00000002c0)={0x0, 0xb7ce, 0x1, 0x1, 0x16a, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) [ 183.733773] Bluetooth: hci7: command 0x0406 tx timeout [ 183.734771] Bluetooth: hci3: command 0x0406 tx timeout [ 183.735704] Bluetooth: hci4: command 0x0406 tx timeout [ 185.269689] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 185.270949] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.271896] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.273909] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 185.275514] Call Trace: [ 185.275948] [ 185.276312] __schedule+0x893/0x2470 [ 185.276961] ? io_schedule_timeout+0x150/0x150 [ 185.277742] ? do_raw_spin_lock+0x121/0x260 [ 185.278443] ? rwlock_bug.part.0+0x90/0x90 [ 185.279149] schedule+0xda/0x1b0 [ 185.279723] rescuer_thread+0x851/0xdb0 [ 185.280357] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.281185] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.282047] ? lockdep_hardirqs_on+0x79/0x100 [ 185.282798] ? worker_thread+0x1260/0x1260 [ 185.283474] kthread+0x2ed/0x3a0 [ 185.284065] ? kthread_complete_and_exit+0x40/0x40 [ 185.284878] ret_from_fork+0x22/0x30 [ 185.285504] [ 185.285902] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 185.286934] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.287794] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.289018] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 185.290339] Call Trace: [ 185.290775] [ 185.291135] __schedule+0x893/0x2470 [ 185.291784] ? io_schedule_timeout+0x150/0x150 [ 185.292492] ? do_raw_spin_lock+0x121/0x260 [ 185.293225] ? rwlock_bug.part.0+0x90/0x90 [ 185.293937] schedule+0xda/0x1b0 [ 185.294480] rescuer_thread+0x851/0xdb0 [ 185.295159] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.295999] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.296787] ? lockdep_hardirqs_on+0x79/0x100 [ 185.297475] ? worker_thread+0x1260/0x1260 [ 185.298159] kthread+0x2ed/0x3a0 [ 185.298720] ? kthread_complete_and_exit+0x40/0x40 [ 185.299464] ret_from_fork+0x22/0x30 [ 185.300095] [ 185.300456] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 185.301470] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.302289] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.303440] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 185.304688] Call Trace: [ 185.305080] [ 185.305450] __schedule+0x893/0x2470 [ 185.306074] ? io_schedule_timeout+0x150/0x150 [ 185.306809] ? do_raw_spin_lock+0x121/0x260 [ 185.307466] ? rwlock_bug.part.0+0x90/0x90 [ 185.308159] schedule+0xda/0x1b0 [ 185.308716] rescuer_thread+0x851/0xdb0 [ 185.309333] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.310125] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.310926] ? lockdep_hardirqs_on+0x79/0x100 [ 185.311642] ? worker_thread+0x1260/0x1260 [ 185.312302] kthread+0x2ed/0x3a0 [ 185.312877] ? kthread_complete_and_exit+0x40/0x40 [ 185.313705] ret_from_fork+0x22/0x30 [ 185.314334] [ 185.314722] INFO: task netns:6 blocked for more than 143 seconds. [ 185.315644] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.316470] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.317630] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 185.318857] Call Trace: [ 185.319215] [ 185.319575] __schedule+0x893/0x2470 [ 185.320096] ? io_schedule_timeout+0x150/0x150 [ 185.320754] ? do_raw_spin_lock+0x121/0x260 [ 185.321384] ? rwlock_bug.part.0+0x90/0x90 [ 185.322030] schedule+0xda/0x1b0 [ 185.322512] rescuer_thread+0x851/0xdb0 [ 185.323117] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.323853] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.324578] ? lockdep_hardirqs_on+0x79/0x100 [ 185.325194] ? worker_thread+0x1260/0x1260 [ 185.325842] kthread+0x2ed/0x3a0 [ 185.326314] ? kthread_complete_and_exit+0x40/0x40 [ 185.327027] ret_from_fork+0x22/0x30 [ 185.327603] [ 185.327929] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 185.328837] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.329588] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.330654] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 185.331812] Workqueue: 