Warning: Permanently added '[localhost]:10788' (ECDSA) to the list of known hosts.
2025/08/31 09:13:09 fuzzer started
2025/08/31 09:13:09 dialing manager at localhost:43095
syzkaller login: [   35.595287] cgroup: Unknown subsys name 'net'
[   35.597021] cgroup: Unknown subsys name 'net_prio'
[   35.601149] cgroup: Unknown subsys name 'devices'
[   35.602792] cgroup: Unknown subsys name 'blkio'
[   35.674516] cgroup: Unknown subsys name 'hugetlb'
[   35.675914] cgroup: Unknown subsys name 'rlimit'
2025/08/31 09:13:24 syscalls: 2215
2025/08/31 09:13:24 code coverage: enabled
2025/08/31 09:13:24 comparison tracing: enabled
2025/08/31 09:13:24 extra coverage: enabled
2025/08/31 09:13:24 setuid sandbox: enabled
2025/08/31 09:13:24 namespace sandbox: enabled
2025/08/31 09:13:24 Android sandbox: enabled
2025/08/31 09:13:24 fault injection: enabled
2025/08/31 09:13:24 leak checking: enabled
2025/08/31 09:13:24 net packet injection: enabled
2025/08/31 09:13:24 net device setup: enabled
2025/08/31 09:13:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/31 09:13:24 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/31 09:13:24 USB emulation: enabled
2025/08/31 09:13:24 hci packet injection: enabled
2025/08/31 09:13:24 wifi device emulation: enabled
2025/08/31 09:13:24 802.15.4 emulation: enabled
2025/08/31 09:13:24 fetching corpus: 50, signal 34866/36697 (executing program)
2025/08/31 09:13:24 fetching corpus: 100, signal 49474/52923 (executing program)
2025/08/31 09:13:24 fetching corpus: 150, signal 58209/63239 (executing program)
2025/08/31 09:13:24 fetching corpus: 200, signal 66048/72583 (executing program)
2025/08/31 09:13:25 fetching corpus: 250, signal 73603/81553 (executing program)
2025/08/31 09:13:25 fetching corpus: 300, signal 79672/89036 (executing program)
2025/08/31 09:13:25 fetching corpus: 350, signal 86400/97029 (executing program)
2025/08/31 09:13:25 fetching corpus: 400, signal 91200/103133 (executing program)
2025/08/31 09:13:25 fetching corpus: 450, signal 95754/108956 (executing program)
2025/08/31 09:13:25 fetching corpus: 500, signal 101038/115389 (executing program)
2025/08/31 09:13:26 fetching corpus: 550, signal 103929/119509 (executing program)
2025/08/31 09:13:26 fetching corpus: 600, signal 107732/124442 (executing program)
2025/08/31 09:13:26 fetching corpus: 650, signal 113454/131233 (executing program)
2025/08/31 09:13:26 fetching corpus: 700, signal 117631/136437 (executing program)
2025/08/31 09:13:26 fetching corpus: 750, signal 119841/139789 (executing program)
2025/08/31 09:13:26 fetching corpus: 800, signal 121961/143063 (executing program)
2025/08/31 09:13:27 fetching corpus: 850, signal 125388/147479 (executing program)
2025/08/31 09:13:27 fetching corpus: 900, signal 128452/151560 (executing program)
2025/08/31 09:13:27 fetching corpus: 950, signal 131947/155895 (executing program)
2025/08/31 09:13:27 fetching corpus: 1000, signal 134391/159328 (executing program)
2025/08/31 09:13:27 fetching corpus: 1050, signal 136261/162194 (executing program)
2025/08/31 09:13:27 fetching corpus: 1100, signal 138204/165109 (executing program)
2025/08/31 09:13:28 fetching corpus: 1150, signal 140782/168555 (executing program)
2025/08/31 09:13:28 fetching corpus: 1200, signal 142625/171324 (executing program)
2025/08/31 09:13:28 fetching corpus: 1250, signal 144029/173724 (executing program)
2025/08/31 09:13:28 fetching corpus: 1300, signal 146141/176712 (executing program)
2025/08/31 09:13:28 fetching corpus: 1350, signal 147785/179259 (executing program)
2025/08/31 09:13:28 fetching corpus: 1400, signal 149893/182177 (executing program)
2025/08/31 09:13:28 fetching corpus: 1450, signal 151784/184918 (executing program)
2025/08/31 09:13:29 fetching corpus: 1500, signal 153766/187762 (executing program)
2025/08/31 09:13:29 fetching corpus: 1550, signal 155156/190046 (executing program)
2025/08/31 09:13:29 fetching corpus: 1600, signal 157102/192751 (executing program)
2025/08/31 09:13:29 fetching corpus: 1650, signal 158322/194875 (executing program)
2025/08/31 09:13:29 fetching corpus: 1700, signal 160157/197461 (executing program)
2025/08/31 09:13:29 fetching corpus: 1750, signal 161779/199815 (executing program)
2025/08/31 09:13:30 fetching corpus: 1800, signal 163803/202497 (executing program)
2025/08/31 09:13:30 fetching corpus: 1850, signal 165202/204700 (executing program)
2025/08/31 09:13:30 fetching corpus: 1900, signal 166547/206834 (executing program)
2025/08/31 09:13:30 fetching corpus: 1950, signal 167674/208723 (executing program)
2025/08/31 09:13:30 fetching corpus: 2000, signal 168716/210595 (executing program)
2025/08/31 09:13:30 fetching corpus: 2050, signal 169693/212387 (executing program)
2025/08/31 09:13:33 fetching corpus: 2100, signal 170664/214126 (executing program)
2025/08/31 09:13:33 fetching corpus: 2150, signal 172070/216192 (executing program)
2025/08/31 09:13:33 fetching corpus: 2200, signal 173462/218288 (executing program)
2025/08/31 09:13:34 fetching corpus: 2250, signal 174612/220189 (executing program)
2025/08/31 09:13:34 fetching corpus: 2300, signal 175879/222112 (executing program)
2025/08/31 09:13:34 fetching corpus: 2350, signal 177013/223931 (executing program)
2025/08/31 09:13:34 fetching corpus: 2400, signal 178197/225816 (executing program)
2025/08/31 09:13:34 fetching corpus: 2450, signal 179721/227879 (executing program)
2025/08/31 09:13:34 fetching corpus: 2500, signal 181260/229934 (executing program)
2025/08/31 09:13:35 fetching corpus: 2550, signal 182495/231789 (executing program)
2025/08/31 09:13:35 fetching corpus: 2600, signal 183511/233448 (executing program)
2025/08/31 09:13:35 fetching corpus: 2650, signal 184487/235078 (executing program)
2025/08/31 09:13:35 fetching corpus: 2700, signal 185343/236582 (executing program)
2025/08/31 09:13:35 fetching corpus: 2750, signal 186221/238125 (executing program)
2025/08/31 09:13:35 fetching corpus: 2800, signal 187032/239593 (executing program)
2025/08/31 09:13:35 fetching corpus: 2850, signal 187821/241066 (executing program)
2025/08/31 09:13:36 fetching corpus: 2900, signal 188641/242528 (executing program)
2025/08/31 09:13:36 fetching corpus: 2950, signal 189703/244190 (executing program)
2025/08/31 09:13:36 fetching corpus: 3000, signal 190755/245835 (executing program)
2025/08/31 09:13:36 fetching corpus: 3050, signal 191348/247172 (executing program)
2025/08/31 09:13:36 fetching corpus: 3100, signal 192418/248760 (executing program)
2025/08/31 09:13:36 fetching corpus: 3150, signal 193195/250166 (executing program)
2025/08/31 09:13:36 fetching corpus: 3200, signal 194133/251699 (executing program)
2025/08/31 09:13:37 fetching corpus: 3250, signal 194947/253110 (executing program)
2025/08/31 09:13:37 fetching corpus: 3300, signal 195935/254653 (executing program)
2025/08/31 09:13:37 fetching corpus: 3350, signal 196657/256007 (executing program)
2025/08/31 09:13:37 fetching corpus: 3400, signal 197750/257580 (executing program)
2025/08/31 09:13:37 fetching corpus: 3450, signal 198875/259200 (executing program)
2025/08/31 09:13:37 fetching corpus: 3500, signal 199663/260554 (executing program)
2025/08/31 09:13:38 fetching corpus: 3550, signal 200354/261822 (executing program)
2025/08/31 09:13:38 fetching corpus: 3600, signal 201309/263230 (executing program)
2025/08/31 09:13:38 fetching corpus: 3650, signal 201890/264438 (executing program)
2025/08/31 09:13:38 fetching corpus: 3700, signal 202785/265819 (executing program)
2025/08/31 09:13:38 fetching corpus: 3750, signal 203766/267227 (executing program)
