Warning: Permanently added '[localhost]:55205' (ECDSA) to the list of known hosts. 2022/10/02 16:49:42 fuzzer started 2022/10/02 16:49:42 dialing manager at localhost:35095 syzkaller login: [ 37.226761] cgroup: Unknown subsys name 'net' [ 37.340736] cgroup: Unknown subsys name 'rlimit' 2022/10/02 16:49:57 syscalls: 200 2022/10/02 16:49:57 code coverage: enabled 2022/10/02 16:49:57 comparison tracing: enabled 2022/10/02 16:49:57 extra coverage: enabled 2022/10/02 16:49:57 setuid sandbox: enabled 2022/10/02 16:49:57 namespace sandbox: enabled 2022/10/02 16:49:57 Android sandbox: enabled 2022/10/02 16:49:57 fault injection: enabled 2022/10/02 16:49:57 leak checking: enabled 2022/10/02 16:49:57 net packet injection: enabled 2022/10/02 16:49:57 net device setup: enabled 2022/10/02 16:49:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 16:49:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 16:49:57 USB emulation: enabled 2022/10/02 16:49:57 hci packet injection: enabled 2022/10/02 16:49:57 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 16:49:57 802.15.4 emulation: enabled 2022/10/02 16:49:57 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 16:49:58 starting 8 fuzzer processes 16:49:58 executing program 1: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000180)) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000001c0)=0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x17}}, './file0\x00'}) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000540)={0x53, 0x6, 0xf0, 0xc, @buffer={0x0, 0xe4, &(0x7f0000000280)=""/228}, &(0x7f0000000380)="adda0e800bf37feb10608f25938168c597cefd3a4a227450640265bbe2d8265098f911652aba9a0185174cce48c7082c6e0012548f2919d51caf0a200040e5791d76ca4f88583a66ede7905314c494df60f37284b0029ea1236d47fac756576d97032e1f7a33a8633b927e7bd0c558a0bee4d2d7664b11ad18de0b650a37413e014ae58a328bccb359fa288966c42aa71d88e3821ba26ebe2d797f11133dcf4528a864f4c6abda535cf228824b00add77415e75b05a0eea2f772dc7c11de96b707756c287c233bdb80a016fd19f9b82e65f29ca98af070b0afc68fd764382b2c5f920d2f2e4a0db1f92361b413575632", &(0x7f0000000480)=""/77, 0x80, 0x10, 0x1, &(0x7f0000000500)}) r5 = accept4(r0, &(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000640)=0x80, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000680)=0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3}, './file0/file0\x00'}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000740)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000780)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000980)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r5, {r0}}, './file0/file0\x00'}) 16:49:58 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x80e2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x3, 0x81, 0x5, @private0, @loopback, 0x8000, 0x80, 0x3, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r4 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000700)=""/158) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:49:58 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000340)={0xe7, 0x3, 0x8000, "89a734b26e90485f03c684752d067b37bda5109952edc37110395355e049d4e2db1184aa4c448df208308c9f3fd528cb6049e9c27d292fd0e299343255a220ab1ca00c2915ff2a251bfc89a42b3b1985e379476f53f0972fc24fe0f3edf9ea9b788ed9c0e58729a2c0f350ced4acf23356f8215b51314ed4eb1c8148f2fdc2bfe02416f764b98e27da40937b14995e1a71454b0f1b80da9e4d405ed575905cb112d721a743f5e0c11c0221ab710361112fec9adac77194748cfa181c7c4e2fdff60a1324d9ba25738a21e97b09e2f26f3090fa7ac9803aaf6085d5dcac559eb3108ca91e603c0b"}) r9 = syz_open_dev$sg(&(0x7f0000000440), 0xd306, 0x494000) ioctl$SG_SET_KEEP_ORPHAN(r9, 0x2287, &(0x7f0000000480)=0x6) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000580)=0x80) pidfd_getfd(r10, r11, 0x0) 16:49:58 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="9226c04aa956f497639c1a41ae09482f3782b7f82ebe22038def4f1e0cd10de7b01e2f8a6e5825c4007a6cfaca86e4f1838ae5bffa3b2ada9c05707acc741c53b2f5ec0c4b728030762e6cff33bc112144b036a16c6c5e51c5cbcc0268b380645ca918f2ff9225358c", 0x69}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4c9, 0x9, 0x4, 0xfff}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000010) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x81, 0x6, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x44}, 0x40, 0x81, 0x7936, 0xff}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)={[{0x2d, 'io'}, {0x2b, 'rdma'}]}, 0xa) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r1, 0x18eae000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x80010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000880)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r1, 0x0, &(0x7f0000000800)="64ae68a1c4cd1ebf1bc11fef47a9862019743e972ee398ada26a62b0ad3fe80f193e3e9358ae80a756663bbb2cd9344a51fff7881f5b4f6ea3c8fc17d22698378ea9f917b8f147cd2b28ebe5a7c0f4aec0703eabc1e1ff82c01a8440c97ef5103aca6d75c54fa06cac", 0x69, 0x2000c0c0}, 0xb6) r5 = openat$cgroup_subtree(r3, &(0x7f00000008c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r1) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x80}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x44040002) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000d00)={0x0, 0x2, r1, 0x3ff}) [ 52.567707] audit: type=1400 audit(1664729398.515:6): avc: denied { execmem } for pid=280 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:49:58 executing program 3: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0xf, 0x67, {0x67, 0x8, "667b37e0ecbdbb40bd8b7e84c24e169d735f668f71a1afe86936a5499c260642d67ced419ae21db8946a34aa8eeb722f60baf871f8523e16c7816b1b7eb322667341755230dd30ee09c1e1f955019ae3555b37846a783340f075a9584ac5b4d5b6cfdcc933"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x40, 0x14, 0xf3, "b430cdbc9820264cbbf806183b54aa730b607d17656fe0ed890e26aaf669c4123f30c5ee3041e4828959d80b46fb37977ad1e60edf126db179266feac210d07566d5fc26b2bbcc3223db971f268e26954ccc70332b2d1de73bf451223609d2ee0d4300a70714c8d68628b0a7f1daa4393e30708966b69ba6b8fb582a3fa9a56d10451949b3ace6d89bc8f1e6e3c427dc7f910a3ca896a87d10b78b9a634ba69256d63f72b159429a7fd675a51e4920b7036154b6c49fb9c9828f729dbb0abde0902c2a13ab127d8f8faf8e4d8d73cd781cce97763638ca09a15e2c05950827deae565bd1e78c43310cdab05c0031dfccd9c765"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x41}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xae}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0xc4, {0xc4, 0xb, "bcacc1f715e9ff253bb633084df46709ae070ac135bacb7328bd8ee0495acbab35bd95b1a07dff91962c50a33350393b8ac121c88e08cd8582d10f7802079ad95494e0ea3ce1e9bbe2bc7de5d240ae6c05691c718a5e8ca91f4bb1ed44c09f70b539e0814e12aec15f70c42ab3dc9c28d359fc56a0c837882aca2e4793922c7ed390f61057e0063dfabba7c88566da3e3df84575aad5e0180cdea857103f6a0b5676d89e7ee12105b3820104f3e2ff6bea6094e6905f2d47c7bc7be1550459668b79"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x20, 0x12, 0xf5, "cc466f6b114007cb6c119c8e730bc7f35bf04dd060986e3e7b774ee5957d8c1b841063867eeec2cb031b5d8f218dda342c7baba1d3e3fe95220a600fa0262d1b1fdf1335388b3b30036ca43dca2feebd0b48eb601d6d3f35ec5cfe7f55f2b21570e9934c807c4733c1e3e1ca298e7d8967c453826814bdfe523e6a309e4fc293e06dd03595afec4938fa22ecc6c0c9bc93b06086369c9dbd6e0e7cf3d1c64af949c17fdcb9e58c80a76e50d7976455c297be1c0d27152f0c84507de914c6b60815f3b68437ec2cd3ae2de7d5e66ca1ce8f5f2f4f4899e32418b4e5bd1fe7c592bcfe68b243b71f51753ce8b8a09a9bfbc3159f3e8b"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x2, 0x3, 0xffff, 0x477a, 0x7, 0x0, 0x800, 0x800, 0x6, 0xfff}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x20}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0x24, 0xbe, {0xbe, 0x23, "44d8bc9a3af9cfcf8605a8de3e0e05e389479a5e25423bba7f3fa264e51e95d428006c026fe12dca77c39d7196400210c57afceec54e9c717fb7df731f59b87723acf7118427d1a0e084b986aa15f49ab1de94c87ff0afa00b9df5ddf26621a80e8f2b13ba1694d9a738acd1b9add5420370caa1297dbf587bcb9c80b6c4f1787fc23a679b943cc26e54c06c4006c3869a3d8f5904baf4ac72b24e82b4a7caa1f4fc1d27c572322c80228edc5590f2bba3bcb236d4343b19e11541a0"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000900)={0x0, 0xa, 0x9b, "ea7c22085dce70a646ab71f91c746617a802c51590981eb72263a348b2cb4c6794d2b890855b64e2a6a32863c73c48f097b9ba38a9b5ae28c37ee94d4f534eefd4ce9aa66a82907da05f364bbcc7d304fb02b049b1220d9b0693a7a9fe4b6f57d95e52d79d715ac5d894a4a9cd9ecfead5c0affd8f038037fc21787b44b700b1e2694a2bf39ba0eb38078ec13b12a45a07a5d73befbfd3f3edf048"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}}) prctl$PR_GET_CHILD_SUBREAPER(0x25) clone3(&(0x7f0000000d40)={0x8b08b000, &(0x7f0000000a80)=0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00), {0x3f}, &(0x7f0000000b40)=""/186, 0xba, &(0x7f0000000c00)=""/203, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000e00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) prctl$PR_SET_TSC(0x1a, 0x5) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000f40), 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r4, {0x8}}, './file1\x00'}) getpeername(r2, &(0x7f0000000fc0)=@nfc, &(0x7f0000001040)=0x80) fcntl$getownex(r3, 0x10, &(0x7f0000001080)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7f, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:49:58 executing program 4: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000, 0x8cd}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x3ff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x84, @media='udp\x00'}}}, [""]}, 0x68}}, 0x20000040) r4 = syz_open_dev$sg(&(0x7f0000000600), 0x4, 0x410400) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000640)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r5, &(0x7f0000000740)=@nfc_llcp, &(0x7f00000007c0)=0x80, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000940)=0x57) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x5, 