0x0 (ata_sff) [ 185.332352] Call Trace: [ 185.332762] [ 185.333091] __schedule+0x893/0x2470 [ 185.333710] ? io_schedule_timeout+0x150/0x150 [ 185.334353] ? do_raw_spin_lock+0x121/0x260 [ 185.335015] schedule+0xda/0x1b0 [ 185.335499] worker_thread+0x15f/0x1260 [ 185.336122] ? process_one_work+0x16a0/0x16a0 [ 185.336789] kthread+0x2ed/0x3a0 [ 185.337283] ? kthread_complete_and_exit+0x40/0x40 [ 185.338010] ret_from_fork+0x22/0x30 [ 185.338595] [ 185.338928] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 185.339867] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.340614] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.341720] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 185.343027] Workqueue: 0x0 (kblockd) [ 185.343673] Call Trace: [ 185.344077] [ 185.344437] __schedule+0x893/0x2470 [ 185.345093] ? io_schedule_timeout+0x150/0x150 [ 185.345886] schedule+0xda/0x1b0 [ 185.346436] worker_thread+0x15f/0x1260 [ 185.347129] ? process_one_work+0x16a0/0x16a0 [ 185.347909] kthread+0x2ed/0x3a0 [ 185.348448] ? kthread_complete_and_exit+0x40/0x40 [ 185.349265] ret_from_fork+0x22/0x30 [ 185.349922] [ 185.350296] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 185.351358] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.352199] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.353396] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 185.354713] Call Trace: [ 185.355113] [ 185.355476] __schedule+0x893/0x2470 [ 185.356129] ? io_schedule_timeout+0x150/0x150 [ 185.356873] ? do_raw_spin_lock+0x121/0x260 [ 185.357607] ? rwlock_bug.part.0+0x90/0x90 [ 185.358269] schedule+0xda/0x1b0 [ 185.358837] rescuer_thread+0x851/0xdb0 [ 185.359457] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.360258] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.361059] ? lockdep_hardirqs_on+0x79/0x100 [ 185.361797] ? worker_thread+0x1260/0x1260 [ 185.362452] kthread+0x2ed/0x3a0 [ 185.363040] ? kthread_complete_and_exit+0x40/0x40 [ 185.363856] ret_from_fork+0x22/0x30 [ 185.364483] [ 185.364891] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 185.365991] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.366818] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.368006] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 185.369312] Call Trace: [ 185.369748] [ 185.370112] __schedule+0x893/0x2470 [ 185.370752] ? io_schedule_timeout+0x150/0x150 [ 185.371470] ? mark_held_locks+0x9e/0xe0 [ 185.372141] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.372953] schedule+0xda/0x1b0 [ 185.373782] rcu_tasks_one_gp+0x3db/0xc10 [ 185.374594] rcu_tasks_kthread+0x80/0xa0 [ 185.375287] ? rcu_tasks_postscan+0x10/0x10 [ 185.376061] kthread+0x2ed/0x3a0 [ 185.376676] ? kthread_complete_and_exit+0x40/0x40 [ 185.377592] ret_from_fork+0x22/0x30 [ 185.378243] [ 185.383706] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 185.384968] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.385918] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.387211] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 185.388617] Workqueue: 0x0 (events_highpri) [ 185.389401] Call Trace: [ 185.389825] [ 185.390156] __schedule+0x893/0x2470 [ 185.390741] ? io_schedule_timeout+0x150/0x150 [ 185.391413] schedule+0xda/0x1b0 [ 185.391938] worker_thread+0x15f/0x1260 [ 185.392528] ? process_one_work+0x16a0/0x16a0 [ 185.393216] kthread+0x2ed/0x3a0 [ 185.393736] ? kthread_complete_and_exit+0x40/0x40 [ 185.394437] ret_from_fork+0x22/0x30 [ 185.395027] [ 185.395368] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 185.396328] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.397091] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.398173] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 185.399343] Call Trace: [ 185.399749] [ 185.400083] __schedule+0x893/0x2470 [ 185.400665] ? io_schedule_timeout+0x150/0x150 [ 185.401319] ? do_raw_spin_lock+0x121/0x260 [ 185.401966] ? rwlock_bug.part.0+0x90/0x90 [ 185.402607] schedule+0xda/0x1b0 [ 185.403104] rescuer_thread+0x851/0xdb0 [ 185.403702] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.404411] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.405141] ? lockdep_hardirqs_on+0x79/0x100 [ 185.405830] ? worker_thread+0x1260/0x1260 [ 185.406429] kthread+0x2ed/0x3a0 [ 185.406949] ? kthread_complete_and_exit+0x40/0x40 [ 185.407674] ret_from_fork+0x22/0x30 [ 185.408228] [ 185.408654] [ 185.408654] Showing all locks held in the system: [ 185.409524] 1 lock held by rcu_tasks_kthre/11: [ 185.410184] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 185.411567] 1 lock held by khungtaskd/25: [ 185.412132] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 185.413424] 1 lock held by in:imklog/198: [ 185.414029] 4 locks held by syz-executor/5919: [ 185.414694] [ 185.414942] ============================================= [ 185.414942] 05:16:59 executing program 1: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/243) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r0 = msgget$private(0x0, 0x624) msgsnd(r0, &(0x7f0000000100)={0x3, "9654f9e8fb55b511ee8f36710d45d2fd6b9b0ba0593e9bf0bd579f889fb4143cde1ecedcc04b4e8aac868ee50ce25d0f294e7858529ccd69b9637ce5a488a1a06f930e10c7c7776fc1ec1d1ec76c0badb95e5527c210dd5530820521c40dec17c73fb2c558e6e8"}, 0x6f, 0x800) r1 = msgget(0x2, 0x214) msgrcv(r1, &(0x7f0000000180)={0x0, ""/240}, 0xf8, 0x0, 0x2000) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/107) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000300)=""/4096) msgsnd(r0, &(0x7f0000001300)={0x0, "d46fb9e45622f203694c2c3f5d6ce0b7a99a70194dd49bf2e5c9c2919ad1bc2c7dad2b691c000d2e52a759656edd8edf23d878f8b6d70e1c424efd60a3aa9c27b03fcd595989e252c6847f9d9e6546af56d708a4c61fa51fc480b50447d5640536afa29ef790cca0aa519ecdc9ec778a133d6bb992b9ae252f8900362de26af6fea0dd0d36cebf1e94339d84af0d2b9e8a23ce57cef9c610695fbe23212ef39f39cdbf8157f33b2fd7ec4c9bebbbc51598a967f52dec83809de8ff3fdd0bb0b5d70be1b40f74e01cd66c535e8c64e7ca78c35a4b1e601963"}, 0xe0, 0x800) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001400)=""/255) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001500)=""/152) msgrcv(r0, &(0x7f00000015c0)={0x0, ""/230}, 0xee, 0x3, 0x800) syz_io_uring_setup(0x7c91, &(0x7f00000016c0)={0x0, 0x41b3, 0x0, 0x0, 0x283}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001740), &(0x7f0000001780)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000017c0)=@IORING_OP_NOP={0x0, 0x5}, 0x9) r3 = msgget$private(0x0, 0x4) msgrcv(r3, &(0x7f0000001800)={0x0, ""/56}, 0x40, 0x1, 0x1000) msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000001840)=""/37) r4 = socket(0x2b, 0x5, 0x200) sendmsg$NFT_BATCH(r4, &(0x7f0000002000)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001d80)={{0x14}, [@NFT_MSG_DELCHAIN={0xb8, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x445a}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6bf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ef3d148}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x18494f55}]}]}, @NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb284}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x85}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}], {0x14}}, 0x228}, 0x1, 0x0, 0x0, 0xc800}, 0x804) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000002040)=""/132) 05:16:59 executing program 0: r0 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcd61}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffc01}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x39}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3}, 0x800) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x88000, 0x12d, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) waitid$P_PIDFD(0x3, r1, &(0x7f0000000380), 0x1, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000500), 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x101240, 0x2, 0x7}, 0x18) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x400840, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x40011) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x1a1602, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r4, {0x7f4}}, './file0\x00'}) utimensat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', &(0x7f00000009c0)={{0x0, 