2025/08/31 09:13:38 fetching corpus: 3800, signal 204560/268504 (executing program)
2025/08/31 09:13:38 fetching corpus: 3850, signal 205248/269724 (executing program)
2025/08/31 09:13:38 fetching corpus: 3900, signal 206039/271000 (executing program)
2025/08/31 09:13:39 fetching corpus: 3950, signal 207110/272435 (executing program)
2025/08/31 09:13:39 fetching corpus: 4000, signal 208144/273825 (executing program)
2025/08/31 09:13:39 fetching corpus: 4050, signal 208875/275007 (executing program)
2025/08/31 09:13:39 fetching corpus: 4100, signal 209801/276343 (executing program)
2025/08/31 09:13:39 fetching corpus: 4150, signal 210319/277442 (executing program)
2025/08/31 09:13:39 fetching corpus: 4200, signal 210959/278591 (executing program)
2025/08/31 09:13:40 fetching corpus: 4250, signal 211978/279997 (executing program)
2025/08/31 09:13:40 fetching corpus: 4300, signal 212824/281230 (executing program)
2025/08/31 09:13:40 fetching corpus: 4350, signal 213555/282428 (executing program)
2025/08/31 09:13:40 fetching corpus: 4400, signal 214401/283605 (executing program)
2025/08/31 09:13:40 fetching corpus: 4450, signal 214867/284575 (executing program)
2025/08/31 09:13:40 fetching corpus: 4500, signal 215609/285735 (executing program)
2025/08/31 09:13:40 fetching corpus: 4550, signal 216375/286878 (executing program)
2025/08/31 09:13:40 fetching corpus: 4600, signal 216949/287946 (executing program)
2025/08/31 09:13:40 fetching corpus: 4650, signal 217488/288976 (executing program)
2025/08/31 09:13:41 fetching corpus: 4700, signal 218096/290007 (executing program)
2025/08/31 09:13:41 fetching corpus: 4750, signal 218713/291053 (executing program)
2025/08/31 09:13:41 fetching corpus: 4800, signal 219268/292103 (executing program)
2025/08/31 09:13:41 fetching corpus: 4850, signal 220366/293386 (executing program)
2025/08/31 09:13:41 fetching corpus: 4900, signal 221193/294509 (executing program)
2025/08/31 09:13:41 fetching corpus: 4950, signal 222028/295637 (executing program)
2025/08/31 09:13:42 fetching corpus: 5000, signal 222795/296738 (executing program)
2025/08/31 09:13:42 fetching corpus: 5050, signal 223327/297667 (executing program)
2025/08/31 09:13:42 fetching corpus: 5100, signal 224053/298712 (executing program)
2025/08/31 09:13:42 fetching corpus: 5150, signal 224393/299614 (executing program)
2025/08/31 09:13:42 fetching corpus: 5200, signal 224858/300529 (executing program)
2025/08/31 09:13:42 fetching corpus: 5250, signal 225703/301583 (executing program)
2025/08/31 09:13:42 fetching corpus: 5300, signal 226342/302588 (executing program)
2025/08/31 09:13:42 fetching corpus: 5350, signal 226772/303478 (executing program)
2025/08/31 09:13:43 fetching corpus: 5400, signal 227242/304375 (executing program)
2025/08/31 09:13:43 fetching corpus: 5450, signal 227818/305308 (executing program)
2025/08/31 09:13:43 fetching corpus: 5500, signal 228343/306177 (executing program)
2025/08/31 09:13:43 fetching corpus: 5550, signal 228948/307117 (executing program)
2025/08/31 09:13:43 fetching corpus: 5600, signal 229421/307995 (executing program)
2025/08/31 09:13:43 fetching corpus: 5650, signal 229865/308828 (executing program)
2025/08/31 09:13:43 fetching corpus: 5700, signal 230831/309843 (executing program)
2025/08/31 09:13:44 fetching corpus: 5750, signal 231422/310758 (executing program)
2025/08/31 09:13:44 fetching corpus: 5800, signal 231887/311649 (executing program)
2025/08/31 09:13:44 fetching corpus: 5850, signal 232468/312522 (executing program)
2025/08/31 09:13:44 fetching corpus: 5900, signal 232942/313388 (executing program)
2025/08/31 09:13:44 fetching corpus: 5950, signal 233594/314298 (executing program)
2025/08/31 09:13:44 fetching corpus: 6000, signal 234234/315149 (executing program)
2025/08/31 09:13:44 fetching corpus: 6050, signal 235087/316110 (executing program)
2025/08/31 09:13:45 fetching corpus: 6100, signal 235511/316922 (executing program)
2025/08/31 09:13:45 fetching corpus: 6150, signal 235891/317723 (executing program)
2025/08/31 09:13:45 fetching corpus: 6200, signal 236339/318480 (executing program)
2025/08/31 09:13:45 fetching corpus: 6250, signal 236862/319255 (executing program)
2025/08/31 09:13:45 fetching corpus: 6300, signal 237194/320005 (executing program)
2025/08/31 09:13:45 fetching corpus: 6350, signal 237636/320746 (executing program)
2025/08/31 09:13:45 fetching corpus: 6400, signal 238257/321552 (executing program)
2025/08/31 09:13:46 fetching corpus: 6450, signal 238661/322299 (executing program)
2025/08/31 09:13:46 fetching corpus: 6500, signal 239197/323071 (executing program)
2025/08/31 09:13:46 fetching corpus: 6550, signal 239865/323910 (executing program)
2025/08/31 09:13:46 fetching corpus: 6600, signal 240308/324635 (executing program)
2025/08/31 09:13:46 fetching corpus: 6650, signal 240883/325390 (executing program)
2025/08/31 09:13:46 fetching corpus: 6700, signal 241276/326098 (executing program)
2025/08/31 09:13:46 fetching corpus: 6750, signal 241930/326912 (executing program)
2025/08/31 09:13:47 fetching corpus: 6800, signal 242396/327659 (executing program)
2025/08/31 09:13:47 fetching corpus: 6850, signal 242797/328385 (executing program)
2025/08/31 09:13:47 fetching corpus: 6900, signal 243147/329108 (executing program)
2025/08/31 09:13:47 fetching corpus: 6950, signal 243598/329819 (executing program)
2025/08/31 09:13:47 fetching corpus: 7000, signal 244072/330520 (executing program)
2025/08/31 09:13:47 fetching corpus: 7050, signal 244576/331238 (executing program)
2025/08/31 09:13:47 fetching corpus: 7100, signal 244889/331878 (executing program)
2025/08/31 09:13:48 fetching corpus: 7150, signal 245303/332601 (executing program)
2025/08/31 09:13:48 fetching corpus: 7200, signal 245841/333307 (executing program)
2025/08/31 09:13:48 fetching corpus: 7250, signal 246180/334012 (executing program)
2025/08/31 09:13:48 fetching corpus: 7300, signal 246733/334757 (executing program)
2025/08/31 09:13:48 fetching corpus: 7350, signal 247140/335426 (executing program)
2025/08/31 09:13:48 fetching corpus: 7400, signal 247759/336111 (executing program)
2025/08/31 09:13:48 fetching corpus: 7450, signal 248075/336742 (executing program)
2025/08/31 09:13:48 fetching corpus: 7500, signal 248441/337385 (executing program)
2025/08/31 09:13:49 fetching corpus: 7550, signal 248855/338009 (executing program)
2025/08/31 09:13:49 fetching corpus: 7600, signal 249300/338629 (executing program)
2025/08/31 09:13:49 fetching corpus: 7650, signal 249747/339273 (executing program)
2025/08/31 09:13:49 fetching corpus: 7700, signal 250365/339971 (executing program)
2025/08/31 09:13:49 fetching corpus: 7750, signal 250806/340611 (executing program)
2025/08/31 09:13:49 fetching corpus: 7800, signal 251202/341238 (executing program)
2025/08/31 09:13:49 fetching corpus: 7850, signal 251587/341857 (executing program)
2025/08/31 09:13:50 fetching corpus: 7900, signal 251865/342435 (executing program)
2025/08/31 09:13:50 fetching corpus: 7950, signal 252253/343042 (executing program)
2025/08/31 09:13:50 fetching corpus: 8000, signal 252611/343638 (executing program)
2025/08/31 09:13:50 fetching corpus: 8050, signal 253069/344240 (executing program)
2025/08/31 09:13:50 fetching corpus: 8100, signal 253444/344834 (executing program)
2025/08/31 09:13:50 fetching corpus: 8150, signal 254064/345458 (executing program)
2025/08/31 09:13:50 fetching corpus: 8200, signal 254511/346061 (executing program)
2025/08/31 09:13:50 fetching corpus: 8250, signal 254807/346642 (executing program)