0x40}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0/file0\x00'}) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 16:49:59 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "77e80d2d813b2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000017c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "edc5b05c8abd05"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000501c0)={0x1000, [{}, {}, {r7, r8}, {r9}], 0x1d, "34e563b4887ca1"}) 16:49:59 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r1 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x35, 0x0, &(0x7f0000000280)=""/170, 0xaa}, &(0x7f0000000380)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)="0476c92569c3a54918b24a138396cc8748af859a7baea7f72efe3a993132a681ce90948caa63f790307a717cf6f83a", 0x2f, r2}, 0x68) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000068380)={0x2, [], 0x5, "c9c0e66caf87d7"}) [ 53.786754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.789734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.792309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.795808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.797602] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.799014] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.804280] Bluetooth: hci0: HCI_REQ-0x0c1a [ 53.835930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.838224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.845812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.877381] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.882627] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.884880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.898859] Bluetooth: hci1: HCI_REQ-0x0c1a [ 53.927173] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.938572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.940120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.951176] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 53.954850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.957191] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.961660] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.963626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.977296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.978337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.979325] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 53.982209] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.983657] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.986736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.005061] Bluetooth: hci4: HCI_REQ-0x0c1a [ 54.006454] Bluetooth: hci3: HCI_REQ-0x0c1a [ 54.041725] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.063176] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.080684] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.089740] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.106509] Bluetooth: hci5: HCI_REQ-0x0c1a [ 54.436509] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 54.448819] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 54.459463] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 54.469356] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 54.486157] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 54.490858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 54.499955] Bluetooth: hci7: HCI_REQ-0x0c1a [ 55.861000] Bluetooth: hci0: command 0x0409 tx timeout [ 55.923965] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 55.987534] Bluetooth: hci1: command 0x0409 tx timeout [ 56.052572] Bluetooth: hci3: command 0x0409 tx timeout [ 56.052605] Bluetooth: hci4: command 0x0409 tx timeout [ 56.181053] Bluetooth: hci5: command 0x0409 tx timeout [ 56.308486] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 56.564501] Bluetooth: hci7: command 0x0409 tx timeout [ 57.907493] Bluetooth: hci0: command 0x041b tx timeout [ 58.035474] Bluetooth: hci1: command 0x041b tx timeout [ 58.099479] Bluetooth: hci3: command 0x041b tx timeout [ 58.100816] Bluetooth: hci4: command 0x041b tx timeout [ 58.228686] Bluetooth: hci5: command 0x041b tx timeout [ 58.611482] Bluetooth: hci7: command 0x041b tx timeout [ 59.579079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 59.583247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 59.587131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 59.598595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 59.604580] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 59.609095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 59.619709] Bluetooth: hci6: HCI_REQ-0x0c1a [ 59.955451] Bluetooth: hci0: command 0x040f tx timeout [ 60.084462] Bluetooth: hci1: command 0x040f tx timeout [ 60.147565] Bluetooth: hci4: command 0x040f tx timeout [ 60.147629] Bluetooth: hci3: command 0x040f tx timeout [ 60.275460] Bluetooth: hci5: command 0x040f tx timeout [ 60.660480] Bluetooth: hci7: command 0x040f tx timeout [ 61.556484] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 61.684568] Bluetooth: hci6: command 0x0409 tx timeout [ 62.003483] Bluetooth: hci0: command 0x0419 tx timeout [ 62.132476] Bluetooth: hci1: command 0x0419 tx timeout [ 62.195467] Bluetooth: hci3: command 0x0419 tx timeout [ 62.196894] Bluetooth: hci4: command 0x0419 tx timeout [ 62.323564] Bluetooth: hci5: command 0x0419 tx timeout [ 62.707502] Bluetooth: hci7: command 0x0419 tx timeout [ 63.732444] Bluetooth: hci6: command 0x041b tx timeout [ 64.145064] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.146892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.149330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.151946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.154035] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.156067] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.160808] Bluetooth: hci2: HCI_REQ-0x0c1a [ 65.779438] Bluetooth: hci6: command 0x040f tx timeout [ 66.164537] Bluetooth: hci2: command 0x0409 tx timeout [ 67.827461] Bluetooth: hci6: command 0x0419 tx timeout [ 68.211491] Bluetooth: hci2: command 0x041b tx timeout [ 70.259472] Bluetooth: hci2: command 0x040f tx timeout [ 72.307451] Bluetooth: hci2: command 0x0419 tx timeout 16:50:52 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x80e2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x3, 0x81, 0x5, @private0, @loopback, 0x8000, 0x80, 0x3, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r4 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000700)=""/158) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:50:52 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x80e2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x3, 0x81, 0x5, @private0, @loopback, 0x8000, 0x80, 0x3, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r4 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000700)=""/158) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:50:52 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x80e2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x3, 0x81, 0x5, @private0, @loopback, 0x8000, 0x80, 0x3, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r4 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000700)=""/158) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:50:53 executing program 4: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000, 0x8cd}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x3ff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x84, @media='udp\x00'}}}, [""]}, 0x68}}, 0x20000040) r4 = syz_open_dev$sg(&(0x7f0000000600), 0x4, 0x410400) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000640)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r5, &(0x7f0000000740)=@nfc_llcp, &(0x7f00000007c0)=0x80, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000940)=0x57) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x5, 0x40}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0/file0\x00'}) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 16:50:53 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x80e2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x3, 0x81, 0x5, @private0, @loopback, 0x8000, 0x80, 0x3, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:50:53 executing program 4: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000, 0x8cd}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x3ff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x84, @media='udp\x00'}}}, [""]}, 0x68}}, 0x20000040) r4 = syz_open_dev$sg(&(0x7f0000000600), 0x4, 0x410400) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000640)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r5, &(0x7f0000000740)=@nfc_llcp, &(0x7f00000007c0)=0x80, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000940)=0x57) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x5, 0x40}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0/file0\x00'}) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 16:50:53 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x80e2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x3, 0x81, 0x5, @private0, @loopback, 0x8000, 0x80, 0x3, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) [ 112.426570] mmap: syz-executor.5 (3910) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.772002] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 115.780719] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 16:51:15 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x80e2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x3, 0x81, 0x5, @private0, @loopback, 0x8000, 0x80, 0x3, 0x1}}) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:51:15 executing program 