0x2710}}, 0x0) 05:16:59 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) recvmmsg(r1, &(0x7f0000008f00)=[{{&(0x7f0000000200)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/111, 0x6f}], 0x1, &(0x7f0000000340)=""/220, 0xdc}, 0x6}, {{&(0x7f0000000440)=@x25={0x9, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000700)=""/179, 0xb3}], 0x4, &(0x7f0000000800)=""/71, 0x47}, 0x4}, {{&(0x7f0000000880)=@l2tp, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000900)=""/20, 0x14}, {&(0x7f0000000940)=""/78, 0x4e}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/92, 0x5c}, {&(0x7f0000000b40)=""/150, 0x96}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/117, 0x75}, {&(0x7f0000001c80)=""/172, 0xac}], 0x8}, 0x4}, {{&(0x7f0000001dc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001e40)=""/145, 0x91}, {&(0x7f0000001f00)=""/251, 0xfb}, {&(0x7f0000002000)=""/131, 0x83}, {&(0x7f00000020c0)=""/18, 0x12}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/214, 0xd6}, {&(0x7f0000002240)=""/186, 0xba}], 0x7, &(0x7f0000002380)=""/249, 0xf9}, 0x5}, {{&(0x7f0000002480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/51, 0x33}, {&(0x7f0000004540)=""/69, 0x45}, {&(0x7f00000045c0)=""/163, 0xa3}, {&(0x7f0000004680)=""/34, 0x22}], 0x6, &(0x7f0000004740)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005740)=@nfc, 0x80, &(0x7f0000006c80)=[{&(0x7f00000057c0)=""/213, 0xd5}, {&(0x7f00000058c0)=""/234, 0xea}, {&(0x7f00000059c0)=""/80, 0x50}, {&(0x7f0000005a40)=""/196, 0xc4}, {&(0x7f0000005b40)=""/174, 0xae}, {&(0x7f0000005c00)=""/115, 0x73}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x7, &(0x7f0000006d00)=""/210, 0xd2}, 0x2}, {{&(0x7f0000006e00)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000007080)=[{&(0x7f0000006e80)=""/251, 0xfb}, {&(0x7f0000006f80)=""/93, 0x5d}, {&(0x7f0000007000)=""/85, 0x55}], 0x3, &(0x7f00000070c0)=""/72, 0x48}, 0x9}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000007140)=""/240, 0xf0}, {&(0x7f0000007240)=""/143, 0x8f}, {&(0x7f0000007300)=""/67, 0x43}], 0x3, &(0x7f00000073c0)=""/238, 0xee}, 0x9}, {{&(0x7f00000074c0)=@isdn, 0x80, &(0x7f0000007980)=[{&(0x7f0000007540)=""/182, 0xb6}, {&(0x7f0000007600)=""/236, 0xec}, {&(0x7f0000007700)=""/12, 0xc}, {&(0x7f0000007740)=""/78, 0x4e}, {&(0x7f00000077c0)=""/206, 0xce}, {&(0x7f00000078c0)=""/42, 0x2a}, {&(0x7f0000007900)=""/99, 0x63}], 0x7}, 0x5}, {{&(0x7f0000007a00)=@nfc_llcp, 0x80, &(0x7f0000007e80)=[{&(0x7f0000007a80)=""/92, 0x5c}, {&(0x7f0000007b00)=""/164, 0xa4}, {&(0x7f0000007bc0)=""/24, 0x18}, {&(0x7f0000007c00)=""/36, 0x24}, {&(0x7f0000007c40)=""/121, 0x79}, {&(0x7f0000007cc0)=""/19, 0x13}, {&(0x7f0000007d00)=""/173, 0xad}, {&(0x7f0000007dc0)=""/151, 0x97}], 0x8, &(0x7f0000007f00)=""/4096, 0x1000}, 0x1}], 0xa, 0x60, &(0x7f0000009180)) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000009280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000009240)={&(0x7f00000091c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008040}, 0x893) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000009380)={&(0x7f00000092c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000009340)={&(0x7f0000009300)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000093c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = accept4(r6, 0x0, &(0x7f0000009400), 0x80000) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000009440)={'veth1_to_hsr\x00', @ifru_addrs=@generic}) getsockname(r7, &(0x7f0000009480)=@caif=@dbg, &(0x7f0000009500)=0x80) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000009640)={&(0x7f0000009540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000009600)={&(0x7f0000009580)={0x54, 0x1, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x40) getpeername(r6, &(0x7f0000009680)=@qipcrtr, &(0x7f0000009700)=0x80) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000009780), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000009880)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000009980)={&(0x7f0000009740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000009940)={&(0x7f00000098c0)={0x64, r8, 