2025/08/31 09:13:51 fetching corpus: 8300, signal 255371/347273 (executing program)
2025/08/31 09:13:51 fetching corpus: 8350, signal 255844/347877 (executing program)
2025/08/31 09:13:51 fetching corpus: 8400, signal 256337/348443 (executing program)
2025/08/31 09:13:51 fetching corpus: 8450, signal 256865/349013 (executing program)
2025/08/31 09:13:51 fetching corpus: 8500, signal 257228/349592 (executing program)
2025/08/31 09:13:51 fetching corpus: 8550, signal 257560/350142 (executing program)
2025/08/31 09:13:51 fetching corpus: 8600, signal 257780/350688 (executing program)
2025/08/31 09:13:51 fetching corpus: 8650, signal 258280/351239 (executing program)
2025/08/31 09:13:52 fetching corpus: 8700, signal 258601/351774 (executing program)
2025/08/31 09:13:52 fetching corpus: 8750, signal 259069/352314 (executing program)
2025/08/31 09:13:52 fetching corpus: 8800, signal 259421/352829 (executing program)
2025/08/31 09:13:52 fetching corpus: 8850, signal 259877/353108 (executing program)
2025/08/31 09:13:52 fetching corpus: 8900, signal 260444/353108 (executing program)
2025/08/31 09:13:52 fetching corpus: 8950, signal 260804/353108 (executing program)
2025/08/31 09:13:52 fetching corpus: 9000, signal 261191/353108 (executing program)
2025/08/31 09:13:53 fetching corpus: 9050, signal 261447/353108 (executing program)
2025/08/31 09:13:53 fetching corpus: 9100, signal 261674/353108 (executing program)
2025/08/31 09:13:53 fetching corpus: 9150, signal 262020/353108 (executing program)
2025/08/31 09:13:53 fetching corpus: 9200, signal 262313/353108 (executing program)
2025/08/31 09:13:53 fetching corpus: 9250, signal 262745/353108 (executing program)
2025/08/31 09:13:53 fetching corpus: 9300, signal 263029/353108 (executing program)
2025/08/31 09:13:53 fetching corpus: 9350, signal 263588/353108 (executing program)
2025/08/31 09:13:54 fetching corpus: 9400, signal 264116/353108 (executing program)
2025/08/31 09:13:54 fetching corpus: 9450, signal 264596/353108 (executing program)
2025/08/31 09:13:54 fetching corpus: 9500, signal 264858/353108 (executing program)
2025/08/31 09:13:54 fetching corpus: 9550, signal 265190/353108 (executing program)
2025/08/31 09:13:54 fetching corpus: 9600, signal 265538/353108 (executing program)
2025/08/31 09:13:54 fetching corpus: 9650, signal 265967/353108 (executing program)
2025/08/31 09:13:55 fetching corpus: 9700, signal 266342/353108 (executing program)
2025/08/31 09:13:55 fetching corpus: 9750, signal 266700/353108 (executing program)
2025/08/31 09:13:55 fetching corpus: 9800, signal 266998/353108 (executing program)
2025/08/31 09:13:55 fetching corpus: 9850, signal 267380/353108 (executing program)
2025/08/31 09:13:55 fetching corpus: 9900, signal 267828/353108 (executing program)
2025/08/31 09:13:55 fetching corpus: 9950, signal 268093/353108 (executing program)
2025/08/31 09:13:55 fetching corpus: 10000, signal 268417/353108 (executing program)
2025/08/31 09:13:55 fetching corpus: 10050, signal 268790/353108 (executing program)
2025/08/31 09:13:56 fetching corpus: 10100, signal 269125/353108 (executing program)
2025/08/31 09:13:56 fetching corpus: 10150, signal 269466/353108 (executing program)
2025/08/31 09:13:56 fetching corpus: 10200, signal 269712/353108 (executing program)
2025/08/31 09:13:56 fetching corpus: 10250, signal 269968/353108 (executing program)
2025/08/31 09:13:56 fetching corpus: 10300, signal 270266/353108 (executing program)
2025/08/31 09:13:56 fetching corpus: 10350, signal 270489/353108 (executing program)
2025/08/31 09:13:56 fetching corpus: 10400, signal 270916/353108 (executing program)
2025/08/31 09:13:56 fetching corpus: 10450, signal 271230/353108 (executing program)
2025/08/31 09:13:56 fetching corpus: 10500, signal 271540/353108 (executing program)
2025/08/31 09:13:56 fetching corpus: 10550, signal 271855/353108 (executing program)
2025/08/31 09:13:56 fetching corpus: 10600, signal 272198/353108 (executing program)
2025/08/31 09:13:57 fetching corpus: 10650, signal 272502/353108 (executing program)
2025/08/31 09:13:57 fetching corpus: 10700, signal 272883/353108 (executing program)
2025/08/31 09:13:57 fetching corpus: 10750, signal 273253/353108 (executing program)
2025/08/31 09:13:57 fetching corpus: 10800, signal 273671/353108 (executing program)
2025/08/31 09:13:57 fetching corpus: 10850, signal 273984/353108 (executing program)
2025/08/31 09:13:57 fetching corpus: 10900, signal 274235/353108 (executing program)
2025/08/31 09:13:57 fetching corpus: 10950, signal 274481/353108 (executing program)
2025/08/31 09:13:57 fetching corpus: 11000, signal 274878/353108 (executing program)
2025/08/31 09:13:57 fetching corpus: 11050, signal 275203/353108 (executing program)
2025/08/31 09:13:57 fetching corpus: 11100, signal 275453/353108 (executing program)
2025/08/31 09:13:57 fetching corpus: 11150, signal 275702/353108 (executing program)
2025/08/31 09:13:58 fetching corpus: 11200, signal 275936/353108 (executing program)
2025/08/31 09:13:58 fetching corpus: 11250, signal 276347/353108 (executing program)
2025/08/31 09:13:58 fetching corpus: 11300, signal 276712/353108 (executing program)
2025/08/31 09:13:58 fetching corpus: 11350, signal 276949/353108 (executing program)
2025/08/31 09:13:58 fetching corpus: 11400, signal 277204/353108 (executing program)
2025/08/31 09:13:58 fetching corpus: 11450, signal 277504/353108 (executing program)
2025/08/31 09:13:58 fetching corpus: 11500, signal 277847/353108 (executing program)
2025/08/31 09:13:59 fetching corpus: 11550, signal 278193/353108 (executing program)
2025/08/31 09:13:59 fetching corpus: 11600, signal 278649/353108 (executing program)
2025/08/31 09:13:59 fetching corpus: 11650, signal 278975/353108 (executing program)
2025/08/31 09:13:59 fetching corpus: 11700, signal 279316/353108 (executing program)
2025/08/31 09:13:59 fetching corpus: 11750, signal 279619/353108 (executing program)
2025/08/31 09:13:59 fetching corpus: 11800, signal 279904/353108 (executing program)
2025/08/31 09:13:59 fetching corpus: 11850, signal 280175/353108 (executing program)
2025/08/31 09:13:59 fetching corpus: 11900, signal 280515/353108 (executing program)
2025/08/31 09:14:00 fetching corpus: 11950, signal 280714/353108 (executing program)
2025/08/31 09:14:00 fetching corpus: 12000, signal 281079/353108 (executing program)
2025/08/31 09:14:00 fetching corpus: 12050, signal 281490/353108 (executing program)
2025/08/31 09:14:00 fetching corpus: 12100, signal 281754/353108 (executing program)
2025/08/31 09:14:00 fetching corpus: 12150, signal 281994/353108 (executing program)
2025/08/31 09:14:00 fetching corpus: 12200, signal 282387/353108 (executing program)
2025/08/31 09:14:00 fetching corpus: 12250, signal 282798/353108 (executing program)
2025/08/31 09:14:00 fetching corpus: 12300, signal 283082/353109 (executing program)
2025/08/31 09:14:01 fetching corpus: 12350, signal 283385/353109 (executing program)
2025/08/31 09:14:01 fetching corpus: 12400, signal 283713/353109 (executing program)
2025/08/31 09:14:01 fetching corpus: 12450, signal 283961/353109 (executing program)
2025/08/31 09:14:01 fetching corpus: 12500, signal 284198/353109 (executing program)
2025/08/31 09:14:01 fetching corpus: 12550, signal 284376/353109 (executing program)
2025/08/31 09:14:01 fetching corpus: 12600, signal 284574/353109 (executing program)
2025/08/31 09:14:01 fetching corpus: 12650, signal 284920/353109 (executing program)
2025/08/31 09:14:01 fetching corpus: 12700, signal 285246/353109 (executing program)