1: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "77e80d2d813b2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000017c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "edc5b05c8abd05"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000501c0)={0x1000, [{}, {}, {r7, r8}, {r9}], 0x1d, "34e563b4887ca1"}) 16:51:15 executing program 4: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000, 0x8cd}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x3ff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x84, @media='udp\x00'}}}, [""]}, 0x68}}, 0x20000040) r4 = syz_open_dev$sg(&(0x7f0000000600), 0x4, 0x410400) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000640)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r5, &(0x7f0000000740)=@nfc_llcp, &(0x7f00000007c0)=0x80, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000940)=0x57) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x5, 0x40}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0/file0\x00'}) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 16:51:15 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r1 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x35, 0x0, &(0x7f0000000280)=""/170, 0xaa}, &(0x7f0000000380)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)="0476c92569c3a54918b24a138396cc8748af859a7baea7f72efe3a993132a681ce90948caa63f790307a717cf6f83a", 0x2f, r2}, 0x68) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000068380)={0x2, [], 0x5, "c9c0e66caf87d7"}) 16:51:15 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="9226c04aa956f497639c1a41ae09482f3782b7f82ebe22038def4f1e0cd10de7b01e2f8a6e5825c4007a6cfaca86e4f1838ae5bffa3b2ada9c05707acc741c53b2f5ec0c4b728030762e6cff33bc112144b036a16c6c5e51c5cbcc0268b380645ca918f2ff9225358c", 0x69}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4c9, 0x9, 0x4, 0xfff}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000010) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x81, 0x6, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x44}, 0x40, 0x81, 0x7936, 0xff}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)={[{0x2d, 'io'}, {0x2b, 'rdma'}]}, 0xa) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r1, 0x18eae000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x80010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000880)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r1, 0x0, &(0x7f0000000800)="64ae68a1c4cd1ebf1bc11fef47a9862019743e972ee398ada26a62b0ad3fe80f193e3e9358ae80a756663bbb2cd9344a51fff7881f5b4f6ea3c8fc17d22698378ea9f917b8f147cd2b28ebe5a7c0f4aec0703eabc1e1ff82c01a8440c97ef5103aca6d75c54fa06cac", 0x69, 0x2000c0c0}, 0xb6) r5 = openat$cgroup_subtree(r3, &(0x7f00000008c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r1) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x80}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x44040002) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000d00)={0x0, 0x2, r1, 0x3ff}) 16:51:15 executing program 3: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0xf, 0x67, {0x67, 0x8, "667b37e0ecbdbb40bd8b7e84c24e169d735f668f71a1afe86936a5499c260642d67ced419ae21db8946a34aa8eeb722f60baf871f8523e16c7816b1b7eb322667341755230dd30ee09c1e1f955019ae3555b37846a783340f075a9584ac5b4d5b6cfdcc933"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x40, 0x14, 0xf3, "b430cdbc9820264cbbf806183b54aa730b607d17656fe0ed890e26aaf669c4123f30c5ee3041e4828959d80b46fb37977ad1e60edf126db179266feac210d07566d5fc26b2bbcc3223db971f268e26954ccc70332b2d1de73bf451223609d2ee0d4300a70714c8d68628b0a7f1daa4393e30708966b69ba6b8fb582a3fa9a56d10451949b3ace6d89bc8f1e6e3c427dc7f910a3ca896a87d10b78b9a634ba69256d63f72b159429a7fd675a51e4920b7036154b6c49fb9c9828f729dbb0abde0902c2a13ab127d8f8faf8e4d8d73cd781cce97763638ca09a15e2c05950827deae565bd1e78c43310cdab05c0031dfccd9c765"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x41}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xae}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0xc4, {0xc4, 0xb, "bcacc1f715e9ff253bb633084df46709ae070ac135bacb7328bd8ee0495acbab35bd95b1a07dff91962c50a33350393b8ac121c88e08cd8582d10f7802079ad95494e0ea3ce1e9bbe2bc7de5d240ae6c05691c718a5e8ca91f4bb1ed44c09f70b539e0814e12aec15f70c42ab3dc9c28d359fc56a0c837882aca2e4793922c7ed390f61057e0063dfabba7c88566da3e3df84575aad5e0180cdea857103f6a0b5676d89e7ee12105b3820104f3e2ff6bea6094e6905f2d47c7bc7be1550459668b79"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x20, 0x12, 0xf5, "cc466f6b114007cb6c119c8e730bc7f35bf04dd060986e3e7b774ee5957d8c1b841063867eeec2cb031b5d8f218dda342c7baba1d3e3fe95220a600fa0262d1b1fdf1335388b3b30036ca43dca2feebd0b48eb601d6d3f35ec5cfe7f55f2b21570e9934c807c4733c1e3e1ca298e7d8967c453826814bdfe523e6a309e4fc293e06dd03595afec4938fa22ecc6c0c9bc93b06086369c9dbd6e0e7cf3d1c64af949c17fdcb9e58c80a76e50d7976455c297be1c0d27152f0c84507de914c6b60815f3b68437ec2cd3ae2de7d5e66ca1ce8f5f2f4f4899e32418b4e5bd1fe7c592bcfe68b243b71f51753ce8b8a09a9bfbc3159f3e8b"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x2, 0x3, 0xffff, 0x477a, 0x7, 0x0, 0x800, 0x800, 0x6, 0xfff}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x20}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0x24, 0xbe, {0xbe, 0x23, "44d8bc9a3af9cfcf8605a8de3e0e05e389479a5e25423bba7f3fa264e51e95d428006c026fe12dca77c39d7196400210c57afceec54e9c717fb7df731f59b87723acf7118427d1a0e084b986aa15f49ab1de94c87ff0afa00b9df5ddf26621a80e8f2b13ba1694d9a738acd1b9add5420370caa1297dbf587bcb9c80b6c4f1787fc23a679b943cc26e54c06c4006c3869a3d8f5904baf4ac72b24e82b4a7caa1f4fc1d27c572322c80228edc5590f2bba3bcb236d4343b19e11541a0"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000900)={0x0, 0xa, 0x9b, "ea7c22085dce70a646ab71f91c746617a802c51590981eb72263a348b2cb4c6794d2b890855b64e2a6a32863c73c48f097b9ba38a9b5ae28c37ee94d4f534eefd4ce9aa66a82907da05f364bbcc7d304fb02b049b1220d9b0693a7a9fe4b6f57d95e52d79d715ac5d894a4a9cd9ecfead5c0affd8f038037fc21787b44b700b1e2694a2bf39ba0eb38078ec13b12a45a07a5d73befbfd3f3edf048"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}}) prctl$PR_GET_CHILD_SUBREAPER(0x25) clone3(&(0x7f0000000d40)={0x8b08b000, &(0x7f0000000a80)=0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00), {0x3f}, &(0x7f0000000b40)=""/186, 0xba, &(0x7f0000000c00)=""/203, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000e00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) prctl$PR_SET_TSC(0x1a, 0x5) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000f40), 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r4, {0x8}}, './file1\x00'}) getpeername(r2, &(0x7f0000000fc0)=@nfc, &(0x7f0000001040)=0x80) fcntl$getownex(r3, 0x10, &(0x7f0000001080)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7f, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:51:15 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000340)={0xe7, 0x3, 0x8000, "89a734b26e90485f03c684752d067b37bda5109952edc37110395355e049d4e2db1184aa4c448df208308c9f3fd528cb6049e9c27d292fd0e299343255a220ab1ca00c2915ff2a251bfc89a42b3b1985e379476f53f0972fc24fe0f3edf9ea9b788ed9c0e58729a2c0f350ced4acf23356f8215b51314ed4eb1c8148f2fdc2bfe02416f764b98e27da40937b14995e1a71454b0f1b80da9e4d405ed575905cb112d721a743f5e0c11c0221ab710361112fec9adac77194748cfa181c7c4e2fdff60a1324d9ba25738a21e97b09e2f26f3090fa7ac9803aaf6085d5dcac559eb3108ca91e603c0b"}) r9 = syz_open_dev$sg(&(0x7f0000000440), 0xd306, 0x494000) ioctl$SG_SET_KEEP_ORPHAN(r9, 0x2287, &(0x7f0000000480)=0x6) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000580)=0x80) pidfd_getfd(r10, r11, 0x0) 16:51:15 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "77e80d2d813b2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000017c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "edc5b05c8abd05"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000501c0)={0x1000, [{}, {}, {r7, r8}, {r9}], 0x1d, "34e563b4887ca1"}) 16:51:16 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000340)={0xe7, 0x3, 0x8000, "89a734b26e90485f03c684752d067b37bda5109952edc37110395355e049d4e2db1184aa4c448df208308c9f3fd528cb6049e9c27d292fd0e299343255a220ab1ca00c2915ff2a251bfc89a42b3b1985e379476f53f0972fc24fe0f3edf9ea9b788ed9c0e58729a2c0f350ced4acf23356f8215b51314ed4eb1c8148f2fdc2bfe02416f764b98e27da40937b14995e1a71454b0f1b80da9e4d405ed575905cb112d721a743f5e0c11c0221ab710361112fec9adac77194748cfa181c7c4e2fdff60a1324d9ba25738a21e97b09e2f26f3090fa7ac9803aaf6085d5dcac559eb3108ca91e603c0b"}) r9 = syz_open_dev$sg(&(0x7f0000000440), 0xd306, 0x494000) ioctl$SG_SET_KEEP_ORPHAN(r9, 0x2287, &(0x7f0000000480)=0x6) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000580)=0x80) pidfd_getfd(r10, r11, 0x0) 16:51:16 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r1 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x35, 0x0, &(0x7f0000000280)=""/170, 0xaa}, &(0x7f0000000380)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)="0476c92569c3a54918b24a138396cc8748af859a7baea7f72efe3a993132a681ce90948caa63f790307a717cf6f83a", 0x2f, r2}, 0x68) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000068380)={0x2, [], 0x5, "c9c0e66caf87d7"}) 16:51:16 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "77e80d2d813b2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000017c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "edc5b05c8abd05"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000501c0)={0x1000, [{}, {}, {r7, r8}, {r9}], 0x1d, "34e563b4887ca1"}) 16:51:16 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r1 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x35, 0x0, &(0x7f0000000280)=""/170, 0xaa}, &(0x7f0000000380)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)="0476c92569c3a54918b24a138396cc8748af859a7baea7f72efe3a993132a681ce90948caa63f790307a717cf6f83a", 0x2f, r2}, 0x68) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000068380)={0x2, [], 