0x118, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40850}, 0x4000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000009a80)={&(0x7f00000099c0)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000009a40)={&(0x7f0000009a00)={0x24, r8, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x33}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000009ac0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000009b40)={{0x1, 0x1, 0x18}, './file0\x00'}) 05:16:59 executing program 7: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/4096) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000001000)={0xfe, "bd55af36fb3bd09b36c8d15889cbe1b143da6e7647e117b541c71e95b34e2a8d8c1e3e8c2225f7cc942b033e66550f9c712416aba056f61d067eb84cdec43449"}) getsockname(0xffffffffffffffff, &(0x7f0000001080)=@alg, &(0x7f0000001100)=0x80) write$hidraw(0xffffffffffffffff, &(0x7f0000001140)="6b8d8602e2d4f6751fe52db1b4718609595705902ebe55d662dc32c6b9124e37f32b4a8f76e88db5dbf1980f4e55b0ab59e57cd423a6875c997c31cb9ce22d317d7fa7f9d3161f3b262fb8ccbb75bc7e71c430caeb74d383dc9c49bc4c4de07d4d868d29d77ccfb3ad2e1677cf325b6ecded86b85e6922421f06d1cc83d02f4698c65fbc131efff8c2870cfa9a4fdc875daefe9fe4ec792beeda5f9ca5feee85851b", 0xa2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)) r1 = accept(r0, &(0x7f0000001280)=@alg, &(0x7f0000001300)=0x80) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4040) r2 = socket(0x29, 0xa3db1203c8e3f401, 0x2) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000001c40)=0x4, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) accept(r0, 0x0, &(0x7f0000001cc0)) mknodat$loop(r4, &(0x7f0000001d00)='./file0/file0\x00', 0x20, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r3, {0x400, 0x8}}, './file0/file0\x00'}) 05:16:59 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:16:59 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) faccessat2(r1, &(0x7f00000001c0)='./file1\x00', 0xb1, 0x200) write$tcp_congestion(r0, &(0x7f0000000200)='hybla\x00', 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x0, 0x80000001, 0x368d]}, &(0x7f0000000340)=0x44) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x40}}, './file1\x00'}) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000440), 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) faccessat(r2, &(0x7f00000004c0)='./file1/file0\x00', 0x68) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xfffffffa}}, './file1\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000540), 0x10) 05:16:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x442, 0x23, 0x18}, 0x18) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3, 0x40}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x20}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9ea}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x7fffffff, 0x81}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) getpeername(r3, &(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x80) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) accept4(r5, &(0x7f0000000a80)=@qipcrtr, &(0x7f0000000b00)=0x80, 0x800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r10 = accept(r7, &(0x7f0000000b80)=@ax25={{0x3, @bcast}, [@netrom, @default, @bcast, @remote, @remote, @null, @bcast, @default]}, &(0x7f0000000c00)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000d00)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000000d80)={0x0, @l2={0x1f, 0x6, @any, 0x8}, @can={0x1d, r11}, @llc={0x1a, 0x5, 0x0, 0x2, 0x1, 0xf8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x7, 0x0, 0x0, 0x0, 0xd047, &(0x7f0000000d40)='geneve0\x00', 0xfffffffffffffc00, 0x600000000000, 0x101}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f80)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, &(0x7f0000000f00)={0x20000000}, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x2) 05:16:59 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008045}, 0x4810) r3 = accept4(r1, &(0x7f0000000200)=@ax25={{0x3, @null}, [@remote, @bcast, @rose, @netrom, @default, @default, @remote, @rose]}, &(0x7f0000000280)=0x80, 