2025/08/31 09:14:02 fetching corpus: 12750, signal 285654/353109 (executing program)
2025/08/31 09:14:02 fetching corpus: 12800, signal 285910/353109 (executing program)
2025/08/31 09:14:02 fetching corpus: 12850, signal 286094/353109 (executing program)
2025/08/31 09:14:02 fetching corpus: 12900, signal 286325/353109 (executing program)
2025/08/31 09:14:02 fetching corpus: 12950, signal 286569/353109 (executing program)
2025/08/31 09:14:02 fetching corpus: 13000, signal 286705/353109 (executing program)
2025/08/31 09:14:02 fetching corpus: 13050, signal 287266/353109 (executing program)
2025/08/31 09:14:03 fetching corpus: 13100, signal 287570/353109 (executing program)
2025/08/31 09:14:03 fetching corpus: 13150, signal 287793/353109 (executing program)
2025/08/31 09:14:03 fetching corpus: 13200, signal 287977/353109 (executing program)
2025/08/31 09:14:03 fetching corpus: 13250, signal 288225/353109 (executing program)
2025/08/31 09:14:03 fetching corpus: 13300, signal 288492/353109 (executing program)
2025/08/31 09:14:03 fetching corpus: 13350, signal 288786/353109 (executing program)
2025/08/31 09:14:03 fetching corpus: 13400, signal 288955/353109 (executing program)
2025/08/31 09:14:03 fetching corpus: 13450, signal 289135/353109 (executing program)
2025/08/31 09:14:03 fetching corpus: 13500, signal 289432/353109 (executing program)
2025/08/31 09:14:04 fetching corpus: 13550, signal 289647/353109 (executing program)
2025/08/31 09:14:04 fetching corpus: 13600, signal 289948/353109 (executing program)
2025/08/31 09:14:04 fetching corpus: 13650, signal 290310/353109 (executing program)
2025/08/31 09:14:04 fetching corpus: 13700, signal 290512/353109 (executing program)
2025/08/31 09:14:04 fetching corpus: 13750, signal 290780/353115 (executing program)
2025/08/31 09:14:04 fetching corpus: 13800, signal 290996/353115 (executing program)
2025/08/31 09:14:04 fetching corpus: 13850, signal 291310/353115 (executing program)
2025/08/31 09:14:05 fetching corpus: 13900, signal 291499/353115 (executing program)
2025/08/31 09:14:05 fetching corpus: 13950, signal 291792/353115 (executing program)
2025/08/31 09:14:05 fetching corpus: 14000, signal 291979/353115 (executing program)
2025/08/31 09:14:05 fetching corpus: 14050, signal 292217/353115 (executing program)
2025/08/31 09:14:05 fetching corpus: 14100, signal 292523/353115 (executing program)
2025/08/31 09:14:05 fetching corpus: 14150, signal 292749/353115 (executing program)
2025/08/31 09:14:05 fetching corpus: 14200, signal 293041/353115 (executing program)
2025/08/31 09:14:06 fetching corpus: 14250, signal 293249/353115 (executing program)
2025/08/31 09:14:06 fetching corpus: 14300, signal 293465/353115 (executing program)
2025/08/31 09:14:06 fetching corpus: 14350, signal 293811/353116 (executing program)
2025/08/31 09:14:06 fetching corpus: 14400, signal 294021/353116 (executing program)
2025/08/31 09:14:06 fetching corpus: 14450, signal 294236/353116 (executing program)
2025/08/31 09:14:06 fetching corpus: 14500, signal 294404/353116 (executing program)
2025/08/31 09:14:06 fetching corpus: 14550, signal 294658/353116 (executing program)
2025/08/31 09:14:07 fetching corpus: 14600, signal 294898/353116 (executing program)
2025/08/31 09:14:07 fetching corpus: 14650, signal 295125/353116 (executing program)
2025/08/31 09:14:07 fetching corpus: 14700, signal 295417/353116 (executing program)
2025/08/31 09:14:07 fetching corpus: 14750, signal 295657/353116 (executing program)
2025/08/31 09:14:07 fetching corpus: 14800, signal 295803/353116 (executing program)
2025/08/31 09:14:07 fetching corpus: 14850, signal 296033/353116 (executing program)
2025/08/31 09:14:08 fetching corpus: 14900, signal 296261/353116 (executing program)
2025/08/31 09:14:08 fetching corpus: 14950, signal 296450/353116 (executing program)
2025/08/31 09:14:08 fetching corpus: 15000, signal 296760/353117 (executing program)
2025/08/31 09:14:08 fetching corpus: 15050, signal 296970/353117 (executing program)
2025/08/31 09:14:08 fetching corpus: 15100, signal 297165/353117 (executing program)
2025/08/31 09:14:08 fetching corpus: 15150, signal 297328/353117 (executing program)
2025/08/31 09:14:08 fetching corpus: 15200, signal 297487/353117 (executing program)
2025/08/31 09:14:09 fetching corpus: 15250, signal 297754/353117 (executing program)
2025/08/31 09:14:09 fetching corpus: 15300, signal 298012/353117 (executing program)
2025/08/31 09:14:09 fetching corpus: 15350, signal 298258/353117 (executing program)
2025/08/31 09:14:09 fetching corpus: 15400, signal 298459/353117 (executing program)
2025/08/31 09:14:09 fetching corpus: 15450, signal 298704/353117 (executing program)
2025/08/31 09:14:09 fetching corpus: 15500, signal 298947/353117 (executing program)
2025/08/31 09:14:09 fetching corpus: 15550, signal 299145/353117 (executing program)
2025/08/31 09:14:10 fetching corpus: 15600, signal 299372/353117 (executing program)
2025/08/31 09:14:10 fetching corpus: 15650, signal 299589/353117 (executing program)
2025/08/31 09:14:10 fetching corpus: 15700, signal 299830/353117 (executing program)
2025/08/31 09:14:10 fetching corpus: 15750, signal 300114/353117 (executing program)
2025/08/31 09:14:10 fetching corpus: 15800, signal 300332/353117 (executing program)
2025/08/31 09:14:10 fetching corpus: 15850, signal 300884/353117 (executing program)
2025/08/31 09:14:10 fetching corpus: 15900, signal 301071/353117 (executing program)
2025/08/31 09:14:11 fetching corpus: 15950, signal 301274/353117 (executing program)
2025/08/31 09:14:11 fetching corpus: 15968, signal 301344/353117 (executing program)
2025/08/31 09:14:11 fetching corpus: 15968, signal 301344/353117 (executing program)
2025/08/31 09:14:13 starting 8 fuzzer processes
09:14:13 executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)

09:14:13 executing program 3:
mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xd, 0x4, @thr={&(0x7f0000000000)="c0678e6572d9ac0d771587d1dedba40899c93592ea02d98168fccf9011041f42b052113b933d24384350a7a9819331e795ed80980a68f140801f9695cc68e44d65c0a40cd277075a71fd0dbeaf57978ef06fe3186dd736a5526929ffe05fe9ef2f47f838eb0eef6e881ef5e4ade8ba5f4006252946c6314acec0f96c36b52b17838897dac3cda9a7447ff8641cd39845560a8a498386ab6563bf1203fe19bebf1390441cef5da2b42e04c9c097fe1e71e62160ad282922", &(0x7f00000000c0)="aad692ff580f1bf58d59ccc5cd6df05f079ada68a04a3aa2f57261e6ef9eb73c23eeddbab8be0eb6958fd014dbc485f3213620e1c1f22d195eca8862d423268bbabb57b43e035e2ee8c9e34a67cbc05eadb8eaf7aa9f5b008f04a55c834c8308bafbe929dce2434eb04f2c3573f6744f3a26ec5c335a34cae6d9c1b669d390ebaed5d525c766111b55b1568ad90b1447f8058814737a8a9cd20eb572b64336d9470204343048ccf6bda61fd359be7ef08c0a12b1777202d8c61e4fba99ab8ed83a26d13b"}})
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/231, 0xe7}], 0x1)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)={'U-', 0x6}, 0x16, 0x2)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r0=>0x0}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000007c0)={r0, "a72f794d43a06380cebf9efe20d6e0c5"})
r1 = openat2(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x42, 0x10, 0x2}, 0x18)
fsetxattr$security_selinux(r1, &(0x7f0000001840), &(0x7f0000001880)='system_u:object_r:file_context_t:s0\x00', 0x24, 0x2)
syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x6)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x40010, r1, 0xaafc3000)
r2 = accept4$bt_l2cap(r1, &(0x7f00000018c0)={0x1f, 0x0, @none}, &(0x7f0000001900)=0xe, 0xc0000)