0x5, "c9c0e66caf87d7"}) 16:51:29 executing program 3: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0xf, 0x67, {0x67, 0x8, "667b37e0ecbdbb40bd8b7e84c24e169d735f668f71a1afe86936a5499c260642d67ced419ae21db8946a34aa8eeb722f60baf871f8523e16c7816b1b7eb322667341755230dd30ee09c1e1f955019ae3555b37846a783340f075a9584ac5b4d5b6cfdcc933"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x40, 0x14, 0xf3, "b430cdbc9820264cbbf806183b54aa730b607d17656fe0ed890e26aaf669c4123f30c5ee3041e4828959d80b46fb37977ad1e60edf126db179266feac210d07566d5fc26b2bbcc3223db971f268e26954ccc70332b2d1de73bf451223609d2ee0d4300a70714c8d68628b0a7f1daa4393e30708966b69ba6b8fb582a3fa9a56d10451949b3ace6d89bc8f1e6e3c427dc7f910a3ca896a87d10b78b9a634ba69256d63f72b159429a7fd675a51e4920b7036154b6c49fb9c9828f729dbb0abde0902c2a13ab127d8f8faf8e4d8d73cd781cce97763638ca09a15e2c05950827deae565bd1e78c43310cdab05c0031dfccd9c765"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x41}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xae}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0xc4, {0xc4, 0xb, "bcacc1f715e9ff253bb633084df46709ae070ac135bacb7328bd8ee0495acbab35bd95b1a07dff91962c50a33350393b8ac121c88e08cd8582d10f7802079ad95494e0ea3ce1e9bbe2bc7de5d240ae6c05691c718a5e8ca91f4bb1ed44c09f70b539e0814e12aec15f70c42ab3dc9c28d359fc56a0c837882aca2e4793922c7ed390f61057e0063dfabba7c88566da3e3df84575aad5e0180cdea857103f6a0b5676d89e7ee12105b3820104f3e2ff6bea6094e6905f2d47c7bc7be1550459668b79"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x20, 0x12, 0xf5, "cc466f6b114007cb6c119c8e730bc7f35bf04dd060986e3e7b774ee5957d8c1b841063867eeec2cb031b5d8f218dda342c7baba1d3e3fe95220a600fa0262d1b1fdf1335388b3b30036ca43dca2feebd0b48eb601d6d3f35ec5cfe7f55f2b21570e9934c807c4733c1e3e1ca298e7d8967c453826814bdfe523e6a309e4fc293e06dd03595afec4938fa22ecc6c0c9bc93b06086369c9dbd6e0e7cf3d1c64af949c17fdcb9e58c80a76e50d7976455c297be1c0d27152f0c84507de914c6b60815f3b68437ec2cd3ae2de7d5e66ca1ce8f5f2f4f4899e32418b4e5bd1fe7c592bcfe68b243b71f51753ce8b8a09a9bfbc3159f3e8b"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x2, 0x3, 0xffff, 0x477a, 0x7, 0x0, 0x800, 0x800, 0x6, 0xfff}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x20}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0x24, 0xbe, {0xbe, 0x23, "44d8bc9a3af9cfcf8605a8de3e0e05e389479a5e25423bba7f3fa264e51e95d428006c026fe12dca77c39d7196400210c57afceec54e9c717fb7df731f59b87723acf7118427d1a0e084b986aa15f49ab1de94c87ff0afa00b9df5ddf26621a80e8f2b13ba1694d9a738acd1b9add5420370caa1297dbf587bcb9c80b6c4f1787fc23a679b943cc26e54c06c4006c3869a3d8f5904baf4ac72b24e82b4a7caa1f4fc1d27c572322c80228edc5590f2bba3bcb236d4343b19e11541a0"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000900)={0x0, 0xa, 0x9b, "ea7c22085dce70a646ab71f91c746617a802c51590981eb72263a348b2cb4c6794d2b890855b64e2a6a32863c73c48f097b9ba38a9b5ae28c37ee94d4f534eefd4ce9aa66a82907da05f364bbcc7d304fb02b049b1220d9b0693a7a9fe4b6f57d95e52d79d715ac5d894a4a9cd9ecfead5c0affd8f038037fc21787b44b700b1e2694a2bf39ba0eb38078ec13b12a45a07a5d73befbfd3f3edf048"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}}) prctl$PR_GET_CHILD_SUBREAPER(0x25) clone3(&(0x7f0000000d40)={0x8b08b000, &(0x7f0000000a80)=0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00), {0x3f}, &(0x7f0000000b40)=""/186, 0xba, &(0x7f0000000c00)=""/203, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000e00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) prctl$PR_SET_TSC(0x1a, 0x5) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000f40), 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r4, {0x8}}, './file1\x00'}) getpeername(r2, &(0x7f0000000fc0)=@nfc, &(0x7f0000001040)=0x80) fcntl$getownex(r3, 0x10, &(0x7f0000001080)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7f, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:51:29 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "77e80d2d813b2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000017c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "edc5b05c8abd05"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000501c0)={0x1000, [{}, {}, {r7, r8}, {r9}], 0x1d, "34e563b4887ca1"}) 16:51:29 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000340)={0xe7, 0x3, 0x8000, "89a734b26e90485f03c684752d067b37bda5109952edc37110395355e049d4e2db1184aa4c448df208308c9f3fd528cb6049e9c27d292fd0e299343255a220ab1ca00c2915ff2a251bfc89a42b3b1985e379476f53f0972fc24fe0f3edf9ea9b788ed9c0e58729a2c0f350ced4acf23356f8215b51314ed4eb1c8148f2fdc2bfe02416f764b98e27da40937b14995e1a71454b0f1b80da9e4d405ed575905cb112d721a743f5e0c11c0221ab710361112fec9adac77194748cfa181c7c4e2fdff60a1324d9ba25738a21e97b09e2f26f3090fa7ac9803aaf6085d5dcac559eb3108ca91e603c0b"}) r9 = syz_open_dev$sg(&(0x7f0000000440), 0xd306, 0x494000) ioctl$SG_SET_KEEP_ORPHAN(r9, 0x2287, &(0x7f0000000480)=0x6) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000580)=0x80) pidfd_getfd(r10, r11, 0x0) 16:51:29 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x80e2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:51:29 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="9226c04aa956f497639c1a41ae09482f3782b7f82ebe22038def4f1e0cd10de7b01e2f8a6e5825c4007a6cfaca86e4f1838ae5bffa3b2ada9c05707acc741c53b2f5ec0c4b728030762e6cff33bc112144b036a16c6c5e51c5cbcc0268b380645ca918f2ff9225358c", 0x69}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4c9, 0x9, 0x4, 0xfff}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000010) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x81, 0x6, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x44}, 0x40, 0x81, 0x7936, 0xff}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)={[{0x2d, 'io'}, {0x2b, 'rdma'}]}, 0xa) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r1, 0x18eae000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x80010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000880)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r1, 0x0, &(0x7f0000000800)="64ae68a1c4cd1ebf1bc11fef47a9862019743e972ee398ada26a62b0ad3fe80f193e3e9358ae80a756663bbb2cd9344a51fff7881f5b4f6ea3c8fc17d22698378ea9f917b8f147cd2b28ebe5a7c0f4aec0703eabc1e1ff82c01a8440c97ef5103aca6d75c54fa06cac", 0x69, 0x2000c0c0}, 0xb6) r5 = openat$cgroup_subtree(r3, &(0x7f00000008c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r1) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x80}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x44040002) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000d00)={0x0, 0x2, r1, 0x3ff}) 16:51:29 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r1 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x35, 0x0, &(0x7f0000000280)=""/170, 0xaa}, &(0x7f0000000380)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)="0476c92569c3a54918b24a138396cc8748af859a7baea7f72efe3a993132a681ce90948caa63f790307a717cf6f83a", 0x2f, r2}, 0x68) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 16:51:29 executing program 1: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "77e80d2d813b2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000017c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "edc5b05c8abd05"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000501c0)={0x1000, [{}, {}, {r7, r8}, {r9}], 0x1d, "34e563b4887ca1"}) 16:51:29 executing program 4: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000, 0x8cd}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x3ff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x84, @media='udp\x00'}}}, [""]}, 0x68}}, 0x20000040) r4 = syz_open_dev$sg(&(0x7f0000000600), 0x4, 0x410400) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000640)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r5, &(0x7f0000000740)=@nfc_llcp, &(0x7f00000007c0)=0x80, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000940)=0x57) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x5, 0x40}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0/file0\x00'}) 16:51:29 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r1 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x35, 0x0, &(0x7f0000000280)=""/170, 0xaa}, &(0x7f0000000380)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)="0476c92569c3a54918b24a138396cc8748af859a7baea7f72efe3a993132a681ce90948caa63f790307a717cf6f83a", 0x2f, r2}, 0x68) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) 16:51:29 executing program 1: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "77e80d2d813b2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000017c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "edc5b05c8abd05"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000501c0)={0x1000, [{}, {}, {r7, r8}, {r9}], 0x1d, "34e563b4887ca1"}) 16:51:29 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r1, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x35, 0x0, &(0x7f0000000280)=""/170, 0xaa}, &(0x7f0000000380)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)="0476c92569c3a54918b24a138396cc8748af859a7baea7f72efe3a993132a681ce90948caa63f790307a717cf6f83a", 0x2f, r1}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) 16:51:29 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000340)={0xe7, 0x3, 0x8000, "89a734b26e90485f03c684752d067b37bda5109952edc37110395355e049d4e2db1184aa4c448df208308c9f3fd528cb6049e9c27d292fd0e299343255a220ab1ca00c2915ff2a251bfc89a42b3b1985e379476f53f0972fc24fe0f3edf9ea9b788ed9c0e58729a2c0f350ced4acf23356f8215b51314ed4eb1c8148f2fdc2bfe02416f764b98e27da40937b14995e1a71454b0f1b80da9e4d405ed575905cb112d721a743f5e0c11c0221ab710361112fec9adac77194748cfa181c7c4e2fdff60a1324d9ba25738a21e97b09e2f26f3090fa7ac9803aaf6085d5dcac559eb3108ca91e603c0b"}) r9 = syz_open_dev$sg(&(0x7f0000000440), 0xd306, 