0x800) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r3) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x76}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004854}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000002740)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7a}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xb0a0a6acb183c9fb}, 0x8000) mknodat$loop(r1, &(0x7f00000028c0)='./file0\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002900)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendmsg$NFT_BATCH(r9, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={{0x14}, [@NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x1) 05:16:59 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) faccessat2(r1, &(0x7f00000001c0)='./file1\x00', 0xb1, 0x200) write$tcp_congestion(r0, &(0x7f0000000200)='hybla\x00', 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x0, 0x80000001, 0x368d]}, &(0x7f0000000340)=0x44) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x40}}, './file1\x00'}) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000440), 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) faccessat(r2, &(0x7f00000004c0)='./file1/file0\x00', 0x68) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xfffffffa}}, './file1\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000540), 0x10) 05:16:59 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3603dd10943c8789, 0x2, 0x10000, 0x1, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x420a80, 0x5, 0x10}, 0x18) r2 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000001c0)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x965}}, './file0\x00'}) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700), 0x4) 05:17:00 executing program 7: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/4096) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000001000)={0xfe, "bd55af36fb3bd09b36c8d15889cbe1b143da6e7647e117b541c71e95b34e2a8d8c1e3e8c2225f7cc942b033e66550f9c712416aba056f61d067eb84cdec43449"}) getsockname(0xffffffffffffffff, &(0x7f0000001080)=@alg, &(0x7f0000001100)=0x80) write$hidraw(0xffffffffffffffff, &(0x7f0000001140)="6b8d8602e2d4f6751fe52db1b4718609595705902ebe55d662dc32c6b9124e37f32b4a8f76e88db5dbf1980f4e55b0ab59e57cd423a6875c997c31cb9ce22d317d7fa7f9d3161f3b262fb8ccbb75bc7e71c430caeb74d383dc9c49bc4c4de07d4d868d29d77ccfb3ad2e1677cf325b6ecded86b85e6922421f06d1cc83d02f4698c65fbc131efff8c2870cfa9a4fdc875daefe9fe4ec792beeda5f9ca5feee85851b", 0xa2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)) r1 = accept(r0, &(0x7f0000001280)=@alg, &(0x7f0000001300)=0x80) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4040) r2 = socket(0x29, 0xa3db1203c8e3f401, 0x2) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000001c40)=0x4, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) accept(r0, 0x0, &(0x7f0000001cc0)) mknodat$loop(r4, &(0x7f0000001d00)='./file0/file0\x00', 0x20, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8801) [ 187.830785] Bluetooth: hci2: command 0x0406 tx timeout VM DIAGNOSIS: 05:16:57 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=00000000000002ad RCX=ffffffff8129b8df RDX=fffffbfff0d9a703 RSI=0000000000000008 RDI=ffffffff86cd3810 RBP=0000000000000004 RSP=ffff888037eff830 R8 =0000000000000000 R9 =ffffffff86cd3817 R10=fffffbfff0d9a702 R11=0000000000000001 R12=ffff888032a6d040 R13=0000000000000001 R14=ffff888032a6d9b8 R15=dffffc0000000000 RIP=ffffffff8129b8e7 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556183400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9480300f30 CR3=00000000335de000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 8567689c6a61ca83 6c44ccb42738966f YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 375afdebbf381c81 00000000001230a8 YMM04=0000000000000000 0000000000000000 303811c51ff3e2f7 000000000013a9e0 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 6bafea567957d30c 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f988 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557daed59160 CR3=00000000099f8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 41544b2a00000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000