r3 = dup2(r1, r1)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001940)={0x1, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x0, 0x6, [{{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0xad0d}}, {{0xa, 0x4e21, 0xc000000, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x4e20, 0x8, @mcast1, 0x400}}, {{0xa, 0x4e20, 0xcb, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x7, @mcast2, 0x100}}, {{0xa, 0x4e21, 0x1, @mcast2, 0x70}}]}, 0x390)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001d00)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x0, 0x200, 0xfff, 0xffffffffffffffa7, 0x7, 0x1ff}, {0x7, 0x1, 0x7, 0x75378484, 0xe977, 0x8}], ['\x00']})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000001e00)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xfff}}, './file0\x00'})
finit_module(r4, &(0x7f0000001e40)='\x00', 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001e80)={{r2}, 0x0, 0x4, @unused=[0x8, 0xfffffffffffffffa, 0x80000001, 0x3], @subvolid=0x1})
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002e80), 0x40042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, <r6=>r5, {0x401}}, './file0\x00'})
r7 = syz_open_dev$hiddev(&(0x7f0000002f00), 0x100000000, 0x10100)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000002f40)={{0x1, 0x1, 0x18, r7}, './file0\x00'})

09:14:13 executing program 1:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x114, r1, 0x300, 0x8, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4381}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf68}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ffc000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4189}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1400)
r2 = syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x6, 0x7, &(0x7f00000007c0)=[{&(0x7f0000000400)="b72afca6f87d08615eca56e4e16563bc17c50106840d77c7445d478da3b7b8b2cd8ef47a9f96076cfae3df55dd4354537c14e1216d4697af", 0x38, 0x1f}, {&(0x7f0000000440)="f6c206b0654410759e49550aa35d55191a499984c98810da0c0a6cfed14739c980369150cfdda060c8725e81dacac5f86a0a5aacc66a42e1d5b1665e228ddc9357fc1ad644fd2859704746f58da5521c", 0x50, 0xfc58}, {&(0x7f00000004c0), 0x0, 0x2}, {&(0x7f0000000500)="f86218a3319203a07aa8fa33c688ac71b987e6950c310ef0617e075e11034d0a4e089a691923668da5b59003e5ed60db93304dc6106af25c29cbe4ce4748b1ffc79c8b09c31d3499ce0413b0445f2bba1cde9b7cd6b6ab894864e4f6b2edd6c26ddac29359a58d05dfacc467090926c216bd118a5872b98068070d8ed2af6b8c48addb749680532be317dc39ccf5ac1e77d8f3161411144e0f6be872e607e7be7f5c5d4134c39be190a65a670c3efb5213db7b778f336db0700f5c8d54561f6b4adc31ba47d057b42b", 0xc9, 0x4}, {&(0x7f0000000600)="e334039daf665a427ce5a681cc3980f9e2ad96464763b32ba39e861396ce5cbeaa49782c95cf978d94fa8bb3e6dfb684e62af043f5958ce90416514744c2ec0bfb904402d6de4ddb9e4bab6b381b14b83d13a84e135f0ebcd6fb40d7b1d63c44282e94fbe19b15ed127d07f545e1c4464bc63133c89d26bae00321bf6e77720775952f4aaaca6aede68462e479f23ccd34baa16062fde2ad4d27a6bd04764dd31bbe91d4bc9db893b1f2cafc2a71017d03013ffad9076d6df4b29e6f696029f657705f4fb4ab8c9e7c19508e373f490ef04e5f3077a8bec73b2d02d6", 0xdc, 0x200}, {&(0x7f0000000700)="e099227eb857931e363aa14a90e3ddd559895291d57219a4195826f05853f8fea417e557e37c", 0x26, 0x1}, {&(0x7f0000000740)="3b6f979345b020bf3afafee11aa167284546f358526a01379460648d91636e108e88a13319ec983758e1cc00285009afb2011e02a0f8e8d55e8a10c4f97e5cca6ee4639f51ab5d78157063a2256e65047eeb30e910751bf8891d6a08d3561a6c2cbd5551e25be39f235a114277b504e65bee2fc2dd262bbdbc", 0x79, 0x3}], 0xa20420, &(0x7f0000000880)={[{@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nombcache}, {@commit={'commit', 0x3d, 0x10b}}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x25}}, {@fowner_eq}, {@uid_gt={'uid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!+.@}*'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]})
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ac0)=@IORING_OP_STATX={0x15, 0x5, 0x0, r2, &(0x7f0000000980), &(0x7f0000000a80)='./file0\x00', 0x10, 0x0, 0x0, {0x0, r3}}, 0xfffffffb)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f0000000c40)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, &(0x7f0000000b00), &(0x7f0000000c00)='./file0\x00', 0x7ff, 0x100, 0x1, {0x0, r3}}, 0x9)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xf4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}]}, 0x5c}}, 0x405c091)
r6 = open_tree(0xffffffffffffffff, &(0x7f0000000dc0)='./file0\x00', 0x100)
linkat(r6, &(0x7f0000000e00)='./file0\x00', r2, &(0x7f0000000e40)='./file1\x00', 0x1800)
io_uring_enter(r6, 0x6b2e, 0x10000, 0x1, &(0x7f0000000e80)={[0x2]}, 0x8)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x1010, r6, 0x10000000)
syz_io_uring_submit(r4, r7, &(0x7f0000000ec0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}, 0x3)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000f00)=r6, 0x1)
io_uring_enter(r6, 0x6862, 0x5b3b, 0x0, &(0x7f0000000f40)={[0x9]}, 0x8)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x10000000)
syz_io_uring_submit(r4, r8, &(0x7f0000000f80)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x4, 0xa, 0x0, {0x0, r3, r6}}, 0x5)

09:14:13 executing program 2:
keyctl$clear(0x7, 0x0)
r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)=']-!#^@^2#}-!\xca-&\x00', 0xffffffffffffffff)
keyctl$assume_authority(0x10, r0)
r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x38, 0x33, 0x35, 0x66, 0x31, 0x34, 0x65, 0x39, 0x34, 0x34, 0x39, 0x66, 0x33, 0x34, 0x5d, 0x39]}, &(0x7f0000000200)={0x0, "1f318f68269b3a49639958b21495345a60881c4666128beb87e79df01c54ff50e65d5df87adafbbc679f273b497dd9d56975e9d8c8ab37ad657d878afdfc5c05", 0x33}, 0x48, r0)
r2 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\x00', r1)
r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "922d24ecd47916c0ecb4121acbb082acc5a30f1fdc32f5c0496b47cb9971c875cf93c3273750c90caf15c987651e59d6548068c21cb2eaf78cc84a080756f3cb", 0x35}, 0x48, r1)
request_key(&(0x7f0000000380)='.dead\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='logon\x00', r2)
add_key$fscrypt_provisioning(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe)
r4 = request_key(&(0x7f0000000600)='trusted\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111', r0)
request_key(&(0x7f0000000540)='encrypted\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='pkcs7_test\x00', r4)
r5 = request_key(&(0x7f0000000740)='rxrpc_s\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', r1)
r6 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, r5)
r7 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r8 = add_key(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)="a1e10f982f1dfebc4a39541b4725fb34790af92f8f7a77f7da5120030e3c8abdc16c30465aa8f76528cbd3574392b334196b1e9e5626fcca987ba3050c750d366133218ebd2a6c2f35e374e8a470c878a3ec475431d08749017f5a0cddf91e13df1a0ebc5e088c0ed15e3850629d2712e68aa55b8cfed9c72febc65c3edb552b8ed1417b0b065de337a069e343028036abff5932f91a7626b59bb2e728c1255e2a45e81e1e8935d4092ea47454c5fef2838969297c0bf1aaa196eac4855656e421a38690bfce9d63", 0xc8, r2)
add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc3}, &(0x7f0000000900)={0x0, "1ab86312b3528629ce8262cea335b4574701a65758bfce147ea82a68019057a72f93ff5e9478f2c0352e8ffda604fc7e9ce20c07bb5e8b1a6af5c677cc4416a9", 0x3a}, 0x48, r8)
add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x62, 0x64, 0x39, 0xc, 0x37, 0x32, 0x35, 0x39, 0x37, 0x33, 0x62, 0x35, 0x64, 0x61, 0x61, 0x35]}, &(0x7f0000000b80)={0x0, "65aa62e2c2dac728dd7462db1dff6b42cffcd7c48236156328805338b1f5481782d9d43e9dd3e85421b76df4bac6f82920512de4a43a82ce7b4f12166aa8eedc", 0x3e}, 0x48, r5)