0x494000) ioctl$SG_SET_KEEP_ORPHAN(r9, 0x2287, &(0x7f0000000480)=0x6) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) pidfd_getfd(r10, 0xffffffffffffffff, 0x0) 16:51:29 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [], 0x3, "77e80d2d813b2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000017c0)={0x0, [], 0x81, "edc5b05c8abd05"}) 16:51:42 executing program 3: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0xf, 0x67, {0x67, 0x8, "667b37e0ecbdbb40bd8b7e84c24e169d735f668f71a1afe86936a5499c260642d67ced419ae21db8946a34aa8eeb722f60baf871f8523e16c7816b1b7eb322667341755230dd30ee09c1e1f955019ae3555b37846a783340f075a9584ac5b4d5b6cfdcc933"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x40, 0x14, 0xf3, "b430cdbc9820264cbbf806183b54aa730b607d17656fe0ed890e26aaf669c4123f30c5ee3041e4828959d80b46fb37977ad1e60edf126db179266feac210d07566d5fc26b2bbcc3223db971f268e26954ccc70332b2d1de73bf451223609d2ee0d4300a70714c8d68628b0a7f1daa4393e30708966b69ba6b8fb582a3fa9a56d10451949b3ace6d89bc8f1e6e3c427dc7f910a3ca896a87d10b78b9a634ba69256d63f72b159429a7fd675a51e4920b7036154b6c49fb9c9828f729dbb0abde0902c2a13ab127d8f8faf8e4d8d73cd781cce97763638ca09a15e2c05950827deae565bd1e78c43310cdab05c0031dfccd9c765"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x41}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xae}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0xc4, {0xc4, 0xb, "bcacc1f715e9ff253bb633084df46709ae070ac135bacb7328bd8ee0495acbab35bd95b1a07dff91962c50a33350393b8ac121c88e08cd8582d10f7802079ad95494e0ea3ce1e9bbe2bc7de5d240ae6c05691c718a5e8ca91f4bb1ed44c09f70b539e0814e12aec15f70c42ab3dc9c28d359fc56a0c837882aca2e4793922c7ed390f61057e0063dfabba7c88566da3e3df84575aad5e0180cdea857103f6a0b5676d89e7ee12105b3820104f3e2ff6bea6094e6905f2d47c7bc7be1550459668b79"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x20, 0x12, 0xf5, "cc466f6b114007cb6c119c8e730bc7f35bf04dd060986e3e7b774ee5957d8c1b841063867eeec2cb031b5d8f218dda342c7baba1d3e3fe95220a600fa0262d1b1fdf1335388b3b30036ca43dca2feebd0b48eb601d6d3f35ec5cfe7f55f2b21570e9934c807c4733c1e3e1ca298e7d8967c453826814bdfe523e6a309e4fc293e06dd03595afec4938fa22ecc6c0c9bc93b06086369c9dbd6e0e7cf3d1c64af949c17fdcb9e58c80a76e50d7976455c297be1c0d27152f0c84507de914c6b60815f3b68437ec2cd3ae2de7d5e66ca1ce8f5f2f4f4899e32418b4e5bd1fe7c592bcfe68b243b71f51753ce8b8a09a9bfbc3159f3e8b"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x2, 0x3, 0xffff, 0x477a, 0x7, 0x0, 0x800, 0x800, 0x6, 0xfff}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x20}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0x24, 0xbe, {0xbe, 0x23, "44d8bc9a3af9cfcf8605a8de3e0e05e389479a5e25423bba7f3fa264e51e95d428006c026fe12dca77c39d7196400210c57afceec54e9c717fb7df731f59b87723acf7118427d1a0e084b986aa15f49ab1de94c87ff0afa00b9df5ddf26621a80e8f2b13ba1694d9a738acd1b9add5420370caa1297dbf587bcb9c80b6c4f1787fc23a679b943cc26e54c06c4006c3869a3d8f5904baf4ac72b24e82b4a7caa1f4fc1d27c572322c80228edc5590f2bba3bcb236d4343b19e11541a0"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000900)={0x0, 0xa, 0x9b, "ea7c22085dce70a646ab71f91c746617a802c51590981eb72263a348b2cb4c6794d2b890855b64e2a6a32863c73c48f097b9ba38a9b5ae28c37ee94d4f534eefd4ce9aa66a82907da05f364bbcc7d304fb02b049b1220d9b0693a7a9fe4b6f57d95e52d79d715ac5d894a4a9cd9ecfead5c0affd8f038037fc21787b44b700b1e2694a2bf39ba0eb38078ec13b12a45a07a5d73befbfd3f3edf048"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}}) prctl$PR_GET_CHILD_SUBREAPER(0x25) clone3(&(0x7f0000000d40)={0x8b08b000, &(0x7f0000000a80)=0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00), {0x3f}, &(0x7f0000000b40)=""/186, 0xba, &(0x7f0000000c00)=""/203, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000e00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) prctl$PR_SET_TSC(0x1a, 0x5) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000f40), 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r4, {0x8}}, './file1\x00'}) getpeername(r2, &(0x7f0000000fc0)=@nfc, &(0x7f0000001040)=0x80) fcntl$getownex(r3, 0x10, &(0x7f0000001080)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7f, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:51:42 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="9226c04aa956f497639c1a41ae09482f3782b7f82ebe22038def4f1e0cd10de7b01e2f8a6e5825c4007a6cfaca86e4f1838ae5bffa3b2ada9c05707acc741c53b2f5ec0c4b728030762e6cff33bc112144b036a16c6c5e51c5cbcc0268b380645ca918f2ff9225358c", 0x69}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4c9, 0x9, 0x4, 0xfff}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000010) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x81, 0x6, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x44}, 0x40, 0x81, 0x7936, 0xff}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)={[{0x2d, 'io'}, {0x2b, 'rdma'}]}, 0xa) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r1, 0x18eae000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x80010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000880)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r1, 0x0, &(0x7f0000000800)="64ae68a1c4cd1ebf1bc11fef47a9862019743e972ee398ada26a62b0ad3fe80f193e3e9358ae80a756663bbb2cd9344a51fff7881f5b4f6ea3c8fc17d22698378ea9f917b8f147cd2b28ebe5a7c0f4aec0703eabc1e1ff82c01a8440c97ef5103aca6d75c54fa06cac", 0x69, 0x2000c0c0}, 0xb6) r5 = openat$cgroup_subtree(r3, &(0x7f00000008c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r1) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x80}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x44040002) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000d00)={0x0, 0x2, r1, 0x3ff}) 16:51:42 executing program 4: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000, 0x8cd}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x3ff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x84, @media='udp\x00'}}}, [""]}, 0x68}}, 0x20000040) r4 = syz_open_dev$sg(&(0x7f0000000600), 0x4, 0x410400) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000640)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r5, &(0x7f0000000740)=@nfc_llcp, &(0x7f00000007c0)=0x80, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000940)=0x57) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x5, 0x40}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) 16:51:42 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [], 0x3, "77e80d2d813b2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)) 16:51:42 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000340)={0xe7, 0x3, 0x8000, "89a734b26e90485f03c684752d067b37bda5109952edc37110395355e049d4e2db1184aa4c448df208308c9f3fd528cb6049e9c27d292fd0e299343255a220ab1ca00c2915ff2a251bfc89a42b3b1985e379476f53f0972fc24fe0f3edf9ea9b788ed9c0e58729a2c0f350ced4acf23356f8215b51314ed4eb1c8148f2fdc2bfe02416f764b98e27da40937b14995e1a71454b0f1b80da9e4d405ed575905cb112d721a743f5e0c11c0221ab710361112fec9adac77194748cfa181c7c4e2fdff60a1324d9ba25738a21e97b09e2f26f3090fa7ac9803aaf6085d5dcac559eb3108ca91e603c0b"}) r9 = syz_open_dev$sg(&(0x7f0000000440), 0xd306, 0x494000) ioctl$SG_SET_KEEP_ORPHAN(r9, 0x2287, &(0x7f0000000480)=0x6) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:51:42 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r1, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x35, 0x0, &(0x7f0000000280)=""/170, 0xaa}, &(0x7f0000000380)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)="0476c92569c3a54918b24a138396cc8748af859a7baea7f72efe3a993132a681ce90948caa63f790307a717cf6f83a", 0x2f, r1}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) 16:51:42 executing program 1: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [], 0x3, "77e80d2d813b2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000017c0)={0x0, [], 0x81, "edc5b05c8abd05"}) 16:51:42 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x80e2}}, './file0\x00'}) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:51:42 executing program 1: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [], 0x3, "77e80d2d813b2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)) 16:51:42 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r1, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x35, 0x0, &(0x7f0000000280)=""/170, 0xaa}, &(0x7f0000000380)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) 16:51:42 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000340)={0xe7, 0x3, 0x8000, "89a734b26e90485f03c684752d067b37bda5109952edc37110395355e049d4e2db1184aa4c448df208308c9f3fd528cb6049e9c27d292fd0e299343255a220ab1ca00c2915ff2a251bfc89a42b3b1985e379476f53f0972fc24fe0f3edf9ea9b788ed9c0e58729a2c0f350ced4acf23356f8215b51314ed4eb1c8148f2fdc2bfe02416f764b98e27da40937b14995e1a71454b0f1b80da9e4d405ed575905cb112d721a743f5e0c11c0221ab710361112fec9adac77194748cfa181c7c4e2fdff60a1324d9ba25738a21e97b09e2f26f3090fa7ac9803aaf6085d5dcac559eb3108ca91e603c0b"}) r9 = syz_open_dev$sg(&(0x7f0000000440), 0xd306, 0x494000) ioctl$SG_SET_KEEP_ORPHAN(r9, 0x2287, &(0x7f0000000480)=0x6) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:51:42 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [], 0x3, "77e80d2d813b2a"}) 16:51:42 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r1, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x35, 0x0, &(0x7f0000000280)=""/170, 0xaa}, &(0x7f0000000380)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) 16:51:56 executing program 3: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0xf, 0x67, {0x67, 0x8, "667b37e0ecbdbb40bd8b7e84c24e169d735f668f71a1afe86936a5499c260642d67ced419ae21db8946a34aa8eeb722f60baf871f8523e16c7816b1b7eb322667341755230dd30ee09c1e1f955019ae3555b37846a783340f075a9584ac5b4d5b6cfdcc933"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x40, 0x14, 