r9 = request_key(&(0x7f0000000c00)='blacklist\x00', &(0x7f0000000c40)={'syz', 0x0}, &(0x7f0000000c80)='\x00', r0)
keyctl$KEYCTL_MOVE(0x1e, r3, r6, r9, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x1}, &(0x7f0000000d40)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffff9)
add_key$keyring(&(0x7f0000000dc0), &(0x7f0000000e00)={'syz', 0x0}, 0x0, 0x0, r7)

09:14:13 executing program 7:
r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000))
write(r0, &(0x7f0000000040)="7053a53cacdc224138dd3b3ab803ac6db3324b74640cb42b12bf50ed7581ac8bdc4644e3ffe07cb7849afd7afb8f0d06d4aaab3772eb634d7293b819eaa38ea1ee45606ae94966fb759a99c3df1659768fd82c4064bd07445fa572895b8e1502252792588d6f297994ba41da1cc768750c219cd319537cb2067127168a884871163ba6e91e22d74d10bd6e17fec087c2ee5566ed61b9253340346f63b47582df69103ba3b5e203b51e3386676fffdaeeb8acefff20481983b7a40e29e1b6512ea96f0d378abb35b0d82b80fa4a30722d647043238c9ff5763a91e39cae901931abd16490f013a301c891c93d0996dd4847290d61c41065b77b39b743163ff189be72a5e7b34af5c45de63d2a1c7f77a2cbca65f5624e64917bbe993bd64dc50a74704ab3dd2cac815c24e6f3b8b1750c0b5211eec554360b2c4b21617df112a2038452f3a090942c0a3868e0f1550a10194419398ef8be4456085e07b0c2e9563bf88cbbe93c38f9876da3aa608187aa326ff9c4f83558e7d1e18a029b8218a6b225b25d1fe4c351fd6af1cc87beacde616adf7a875f87afd61b3fd36daf3e9e1547e889cf724761878b836c12ab9fbc905ccfdfc8033ddf09a04798c3d68c0b3120b5369d99788c3be05dfafb1d44c62f20f8a28cea966446a24d03ad35cf57b8bc372ce58e58db3774ab1a0d1b3c6846603b321814d320e7ce5c4a2a17825f4735ddd819250af64a040a6b6925ee1c02211723d1e95fb848e22f1da8437b69d078d17d300ba1998c464a0e7fa8d485168637754171f1b04639e1099b0984b48bd647aca4cb02a26ea0e6d264b08370beecd3a7e296ed7d43aae88089ee267b63be81c616b139f6219142160a5d2f9d89876cf0c79e684bb8d85a182c0d0d64f07753f9a474ecdc81ce5c8591a889ec515d5d2548833135e4b584dc7016609a23c1d4c8c3ed5afd4a70df1ee9c726ce7742884d46d6b6a607fa15dffb27aec4e423b55d4ef17cd19a4b7b635f2c4c992ccdf3cf8a1a4c7efe62f7e883438f5b02d60a16c46338a622b4b94bc434f7bdac1fa999e50ac19910a7d75f8f8ffaa5788104f1151bc9f2546d36cc4a04063b0c3634fe2032a9c19b592deb22ba54988c1059a1de079a38e4c9dd794d1a70dfda139b5d1c2581db2a6fe2f99f99da80577a172788e473ba421077ea9f7852cbde98370bbd0a837edc25e3fc11563a41e363d387f2d75b4a6480d404ff0191f246c9b4e4157b42b4b5bbcc1863d068a40ed43a4a1d741fc56f9fcc13caa11a18b60266184edb7f1928a22fd977a44b8c70a451fdb5ddb03c6d4d9676317b2679df3dfb63c08231b006a87790e1d31e61c603fe72897ed03e14aaa5756183d1e134dee7ad92a7d94db3244d16e677d3febedf2a12b34e6c49e9f02f7ea72f22f0c5e15091764c130ec2618827fa02d30d0595a8780b2c6c49249314e90b2f4c8a024760ccf452fad3929b05faa2d60f375bc26dd29899bfe5a2f9542909678183b884b3e58c746be0db31cc8bae1c72289c124081eb7501b950d589ef14db0120e093ac2f3b5c055b889e5aa10122d89900bc705031c700ce82e6914d2200723d62fa86a4715290a42d939e7c477a6a616a1747e4f0b615cefb00c94bc138557e2a45497bbb0f2466ff50a8671d4e56a5eefeae0be4507deeb90f749489fa150979444c3494a35bf3e655ce206558f78a3861031214f978534248bf81ed1171a7e932f4c510f2ca89176fc3d1836ee8c25987d78c227f845a1b0faadebf6f63245c1b047395e58351ff6dcca09507ca45b29aaa147ed04a5d7fa28071ee21d04a4f8ee2ee4fc2d3734439730f11baf331adb7a5afbe7124941f0dff6526ee6f3b044f91f7ece418bd4899e1d76d99c38359c29b7848c41b8d94947d91c0a5da1f4845ab268bad0e11602835197f0f8079a1e584c24b054e59c8bf6aa5a6085de5d035ba9183da899c27b0d2b3087699fe4dbc9b65ac0b8a746d0a0ceb97b75a44750675630a71923f3edef968e49bb8acf9416dd2602fc96776773b48df6f1a343e26096c1568ce5a139d0b86eac33cf86d4dcb3e0befeebf74ba5acd21f64a3d54ec46188e56ae2e0f0e61235155b57f7b247c113a30b83a28e3828d739d879fc4bfa02567a298acfd4be821830afcd4c8ad19ba514521f19f95e4fd1bbb81aa83adfd6a96b0815006f73361450c83964e4d006c6d1f01e81de9afd493e29b270f9565375697bfd7b96c23e5dcf9ed2d1a2f614545582e01ad771888078f898865aa5311c45cd3deef1cbb789393b2e0b5f0bdb752f7f732a574124048cb9a82c102b1791445d9e1f5ceb90d7bb540b9a73d07522b42bf2c957cdadc1b89fa518300a128da17eb65a53a96bb0809e0f656b58760d80b2be215c8cd0e43e5bb9940a670a82e668b5206d1183d6ab8091bf0af773b3416365141a4ea2e875d009ff2f3f23c909c941b531236a1488c58b5559bd136cea324aa2ed85a225ba7d3dfc4c5a038215f96b78ad14a9fdcc943769d73ca8575e59052bb72e0721c9813751914e2ad5dac3907476db549561246b90c86c012640f03c399c6792072b6b36cc94213105f37a81857e1ba32437ca4f4afe62187b6daf2dbe7634be354401d49491fa3f72bc9aa2d6f7917ad90d2d53c230fbed2e20fba52816f8ea99964de026e98de0d79266b3b6b188423fa3cfc483a66b26fea38daf8eef533dffceaf144083935f436430007c676544775de0d53141f78eaecf6a480fa23cb5661e228283c02db130ee71d8b0b4be14d1dc45f5d7ec468bbae7dc053117076be45c89dd950aa40fa15bdb25d011458f2a4205b4e5b8e599e481b10012660fdcd59a3d1cdbccaffdba861e2628827413fbe1454cd2131980168eac60d2ec5192a0ff6fe819ca7dfdfed443fa3efc7f8cb36589080c2e453ed9d4b6badc2a13bd73fa1509aa5529f4e68133d12d2fae9cb7627352f9146544e411771d1fcd96e2ed0cb1b69b44f0b89294f87ef27d084ceed5115e6f762d9f43d4cbb49c253773369117d58ea207a5482645fc049b4d0d4b61cfb2c506e054c2c7b0e89241bed180696640cdd9f9e0807aa10936412db10d9e9180c746a7e7b4d6545ae7fdeff5bd7ff6772fe68313d46bfd4939db69b5fe914c3dd18f9b92e0b0619c2001d8b2a19b74721602f3d7c01875fb622cb7ef2748582451758fd6c3dd5ea47d9dbf0747c9f72df4ffcb734b53381b63bbc1b06d73a9a2783442bd8e7d344f82a563685257aad947391dac767f33cccdf470284e31811ef3014e213f523958148daf5802837f78374b421e38a3167bec0f84384639856a53676896df18dbe6beb2c1d45724a07faf5317f75add7cffca347794bf71341b9dc7fd4816ebaa143610743a16601c62efbd91037a0775402b6789cce46afca89dfaa33df638527f887c2d5438a6989c56f647f6484d593666adf4d3194ab8b13f2ff2755e3f986f8f6b0f53050f732622b1762aa44f792b527978c8f2eac3b8a81bc3a134c011256032b6034c3c7163176f7063355774285db8441866616ff8187129f28b5dc804eab56ab7adc65ca8b7e4c4d34af3dddb0bd2e23665389f286fec8e6a32a5ab47bd906127ce80062d62a5e573abf045f4f430ca3534984d72b58db4d884527474e3d5506484d80f1629a710ff8d1a8819795a1cd9aa184855312ce5369ff9a328d1fbec69d273466136f355232cfd4f046932c6bdc5ac717282b8d32e86073e5fec2bd718841f694de60bc5fc2c5ae5d910b5ad279f9f68289134fc7ad820c2517a4f150dc6f964970dc7ef89cf2a098faf3708d4b6bc0991a0bc3b2c07cf6a78f3fd90d1dfcaf144063fe8851a46be9adc87b7ee38166dd2ac4040ba0f6ff4055099fcaf5a0ac0526abfb10bc78acc25c0ad4001650bff4679f7b4433ae630067a0c99c471dca22dd21261ba6d3c670e56086668463f5713ef5fdc89a99f5eb5c8fbd89fa66bafbf1ef2f052d63ffee51327465fc90abdd7bcfe38d6340d9c75f6ccf36bd0a91a6385b96584f10a4dd6919bb487acdcfc608bb97dd4ccdbbef5b73861649391363d44fc902099d80506d4a3ac49dd7c15ce9579b0d390513cc1b9cc9b29156075b8aba055499db9c40c446c54155a053e5c5f242d055e65b2fa66b01dafbb0f17af73e343251deeacbe510e775b375c63c80e766ece929b10c842611b6009672ba8f4b8b395f984cf24ad6b92405313e68f1bf377ff60b45af4ab50b1de5e44794d903d53bac174b02f6cea66e10a56b35e4d0deda7442a0a4491fe0178a80d98463cc1edfc80942c96a46eefb31f2a9de14dc497bffa059be669556b6b77b96579c5658a70d922baa13f31c4cb8a7a2457cad2943522f7555f17d92a829c4a7dd5473d617e2da835ea3e4ad569cd30a132d4afbbe0d2b90f288c0c53624e0985a445508cb8d8aaa6cac8996ed69d32c9a619d366c2d6351fc29745db7ad9d3a978648afd5cc3e65621027401cfc162e33b465088e99c123eb7e1a4c0d8ed692b67f36013aa2fd67f2c548389b7b7f36458cc5919e32eb1177eaa3d6849de8dbd9acb53998bbbd1af79fb192ed10c7ad9be51c7e7399d37d4bb508484166fbc51cc9ae1efa45a569d6baa4888517db66d0a828ca82beb83c62a6e81e83dea7efdb1263c87bcd15db9a98b9ac2c824a1af390277edf5cbeb0d20944540cf7e006e94113649a1f6b890787e2143a371d59c01ca162f89e0dd280b3b3be12ed64adc8f078bee6bbfef1d160c67da8f9e8b80f7dcfb70ac646dbeaff6d81f47367f5e7355466a192d39b75530f26499a1951d650411da364837606fc6a13915324ce1d8991a264d02c52a32e9dda5a48597bb6676ad51215a606c5cfdf5efd278dbc668f4abd579e3d9e8d053a62c7db5e9c9b7116144e085decc3664c5e82d58fe20b9555c89a3bb23b7fc22567745c5e44c53147c3739dce8a35946963234318233855eb71184f361442917a4a9ee2b9e18a0f0c7e73e0a1d40f42bb7f833608565e0fdd5b1c61a98421728e5dd1f8a4e46fc3784fb2a47e215fc0a970adc2f504a93f1c60de77a8b1fba9c268593d3649f8a879925ba6651ad4bc93fff91e7fb232c4f1dd0e10ea0fc94e5921cfb7589a9298cf5332295ca33af040dd0829d26d1bdb9cae801309104630ed68b2e71d450ac37ecf6642eb92020aa9c6ddc53070ee2da8e92a358f2d8afa18b6cc39f5694bcbb3d4f59345824420c046031eef36cf293e82b7ed9904a9aa7d35fbd132a0eab08a09cb832e30274dca7087a773b8e0f079e2a2d8b2ca994dfd39c755012a44a8cbc2f5fe8dae65f41fdc151296f6cb0ee01c8fb203309a5dd5865f39724bd79d5d790ad97221925cde88d974757060c11147217048949a587a57fb036c4ee224a07b8d0773216ec54913fabad47e9024fd100a70bf76c111539780746f91eac5bd8ffab2f5f46603f204ce54025313a6c773d8000f3cd579451816d585505a5b8e749cc74c4db5b16cddff76a634acf5614a204704f63bf49d6d605243c6fd425a7b0b3fc3db198a84f96093ee06871d2819efd1ccf219e51ee4fdfb1ff18d8f8fa187370710e13db82aa430e6bd5ac4899a90f48417e20a9e693fecd7ffb39fe14848fec98303162b71a962c719d53e172c9b9f1ea3833773140aa1f94a08220e1d46254fb9c603618e8ceb241fb3d54b3092225030dd03ce79246e8d4c5d36e4f33236b8c80079bbd3adecf5d8da225bb5184878ff26ccbfa664371010e177", 0x1000)
readv(r0, &(0x7f00000025c0)=[{&(0x7f0000001040)=""/44, 0x2c}, {&(0x7f0000001080)=""/120, 0x78}, {&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/227, 0xe3}, {&(0x7f0000002300)=""/190, 0xbe}, {&(0x7f00000023c0)=""/254, 0xfe}, {&(0x7f00000024c0)}, {&(0x7f0000002500)=""/174, 0xae}], 0x9)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000002680)=@IORING_OP_FALLOCATE={0x11, 0x435c4dc91e395521, 0x0, @fd_index=0x8, 0x0, 0x0, 0x784, 0x0, 0x1}, 0x9)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000026c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x1000}}, './file0\x00'})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(r2)
readv(0xffffffffffffffff, &(0x7f0000003840)=[{&(0x7f0000002700)=""/59, 0x3b}, {&(0x7f0000002740)=""/226, 0xe2}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x3)
getsockname(r3, &(0x7f0000003880)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003900)=0x80)
readv(r2, &(0x7f0000003b00)=[{&(0x7f0000003940)=""/15, 0xf}, {&(0x7f0000003980)=""/127, 0x7f}, {&(0x7f0000003a00)=""/198, 0xc6}], 0x3)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000003c00)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x9}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r4 = signalfd4(r0, &(0x7f0000003c40)={[0x8a45]}, 0x8, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000003c80)={0x1, 0x7})
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000003cc0), 0x202002, 0x0)
sendfile(r5, r4, &(0x7f0000003d00)=0x8, 0x3)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000003d40), 0x200000, 0x0)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000003d80))
recvmsg(r3, &(0x7f0000003f00)={&(0x7f0000003dc0)=@ax25={{}, [@null, @bcast, @rose, @null, @null, @bcast, @remote, @rose]}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003e40)=""/9, 0x9}], 0x1, &(0x7f0000003ec0)=""/9, 0x9}, 0x101)
splice(r6, &(0x7f0000003f40)=0x1, r4, &(0x7f0000003f80)=0xfffffffffffffff8, 0x200, 0x4)

[   99.487050] audit: type=1400 audit(1756631653.630:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:14:13 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffd, 0x58, 0x8, @buffer={0x0, 0xdd, &(0x7f0000000080)=""/221}, &(0x7f0000000180)="5f4f1176ae654060b10bcc053691cbbefc63e9a4a2faad74bc092414f728d13b54cd207a6d15849525ba95652d9cf69aecb0913386f5f01857a70f77a161cfdb1e7b60b0ab254cb1226ee3687af0d0a07541f986f5796c33", &(0x7f0000000200)=""/149, 0x8, 0x2, 0x1, &(0x7f00000002c0)})
r2 = open_tree(r1, &(0x7f0000000380)='./file0\x00', 0x8800)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x8)
r3 = syz_io_uring_setup(0x3c08, &(0x7f00000003c0)={0x0, 0x64ab, 0x20, 0x3, 0x315, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000440)=<r4=>0x0, &(0x7f0000000480))
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)={0x0, 0x1a8, 0x6}, 0x18)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
r7 = syz_open_dev$rtc(&(0x7f0000000540), 0x0, 0x80000)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000580)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r0, 0x8, {0x0, r5}, 0x7, 0x4, 0x1, {0x0, r6, r7}}, 0x2)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r8=>r1, @out_args}, './file0/file0\x00'})
openat(r8, &(0x7f0000000600)='./file0/file0\x00', 0x100, 0x40)
r9 = open(&(0x7f0000000640)='./file0/file0/file0\x00', 0x113040, 0x100)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r10=>r3, {0x2}}, './file0/file0\x00'})
io_setup(0x8000, &(0x7f00000006c0)=<r11=>0x0)
r12 = syz_open_procfs$userns(0x0, &(0x7f0000000700))
io_cancel(r11, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x2, r12, &(0x7f0000000740)="11937750e2bfb981c8e06b80b6fd77eb07b5465da3417e3cb406b42e556c95f89c52871807f916536b5851d81fdbec427de39405be77649c617c1c587b0b598ad4ebcd0f80f2bcac1ebe445d4deba5a95670d2cd5f6e1b8f061ae9cbc6c3ab90b23e658ffa9e9bbc955a433b70b5a6975a5e84c7b92030d657d8c60040a99249d9c569f36ba98218cf9c8c90e13e23d132bcc79bb7f65addd6813a9f2bbbdc70d5dd7d5fd5ecfbf1f42ff9507e0a", 0xae, 0xffff, 0x0, 0x2, r9}, &(0x7f0000000840))
r13 = openat$cgroup_type(r2, &(0x7f0000000880), 0x2, 0x0)
r14 = dup2(r10, r0)
io_cancel(r11, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x4, 0x80, r13, &(0x7f00000008c0)="09b5688577508ff46210c6b3b01cbf0cd5f097df752a2c8da1ebae40bf8152ba6a60cbfeedcec3d64258fe3d47937f727628c5b84f1431570e7ecab5b46783f638555a369140cce6b64043", 0x4b, 0x2, 0x0, 0x2, r14}, &(0x7f0000000980))

09:14:13 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x23, 0x400, 0x70bd26, 0x25dfdbfd, {0x10}, [@typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6gre0\x00'})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00')
r3 = openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, 0x3d, 0x620, 0x70bd2c, 0x25dfdbfc, {0x1c}, [@typed={0x8, 0x64, 0x0, 0x0, @fd=r3}, @generic="334a6a91053fadb07f0ddf0b7c3e55de6cf4eb4150e6b7988965ccf5c84549cac0a55fd297c87b105c74fe27fe5393ce32dc8cd1b67b56ca674ef6576905d34f751612bfba6a5bb8dadf4d6aa4c0f8e3ef53b15708201c253a1b779880bd02353bf3fe4d234a2e8791fe0d46fb8a3e499f1094b24882203fceb1788c2e4697da4a09317ebe71a2c03f55822c918bce6e91a94b05fd79709bf3c3231259d0c3c46794c46f0c833a20e07b8ce56d39e0"]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x803)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000101}, 0x4008011)
r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x80002, 0x100)
r5 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xd738)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001680)={0x78, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)={@flat=@binder={0x73622a85, 0x110a, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x100a}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}, 0x1000}, @enter_looper, @request_death, @dead_binder_done], 0x1000, 