0xf3, "b430cdbc9820264cbbf806183b54aa730b607d17656fe0ed890e26aaf669c4123f30c5ee3041e4828959d80b46fb37977ad1e60edf126db179266feac210d07566d5fc26b2bbcc3223db971f268e26954ccc70332b2d1de73bf451223609d2ee0d4300a70714c8d68628b0a7f1daa4393e30708966b69ba6b8fb582a3fa9a56d10451949b3ace6d89bc8f1e6e3c427dc7f910a3ca896a87d10b78b9a634ba69256d63f72b159429a7fd675a51e4920b7036154b6c49fb9c9828f729dbb0abde0902c2a13ab127d8f8faf8e4d8d73cd781cce97763638ca09a15e2c05950827deae565bd1e78c43310cdab05c0031dfccd9c765"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x41}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xae}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0xc4, {0xc4, 0xb, "bcacc1f715e9ff253bb633084df46709ae070ac135bacb7328bd8ee0495acbab35bd95b1a07dff91962c50a33350393b8ac121c88e08cd8582d10f7802079ad95494e0ea3ce1e9bbe2bc7de5d240ae6c05691c718a5e8ca91f4bb1ed44c09f70b539e0814e12aec15f70c42ab3dc9c28d359fc56a0c837882aca2e4793922c7ed390f61057e0063dfabba7c88566da3e3df84575aad5e0180cdea857103f6a0b5676d89e7ee12105b3820104f3e2ff6bea6094e6905f2d47c7bc7be1550459668b79"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x20, 0x12, 0xf5, "cc466f6b114007cb6c119c8e730bc7f35bf04dd060986e3e7b774ee5957d8c1b841063867eeec2cb031b5d8f218dda342c7baba1d3e3fe95220a600fa0262d1b1fdf1335388b3b30036ca43dca2feebd0b48eb601d6d3f35ec5cfe7f55f2b21570e9934c807c4733c1e3e1ca298e7d8967c453826814bdfe523e6a309e4fc293e06dd03595afec4938fa22ecc6c0c9bc93b06086369c9dbd6e0e7cf3d1c64af949c17fdcb9e58c80a76e50d7976455c297be1c0d27152f0c84507de914c6b60815f3b68437ec2cd3ae2de7d5e66ca1ce8f5f2f4f4899e32418b4e5bd1fe7c592bcfe68b243b71f51753ce8b8a09a9bfbc3159f3e8b"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x2, 0x3, 0xffff, 0x477a, 0x7, 0x0, 0x800, 0x800, 0x6, 0xfff}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x20}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0x24, 0xbe, {0xbe, 0x23, "44d8bc9a3af9cfcf8605a8de3e0e05e389479a5e25423bba7f3fa264e51e95d428006c026fe12dca77c39d7196400210c57afceec54e9c717fb7df731f59b87723acf7118427d1a0e084b986aa15f49ab1de94c87ff0afa00b9df5ddf26621a80e8f2b13ba1694d9a738acd1b9add5420370caa1297dbf587bcb9c80b6c4f1787fc23a679b943cc26e54c06c4006c3869a3d8f5904baf4ac72b24e82b4a7caa1f4fc1d27c572322c80228edc5590f2bba3bcb236d4343b19e11541a0"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000900)={0x0, 0xa, 0x9b, "ea7c22085dce70a646ab71f91c746617a802c51590981eb72263a348b2cb4c6794d2b890855b64e2a6a32863c73c48f097b9ba38a9b5ae28c37ee94d4f534eefd4ce9aa66a82907da05f364bbcc7d304fb02b049b1220d9b0693a7a9fe4b6f57d95e52d79d715ac5d894a4a9cd9ecfead5c0affd8f038037fc21787b44b700b1e2694a2bf39ba0eb38078ec13b12a45a07a5d73befbfd3f3edf048"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}}) prctl$PR_GET_CHILD_SUBREAPER(0x25) clone3(&(0x7f0000000d40)={0x8b08b000, &(0x7f0000000a80)=0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00), {0x3f}, &(0x7f0000000b40)=""/186, 0xba, &(0x7f0000000c00)=""/203, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000e00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) prctl$PR_SET_TSC(0x1a, 0x5) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000f40), 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r4, {0x8}}, './file1\x00'}) getpeername(r2, &(0x7f0000000fc0)=@nfc, &(0x7f0000001040)=0x80) fcntl$getownex(r3, 0x10, &(0x7f0000001080)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7f, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) 16:51:56 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r1, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) 16:51:56 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) 16:51:56 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000440)) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:51:56 executing program 1: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000005c0)={0x1f, [], 0x3, "77e80d2d813b2a"}) 16:51:56 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="9226c04aa956f497639c1a41ae09482f3782b7f82ebe22038def4f1e0cd10de7b01e2f8a6e5825c4007a6cfaca86e4f1838ae5bffa3b2ada9c05707acc741c53b2f5ec0c4b728030762e6cff33bc112144b036a16c6c5e51c5cbcc0268b380645ca918f2ff9225358c", 0x69}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4c9, 0x9, 0x4, 0xfff}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000010) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x81, 0x6, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x44}, 0x40, 0x81, 0x7936, 0xff}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)={[{0x2d, 'io'}, {0x2b, 'rdma'}]}, 0xa) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r1, 0x18eae000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x80010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000880)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r1, 0x0, &(0x7f0000000800)="64ae68a1c4cd1ebf1bc11fef47a9862019743e972ee398ada26a62b0ad3fe80f193e3e9358ae80a756663bbb2cd9344a51fff7881f5b4f6ea3c8fc17d22698378ea9f917b8f147cd2b28ebe5a7c0f4aec0703eabc1e1ff82c01a8440c97ef5103aca6d75c54fa06cac", 0x69, 0x2000c0c0}, 0xb6) r5 = openat$cgroup_subtree(r3, &(0x7f00000008c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r1) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x80}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x44040002) 16:51:56 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000340)={0xe7, 0x3, 0x8000, "89a734b26e90485f03c684752d067b37bda5109952edc37110395355e049d4e2db1184aa4c448df208308c9f3fd528cb6049e9c27d292fd0e299343255a220ab1ca00c2915ff2a251bfc89a42b3b1985e379476f53f0972fc24fe0f3edf9ea9b788ed9c0e58729a2c0f350ced4acf23356f8215b51314ed4eb1c8148f2fdc2bfe02416f764b98e27da40937b14995e1a71454b0f1b80da9e4d405ed575905cb112d721a743f5e0c11c0221ab710361112fec9adac77194748cfa181c7c4e2fdff60a1324d9ba25738a21e97b09e2f26f3090fa7ac9803aaf6085d5dcac559eb3108ca91e603c0b"}) r9 = syz_open_dev$sg(&(0x7f0000000440), 0xd306, 0x494000) ioctl$SG_SET_KEEP_ORPHAN(r9, 0x2287, &(0x7f0000000480)=0x6) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:51:56 executing program 4: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000, 0x8cd}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x3ff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x84, @media='udp\x00'}}}, [""]}, 0x68}}, 0x20000040) r4 = syz_open_dev$sg(&(0x7f0000000600), 0x4, 0x410400) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000640)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r5, &(0x7f0000000740)=@nfc_llcp, &(0x7f00000007c0)=0x80, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000940)=0x57) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x5, 0x40}}, './file0\x00'}) 16:51:56 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r1, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) 16:51:56 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000340)={0xe7, 0x3, 0x8000, "89a734b26e90485f03c684752d067b37bda5109952edc37110395355e049d4e2db1184aa4c448df208308c9f3fd528cb6049e9c27d292fd0e299343255a220ab1ca00c2915ff2a251bfc89a42b3b1985e379476f53f0972fc24fe0f3edf9ea9b788ed9c0e58729a2c0f350ced4acf23356f8215b51314ed4eb1c8148f2fdc2bfe02416f764b98e27da40937b14995e1a71454b0f1b80da9e4d405ed575905cb112d721a743f5e0c11c0221ab710361112fec9adac77194748cfa181c7c4e2fdff60a1324d9ba25738a21e97b09e2f26f3090fa7ac9803aaf6085d5dcac559eb3108ca91e603c0b"}) syz_open_dev$sg(&(0x7f0000000440), 0xd306, 0x494000) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) pidfd_getfd(r9, 0xffffffffffffffff, 0x0) 16:51:56 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) 16:51:56 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r1, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) 16:51:56 executing program 1: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) 16:51:56 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:51:56 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000340)={0xe7, 0x3, 0x8000, "89a734b26e90485f03c684752d067b37bda5109952edc37110395355e049d4e2db1184aa4c448df208308c9f3fd528cb6049e9c27d292fd0e299343255a220ab1ca00c2915ff2a251bfc89a42b3b1985e379476f53f0972fc24fe0f3edf9ea9b788ed9c0e58729a2c0f350ced4acf23356f8215b51314ed4eb1c8148f2fdc2bfe02416f764b98e27da40937b14995e1a71454b0f1b80da9e4d405ed575905cb112d721a743f5e0c11c0221ab710361112fec9adac77194748cfa181c7c4e2fdff60a1324d9ba25738a21e97b09e2f26f3090fa7ac9803aaf6085d5dcac559eb3108ca91e603c0b"}) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) pidfd_getfd(r9, 0xffffffffffffffff, 0x0) [ 179.635510] Bluetooth: hci0: command 0x0406 tx timeout [ 179.635598] Bluetooth: hci1: command 0x0406 tx timeout [ 179.635984] Bluetooth: hci4: command 0x0406 tx timeout [ 179.636938] Bluetooth: hci3: command 0x0406 tx timeout [ 179.637253] Bluetooth: hci5: command 0x0406 tx timeout [ 179.638121] Bluetooth: hci7: command 0x0406 tx timeout [ 180.147470] INFO: task rcu_gp:3 blocked for more than 142 seconds. [ 180.148083] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.148510] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.149052] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 180.149685] Call Trace: [ 180.149875] [ 180.150048] __schedule+0x893/0x2470 [ 180.150352] ? io_schedule_timeout+0x150/0x150 [ 180.150714] ? do_raw_spin_lock+0x121/0x260 [ 180.151279] ? rwlock_bug.part.0+0x90/0x90 [ 180.151617] schedule+0xda/0x1b0 [ 180.152422] rescuer_thread+0x851/0xdb0 [ 180.152721] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.153492] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.153862] ? lockdep_hardirqs_on+0x79/0x100 [ 180.154195] ? worker_thread+0x1260/0x1260 [ 180.154532] kthread+0x2ed/0x3a0 [ 180.154789] ? kthread_complete_and_exit+0x40/0x40 [ 180.155148] ret_from_fork+0x22/0x30 [ 180.155460] [ 180.155636] INFO: task rcu_par_gp:4 blocked for more than 142 seconds. [ 180.156093] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.156484] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.157023] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 180.157681] Call Trace: [ 180.157893] [ 180.158075] __schedule+0x893/0x2470 [ 180.158397] ? io_schedule_timeout+0x150/0x150 [ 180.158752] ? do_raw_spin_lock+0x121/0x260 [ 180.159092] ? rwlock_bug.part.0+0x90/0x90 [ 180.159444] schedule+0xda/0x1b0 [ 180.159711] rescuer_thread+0x851/0xdb0 [ 180.160016] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.160425] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.160818] ? lockdep_hardirqs_on+0x79/0x100 [ 180.161170] ? worker_thread+0x1260/0x1260 [ 180.161552] kthread+0x2ed/0x3a0 [ 180.161823] ? kthread_complete_and_exit+0x40/0x40 [ 180.162202] ret_from_fork+0x22/0x30 [ 180.162529] [ 180.162709] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 180.163199] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.163619] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.164181] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 180.164825] Call Trace: [ 180.165029] [ 180.165212] __schedule+0x893/0x2470 [ 180.165545] ? io_schedule_timeout+0x150/0x150 [ 180.165890] ? do_raw_spin_lock+0x121/0x260 [ 180.166226] ? rwlock_bug.part.0+0x90/0x90 [ 180.166585] schedule+0xda/0x1b0 [ 180.166847] rescuer_thread+0x851/0xdb0 [ 180.167161] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.167565] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.167964] ? lockdep_hardirqs_on+0x79/0x100 [ 180.168307] ? worker_thread+0x1260/0x1260 [ 180.168667] kthread+0x2ed/0x3a0 [ 180.168939] ? kthread_complete_and_exit+0x40/0x40 [ 180.169343] ret_from_fork+0x22/0x30 [ 180.169666] [ 180.169846] INFO: task netns:6 blocked for more than 143 seconds. [ 180.170301] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.170722] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.171286] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 180.171921] Call Trace: [ 180.172117] [ 180.172292] __schedule+0x893/0x2470 [ 180.172607] ? io_schedule_timeout+0x150/0x150 [ 180.172969] ? do_raw_spin_lock+0x121/0x260 [ 180.173304] ? rwlock_bug.part.0+0x90/0x90 [ 180.173661] schedule+0xda/0x1b0 [ 180.173929] rescuer_thread+0x851/0xdb0 [ 180.174237] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.174637] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.175031] ? lockdep_hardirqs_on+0x79/0x100 [ 180.175397] ? worker_thread+0x1260/0x1260 [ 180.175727] kthread+0x2ed/0x3a0 [ 180.175995] ? kthread_complete_and_exit+0x40/0x40 [ 180.176372] ret_from_fork+0x22/0x30 [ 180.176695] [ 180.176882] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 180.177403] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.177795] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.178374] task:kworker/0:0 state:I stack:29256 pid:7 ppid:2 flags:0x00004000 [ 180.179024] Workqueue: 0x0 (ata_sff) [ 180.179322] Call Trace: [ 180.179542] [ 180.179719] __schedule+0x893/0x2470 [ 180.180011] ? io_schedule_timeout+0x150/0x150 [ 180.180373] schedule+0xda/0x1b0 [ 180.180672] worker_thread+0x15f/0x1260 [ 180.180995] ? process_one_work+0x16a0/0x16a0 [ 180.181359] kthread+0x2ed/0x3a0 [ 180.181644] ? kthread_complete_and_exit+0x40/0x40 [ 180.182027] ret_from_fork+0x22/0x30 [ 180.182327] [ 180.182530] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 180.183022] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.183437] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.183999] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 180.184644] Workqueue: 0x0 (events_highpri) [ 180.184976] Call Trace: [ 180.185175] [ 180.185370] __schedule+0x893/0x2470 [ 180.185696] ? io_schedule_timeout+0x150/0x150 [ 180.186055] schedule+0xda/0x1b0 [ 180.186321] worker_thread+0x15f/0x1260 [ 180.186668] ? process_one_work+0x16a0/0x16a0 [ 180.187021] kthread+0x2ed/0x3a0 [ 180.187279] ? kthread_complete_and_exit+0x40/0x40 [ 180.187678] ret_from_fork+0x22/0x30 [ 180.187979] [ 180.188160] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 180.188681] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.189085] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.189683] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 180.190316] Call Trace: [ 180.190537] [ 180.190716] __schedule+0x893/0x2470 [ 180.191013] ? io_schedule_timeout+0x150/0x150 [ 180.191364] ? do_raw_spin_lock+0x121/0x260 [ 180.191728] ? rwlock_bug.part.0+0x90/0x90 [ 180.192057] schedule+0xda/0x1b0 [ 180.192334] rescuer_thread+0x851/0xdb0 [ 180.192663] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.193045] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.193464] ? lockdep_hardirqs_on+0x79/0x100 [ 180.193812] ? worker_thread+0x1260/0x1260 [ 180.194144] kthread+0x2ed/0x3a0 [ 180.194429] ? kthread_complete_and_exit+0x40/0x40 [ 180.194807] ret_from_fork+0x22/0x30 [ 180.195107] [ 180.195291] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 180.195838] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.196231] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.196822] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 180.197469] Call Trace: [ 180.197667] [ 180.197852] __schedule+0x893/0x2470 [ 180.198147] ? io_schedule_timeout+0x150/0x150 [ 180.198517] ? mark_held_locks+0x9e/0xe0 [ 180.198846] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.199227] schedule+0xda/0x1b0 [ 180.199522] rcu_tasks_one_gp+0x3db/0xc10 [ 180.199871] rcu_tasks_kthread+0x80/0xa0 [ 180.200186] ? rcu_tasks_postscan+0x10/0x10 [ 180.200549] kthread+0x2ed/0x3a0 [ 180.200814] ? kthread_complete_and_exit+0x40/0x40 [ 180.201185] ret_from_fork+0x22/0x30 [ 180.201525] [ 180.201721] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 180.202223] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.202638] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.203234] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 180.203884] Workqueue: 0x0 (kblockd) [ 180.204175] Call Trace: [ 180.204372] [ 180.204573] __schedule+0x893/0x2470 [ 180.204872] ? io_schedule_timeout+0x150/0x150 [ 180.205248] schedule+0xda/0x1b0 [ 180.205532] worker_thread+0x15f/0x1260 [ 180.205857] ? process_one_work+0x16a0/0x16a0 [ 180.206213] kthread+0x2ed/0x3a0 [ 180.206496] ? kthread_complete_and_exit+0x40/0x40 [ 180.206871] ret_from_fork+0x22/0x30 [ 180.207172] [ 180.207356] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 180.207886] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.208279] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.208879] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 180.209523] Call Trace: [ 180.209724] [ 180.209901] __schedule+0x893/0x2470 [ 180.210204] ? io_schedule_timeout+0x150/0x150 [ 180.210584] ? do_raw_spin_lock+0x121/0x260 [ 180.210924] ? rwlock_bug.part.0+0x90/0x90 [ 180.211259] schedule+0xda/0x1b0 [ 180.211547] rescuer_thread+0x851/0xdb0 [ 180.211862] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.212252] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.212658] ? lockdep_hardirqs_on+0x79/0x100 [ 180.213009] ? worker_thread+0x1260/0x1260 [ 180.213356] kthread+0x2ed/0x3a0 [ 180.213638] ? kthread_complete_and_exit+0x40/0x40 [ 180.214023] ret_from_fork+0x22/0x30 [ 180.214326] [ 180.214572] [ 180.214572] Showing all locks held in the system: [ 180.215039] 1 lock held by rcu_tasks_kthre/11: [ 180.215407] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 180.216146] 1 lock held by khungtaskd/25: [ 180.216479] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 180.217166] 1 lock held by in:imklog/210: [ 180.217503] 2 locks held by syz-executor/4172: [ 180.217853] [ 180.217986] ============================================= [ 180.217986] 16:52:07 executing program 3: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0xf, 0x67, {0x67, 0x8, "667b37e0ecbdbb40bd8b7e84c24e169d735f668f71a1afe86936a5499c260642d67ced419ae21db8946a34aa8eeb722f60baf871f8523e16c7816b1b7eb322667341755230dd30ee09c1e1f955019ae3555b37846a783340f075a9584ac5b4d5b6cfdcc933"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x40, 0x14, 0xf3, "b430cdbc9820264cbbf806183b54aa730b607d17656fe0ed890e26aaf669c4123f30c5ee3041e4828959d80b46fb37977ad1e60edf126db179266feac210d07566d5fc26b2bbcc3223db971f268e26954ccc70332b2d1de73bf451223609d2ee0d4300a70714c8d68628b0a7f1daa4393e30708966b69ba6b8fb582a3fa9a56d10451949b3ace6d89bc8f1e6e3c427dc7f910a3ca896a87d10b78b9a634ba69256d63f72b159429a7fd675a51e4920b7036154b6c49fb9c9828f729dbb0abde0902c2a13ab127d8f8faf8e4d8d73cd781cce97763638ca09a15e2c05950827deae565bd1e78c43310cdab05c0031dfccd9c765"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x41}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xae}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0xc4, {0xc4, 0xb, "bcacc1f715e9ff253bb633084df46709ae070ac135bacb7328bd8ee0495acbab35bd95b1a07dff91962c50a33350393b8ac121c88e08cd8582d10f7802079ad95494e0ea3ce1e9bbe2bc7de5d240ae6c05691c718a5e8ca91f4bb1ed44c09f70b539e0814e12aec15f70c42ab3dc9c28d359fc56a0c837882aca2e4793922c7ed390f61057e0063dfabba7c88566da3e3df84575aad5e0180cdea857103f6a0b5676d89e7ee12105b3820104f3e2ff6bea6094e6905f2d47c7bc7be1550459668b79"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x20, 0x12, 0xf5, "cc466f6b114007cb6c119c8e730bc7f35bf04dd060986e3e7b774ee5957d8c1b841063867eeec2cb031b5d8f218dda342c7baba1d3e3fe95220a600fa0262d1b1fdf1335388b3b30036ca43dca2feebd0b48eb601d6d3f35ec5cfe7f55f2b21570e9934c807c4733c1e3e1ca298e7d8967c453826814bdfe523e6a309e4fc293e06dd03595afec4938fa22ecc6c0c9bc93b06086369c9dbd6e0e7cf3d1c64af949c17fdcb9e58c80a76e50d7976455c297be1c0d27152f0c84507de914c6b60815f3b68437ec2cd3ae2de7d5e66ca1ce8f5f2f4f4899e32418b4e5bd1fe7c592bcfe68b243b71f51753ce8b8a09a9bfbc3159f3e8b"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x2, 0x3, 0xffff, 0x477a, 0x7, 0x0, 0x800, 0x800, 0x6, 0xfff}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x20}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0x24, 0xbe, {0xbe, 0x23, "44d8bc9a3af9cfcf8605a8de3e0e05e389479a5e25423bba7f3fa264e51e95d428006c026fe12dca77c39d7196400210c57afceec54e9c717fb7df731f59b87723acf7118427d1a0e084b986aa15f49ab1de94c87ff0afa00b9df5ddf26621a80e8f2b13ba1694d9a738acd1b9add5420370caa1297dbf587bcb9c80b6c4f1787fc23a679b943cc26e54c06c4006c3869a3d8f5904baf4ac72b24e82b4a7caa1f4fc1d27c572322c80228edc5590f2bba3bcb236d4343b19e11541a0"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000900)={0x0, 0xa, 0x9b, "ea7c22085dce70a646ab71f91c746617a802c51590981eb72263a348b2cb4c6794d2b890855b64e2a6a32863c73c48f097b9ba38a9b5ae28c37ee94d4f534eefd4ce9aa66a82907da05f364bbcc7d304fb02b049b1220d9b0693a7a9fe4b6f57d95e52d79d715ac5d894a4a9cd9ecfead5c0affd8f038037fc21787b44b700b1e2694a2bf39ba0eb38078ec13b12a45a07a5d73befbfd3f3edf048"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}}) prctl$PR_GET_CHILD_SUBREAPER(0x25) clone3(&(0x7f0000000d40)={0x8b08b000, &(0x7f0000000a80)=0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00), {0x3f}, &(0x7f0000000b40)=""/186, 0xba, &(0x7f0000000c00)=""/203, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000e00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) prctl$PR_SET_TSC(0x1a, 0x5) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000f40), 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r4, {0x8}}, './file1\x00'}) getpeername(r2, &(0x7f0000000fc0)=@nfc, &(0x7f0000001040)=0x80) fcntl$getownex(r3, 0x10, &(0x7f0000001080)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7f, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x40) 16:52:07 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r1, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x80, 0x2000, 0x1}, 0x7844) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) 16:52:07 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000400)) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:52:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="9226c04aa956f497639c1a41ae09482f3782b7f82ebe22038def4f1e0cd10de7b01e2f8a6e5825c4007a6cfaca86e4f1838ae5bffa3b2ada9c05707acc741c53b2f5ec0c4b728030762e6cff33bc112144b036a16c6c5e51c5cbcc0268b380645ca918f2ff9225358c", 0x69}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4c9, 0x9, 0x4, 0xfff}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000010) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x81, 0x6, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x44}, 0x40, 0x81, 0x7936, 0xff}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)={[{0x2d, 'io'}, {0x2b, 'rdma'}]}, 0xa) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r1, 0x18eae000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x80010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000880)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r1, 0x0, &(0x7f0000000800)="64ae68a1c4cd1ebf1bc11fef47a9862019743e972ee398ada26a62b0ad3fe80f193e3e9358ae80a756663bbb2cd9344a51fff7881f5b4f6ea3c8fc17d22698378ea9f917b8f147cd2b28ebe5a7c0f4aec0703eabc1e1ff82c01a8440c97ef5103aca6d75c54fa06cac", 0x69, 0x2000c0c0}, 0xb6) r5 = openat$cgroup_subtree(r3, &(0x7f00000008c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r1) 16:52:07 executing program 4: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000, 0x8cd}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x3ff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x84, @media='udp\x00'}}}, [""]}, 0x68}}, 0x20000040) r4 = syz_open_dev$sg(&(0x7f0000000600), 0x4, 0x410400) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000640)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r5, &(0x7f0000000740)=@nfc_llcp, &(0x7f00000007c0)=0x80, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000940)=0x57) 16:52:07 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r5 = gettid() capset(&(0x7f0000000440)={0x19980330, r5}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) 16:52:07 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) pidfd_getfd(r8, 0xffffffffffffffff, 0x0) 16:52:07 executing program 1: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r6 = gettid() capset(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x1) 16:52:07 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) 16:52:07 executing program 7: socketpair(0x1d, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x5}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r2, &(0x7f0000000180), 0x4, &(0x7f0000000200)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000300)=0x85) personality(0x800000) accept4(r2, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x80000) shmget(0x0, 0xa000, 0x8, &(0x7f0000ff6000/0xa000)=nil) 16:52:07 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) 16:52:07 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x0, 0xe0, 0x0, 0x59}, {0x5, 0x89, 0x1, 0x8}, {0x5, 0xfe, 0x5, 0xcde0}, {0x6a0, 0x1, 0x3, 0x88}, {0x8000, 0x6b, 0x8, 0x4}, {0x7, 0x9, 0x5, 0xfb}, {0x0, 0x80, 0x6, 0x4}, {0x7, 0x4, 0x0, 0x4}, {0xa5, 0x3, 0x8, 0x40}, {0x7f6, 0x20, 0x0, 0x81}]}) 16:52:07 executing program 1: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) r5 = gettid() capset(&(0x7f0000000440)={0x19980330, r5}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) 16:52:07 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x30003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xf0fe0443e47dfb65, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) 16:52:07 executing program 0: ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x1, 0x200, 0x7}) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x401, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpgrp(0x0) capget(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x7db, 0x0, 0xf6, 0x1000, 0x3ff, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x484040, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xaa, 0x43, 0xfc, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000400)) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x3, 0xffffffff, 0x3ff, 0x80000001, 0x9, 0x7ff}) 16:52:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="9226c04aa956f497639c1a41ae09482f3782b7f82ebe22038def4f1e0cd10de7b01e2f8a6e5825c4007a6cfaca86e4f1838ae5bffa3b2ada9c05707acc741c53b2f5ec0c4b728030762e6cff33bc112144b036a16c6c5e51c5cbcc0268b380645ca918f2ff9225358c", 0x69}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4c9, 0x9, 0x4, 0xfff}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000010) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x81, 0x6, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x44}, 0x40, 0x81, 0x7936, 0xff}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)={[{0x2d, 'io'}, {0x2b, 'rdma'}]}, 0xa) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r1, 0x18eae000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x80010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000880)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r1, 0x0, &(0x7f0000000800)="64ae68a1c4cd1ebf1bc11fef47a9862019743e972ee398ada26a62b0ad3fe80f193e3e9358ae80a756663bbb2cd9344a51fff7881f5b4f6ea3c8fc17d22698378ea9f917b8f147cd2b28ebe5a7c0f4aec0703eabc1e1ff82c01a8440c97ef5103aca6d75c54fa06cac", 0x69, 0x2000c0c0}, 0xb6) r5 = openat$cgroup_subtree(r3, &(0x7f00000008c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000900)) syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r1) [ 183.731511] Bluetooth: hci6: command 0x0406 tx timeout [ 187.827585] Bluetooth: hci2: command 0x0406 tx timeout VM DIAGNOSIS: 16:52:06 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=1ffff11001b9eefa RCX=0000000000000001 RDX=ffff888018431ac0 RSI=0000000000000002 RDI=ffff888018432434 RBP=0000000000000001 RSP=ffff88800dcf77c0 R8 =0000000000000000 R9 =ffffffff85b06ed7 R10=fffffbfff0b60dda R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff88801b2738f8 R15=0000000000000000 RIP=ffffffff812a2497 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f560bb16700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9ab70a91b0 CR3=000000000e7b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2036303a32353a36 312032202074634f YMM01=0000000000000000 0000000000000000 5d3731363135312e 30383120205b203a YMM02=0000000000000000 0000000000000000 6568637320205d37 31363135312e3038 YMM03=0000000000000000 0000000000000000 6c616b7a79732036 303a32353a363120 YMM04=0000000000000000 0000000000000000 6620202020202032 3a64697070202020 YMM05=0000000000000000 0000000000000000 61747320493a6574 6174732020202020 YMM06=0000000000000000 0000000000000000 205d323530393431 2e30383120205b20 YMM07=0000000000000000 0000000000000000 732036303a32353a 3631203220207463 YMM08=0000000000000000 0000000000000000 7475636578652d7a 7973223d6d6d6f63 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000072 R11=0000000000000001 R12=0000000000000072 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563e29d10648 CR3=000000001da08000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2035303a32353a36 312032202074634f YMM01=0000000000000000 0000000000000000 5d3132313833362e 39373120205b203a YMM02=0000000000000000 0000000000000000 783020646e616d6d 6f63203a37696368 YMM03=0000000000000000 0000000000000000 3833362e39373120 205b203a6c656e72 YMM04=0000000000000000 0000000000000000 2074616874207961 772061206e692073 YMM05=0000000000000000 0000000000000000 6574616365727065 6420736573752027 YMM06=0000000000000000 0000000000000000 3a676e696e726177 203a7974696c6962 YMM07=0000000000000000 0000000000000000 20205b203a6c656e 72656b2072656c6c YMM08=0000000000000000 0000000000000000 7475636578652d7a 7973223d6d6d6f63 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000