0x0, &(0x7f0000000680)="206d02a9375c3b55db78459cf2ea621d85c2d58a7c5723d16c65db4d1bf46bbf1f8aa92b81c2e9bbee165c2b1a6f187b46f66580c01e7e58bc330c56a45d4dabaceb0e0370099a3d273f9bcb3a1050dd9279d60380901e4778080463c031167b0a051c945578db2df8eca73caad2be40d5f43796922318c156132b7711b6d9c2d72652b78d178e1302eba6430b1b72274c1658bb4d771d78371d50dde2352b9c7ba3753b592d695bf9db43a6faf9664196d5ae19230b0d57686b9e6ba56eb07a69c8928980bf031c67b934a7869aab69228357a61d4a5fe3b59afc142cdf69cab1947a7be630dac967bb1925436745fcb9786d8a719299778fa908acddcef3e0c06f87a333d304580e3abd8766742f118c136b50cd828ac2e6da858c987d29acbd965788d2fe78639f1ede687b618c450929bb28e9f364a9fb449988bca53e860cef426b7d3a8f1a4c80571fb07421121340af7d0ff344ba1da3cb803973f0f4aaec8d21327024cd33b46cac9a1361aa55be92cf7d7c9ff66278ebfca68ce05396ac350fae2249a51dad47aa70e5de6d2c54b96718b9bc9cfe889b2b50291fd9674d02233296d325f3414cb6f0c1809b98069db86a8a8ea2b22baa90778c148e03a811ec274409dd6a08b036a16b7e29293d989c52b3ecc154ec317173e92eab2a982e5a8904f06851a0858f765da25dd77ccaae21354056f3c33bb869d5c9d04141963aea187bf736efd1390778ccc88707a05fefb8b258c0c0f712e905d50e095f99ee34a0daafc1d308116293fbe09a67c60c0cd2fee4866df740d928a5eea0d4e0e265a9a82e643d7da783ba765a5c581bf553b10eae603b670e4c8cc5417f16eae6d94b482032623fbe6a9b9076b780770979564191330e0187a005d38134ffea149266378e0dbea3056bbf08264afc2cf52d2d7b06d82904ec08bd918b583a572971b2f6e3dc9a54d53ca106b1533e5183b350dd4b2ef7a40ce7073c8ba0b49bf23045b7868f5a67556235ccea823b3fa3103f0660f09680c2ed7b2e55507bf426b4e1c7eeacfa2f3c8de5117bc282537bd2a67d2886a17e68c4a1fa1e004db824db8a913a31376a35b2cf1760a5f05aba46f770e463d55a76a8b8f236901991201ef3d51911f4677dac956ef7926006b63993839049bde735f0cc5dac7515e3ad3de79b66a09f933ba71e255f660d5e5274fe2037d76de95a76779b36c9e3fb4fc957091ce81dc2ce827c9d5255eb67b768640e2ffab8efd83b93474d0c0f084a07f1b9e0b012767de92d4bddaaef27d307f60f33d2a64660aba94515168c67aa30bd47c7863049b4602acfa5cc08b7671db56d1387a71b8d482c96b19ee06084f3d81d10009aa33e2049b2924a3384186fcf3c19fe7a560de242896296b84aedc659e4230e3841f0a7cce95aaa09e30ddf707ec67748268065adbf78c9c4a58512a5cb7069d2586f29453d92249d0522ae6a2d4465dcc7e1c1c65e1a08b6dc81ff4fd4dbec130cfce227e21c7329b6e3d40ab529054266da67db409890c0bb8fbb29fcd430cf4d5d92932935293fc304e37d3d8e29db58fc1071ef67a0fd47486af0f65726a8a6f1d2433f223e6943ea077bb0cadcdf30acd3588aa6b2eed99b574314cf0202c9516b3774e2b5d31b151c06d63f4ea85350a68f1bebb18bd28c7cb02474704f4eca1a2203a26d3282ba5b3e6ba703ed3e9541266b4fbbb6ef91b266d59f75c7668529d8a34d3216ead9da346a511f02214444f4cbe6913448167ea65e49d8a280c2cdea69d35fc2ae771b425fbd4d122449ae39584294023354c0d5545a60cc1d62226c5f12b71a4758d5eff1f9670ede3f7666d1de47bf90356865f0bd9ecc3229168eb1e056485aecc105afc5716dd6f978107c3297684f6bc59bf96124357ff3c07857031ae33c8d3538518276ae3812ff8db12982e1649f8f75b76fc593110acc27d19557fab88d40dbd4592c811f4ea9c479d03ccf8a62dddc95c2be435ddd4242501c07b8a5132fdad35e8dea37ba1dc9e4e9f7988059fcb86c76dfe2e3fa6fcbee82f910dd478b9de7fce15aa9c542b558cd8568814b12655a54c5c5bcc111de78c13b236e58f5c195cf58659fa2197126af5c3b60f2cb94151a63967f0b728fd176d6b8084f0d8dda31f01f022c6b12ff8060c66dde35620ae6ed96c785747dde244a4c6950092de8dc027b5a658fb81efdf3179e3a31f300f1940b4dff8929f81c11ccd7ff05a47fef37f5da146ca0f14799a0352146a529bdfdb25d7dc6616b273b7a752edc436171aa4ab6e4a07ff020c7c0684e3301a8bb54ce1e61573c1fd5c688041209bdb91d4b8d74d2d12a42da4b347cb7dd14b6c16d387d01758be0edf9f3b35f6d92069b05251ec4b983dbe0dcc248613c2baf042dda47ca4d46fe0d29ba9c64d63947955237def36c5e338f804159473782f50ea4874c7c0882d89737c95389c6c32f3733f6728f1a9c852bb015bfc69b099098d222b60ad98e53db8378507df8a1d464c2b6e6259a8d7a8301a945850032024b803eea1c4e6fb56cb2e281c81ca00a0dd42c2c09ace0cd99db3add1cb7dfcd5ea36801833e32055014ddf0796f9b4520f4b65091f354108a505ae256a664ee5791b8b7a7fed673500a47185163a66377d022fc0cb61ea300296fcf3503319dc23dc7acd9510092a83b0f183e3e25fb10c9330e95c7291b679557bd6c77fa7a57e97db78b61820b9822a6213ebd8dda272e4332f512f2be7855495e78fb66f42bd18418de3c1086f6c419507d998ead26b366ec4657ff6f81ee8d5a2bd98ea80d296342ab1b3ef48a8a38cf99230bdb2190c4d6f64082521466c12b31665b85ed7a91d3b4d16bb88ce35528eea16f681e820addd3d4bd784a7404d14c366418b446a5b156f189107493def0d123e82ee3a52a042cd2a63c3bd5342d942d76f4d0d390ee3ee725a108bd4a92d3dd4cae25c3420a1bf565e2628b75cfbb0e85b5a8b673c1c220c5cae74359a9f0e38095de7794e422bafd56d41677254db36d8c500e98a871899543ee4c93c0d863ec0d9f3d972d3b916ffd85bfda4a49323f178f1c163298bec0452d336c56c311f7eab24cc491232b52caa43958c867e4e74ad8da8cc1f8567d19f9f3cb773abc5cd89e758769b95e2d304eb62d67847e424a02f4d1c7448377d53609f3a063e992abf49a9e3613d55d193fbf06f0acaed9cc495a0dc64b82206f4c071a2198c46cf68a1399558c38ad4c954f2bb7641a517395f9c9d42a1ad3cba1051068a8857dfa6aec25991eb5241891b5ed26285418f6d36af2a60caeaa3d740428bdf4575cae28c6452008db6d50511d7c112edd6ee58148794de4a9484165dbdbf3c85de3e9775f9d995c509b48cc9089dfaa22e6cb151d61b033926f6a09b7984041eebe7b607d3ba15451572e1f282aaf77b7304ab0083e1b6c6e97bf1262af53b9e5775f0b456ca826ecce4b968716c3fd28004f7c6a036b90f99fa2d5eb51aa2b0d475e1bfad7987817fa7d4369c2017b6c591e15662260bab9f0d56b5dce6ba6a97a53133503668f6d9edf6a8dc75f175d63ea9572512a9796e1f63ce6e045ae398801fb8d8c03d83e4099c49566931cffb997c70f2b77929dbea310ae9fa951f3c77726fce5102c2a8a54ba2f5f3c42372e8a24ce2ed0b45da9afa2c9858649332f3a869741e8e68e01bfa4362f59234fdd4a29ba9afaf27493fa34a7456bb29d458c678b254d21a22193b569ad27292c7697301d11f38ae5600fdbaa815a039250c97140218e83d9cfaa3f3ee42c6db8e38e4ef16b798979f25fec6abafd8dc466550ef2135910d150f94a87326b623e9a1f157e062fc8ebb7b58eef3106a67dbddec6104f26268d5073b84c119f5e999a986cb4a248220d5be8c9d6299a646779f95cac935ef229b7759446a7189de5c009702a689b2450b2cb12d7e48b710f47153759047456e960852f95ae4829958460db874e855955583a8c900da14f79d7570d4f78e5d5bfcd0c593e162328933dca6cf7c32a93a4ffc05dadcfc325d5e32324c30441a61277e96ea9ba313522007994945d8d6a07fe4dc7be57c81e9046685dc20f27339fc02949605eaa850311db8531605067f56dc399c6d155ada627e18355b630a9affef1c5c8d1a9af1b89243463e72e3d2d1743ae68fbd884ca660c5494117454f7c9437d687be9dbfca9e89d8840f8035912b5d5267afac94528127fb217637f6433834617cfdb288d49d3fc28c182b995f85a2a508c528d1c14fa15a756f699793c7b10f486a05294b229029bc7ffcc89e9c9d8449960fd1544cb4edcd28e88f39b4853299ae1b3715ec37f3bc5946ef58b3571813fda5570f3a05bb31fc69d54d29ba34e91880da897edbe30b0339ec595396928a9bccca2e751ff6f5d53983283694e250de72089bf799576ed9bd78708b3d04eee686bbe23fb06219736cbaaa0c3e32d5273c8d7280d788939a2c4f142d1d8e909af9e4d7b37d76b418c7af24928f3f902148ddb304bafb1266a8d525ea0bb4a4f1addde560fbc754ccebd3fedbc79dec21f2862158fc6ef8f03e8e8f1feeac2d42e8620891173c3d5619a25ecc81e824da3273fdd583091a6a249e0730f2ec772d26d7956bb131eb7445c884038980f7dfa0b71ab63ec8121df708bd928e5cbf21465b9eac01c15f5d8d11c8333510ab0fc9f98355a4a550b9b7a40a82a38842f415f705025d3cf62ec21bf69448282219d74f0086055fefb42d4f93c9c72cce9f5f086a2f49a518ea25c563b2a7f114147a28dac577b670b82a44bfe964033b07ff6689ef7d399eb4385380d38497e9717fef01fff8355a6f18b23e42d53f0cfa1eca02f355df06e0f6292fe9c0fef0d3243db17e72f9b96d53179b3a7d6c2bc28e970fe550eb3f3cc7c043ccd4a767c843ddd58eaa41a02b6d5bb8db47bd0a7e0b06eca7352d616c2a3a9123b5e486d5a3198fc0e42d4133d5708e8858ef0d8fb4a4e2060aee6c14f5247d239d8ff7021eef69e8a1ffa4df57274cbefa094e802c4717dfff7fdf576d73acf569160b4cd100ea188495c0df831e4d2585acc057941c8abb40d61b98bffaec4ee42075f58cea8434d4d94511b81191a94950fd5aeba88eb1e08abf495bc10744d90f86d3c89a3b0a48f62515b2c4620146f19723f5ce758fa344ef693753f9451bfda1463f1542b1e33982d5a39116d7fba8859ec88f1907ab3a31b44455ebe887ce479dc4a848eed660e240dd5f7cc68c4b9acd9d42a2c17568def2e08b4e301cce3aadcb1a9ea94cbfc4fcb5385b80c1c38dfe84361d95f0c3b50ce61767e70e2cd4470b7d87c42fc8b78dab3e57beb2468f80ba7adcfd37a84608d2fa030dc7f910565d77b9ad012d4514ea2b1e78e84271a4d0044065a006bc90a345f3045ce63b41064da0143ee8601de5fc838ba19658e3bee9920154b1ebea81e1dacf1daa8702cb91f20db45b304026b72bdf2b5b5dacdd22464576b05d9aea3c252b3a41309e02065ebd79f2a8b652195385919830cd2f57364ccb9853a2277af79721e1f1511d89141a25040e970d41e6accd5ef1c74d3417affed95854f19a256f002db26cddd9152e678aee5ef3d82fb315565d96963ec79283ff4b0816410224c7906004e678082a87e620f9379064a23357c62a14550a0bd2db73fd50361be018bb350ddd862615db4b32ddcf146a4d160b16e3011e60ed9336b9ada6cb2828ada319a3be7bf94ff6f11599107e247069e3bbaeed6d6d0a98306a0ce53de7e3204"})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000016c0)={'batadv_slave_1\x00'})
r6 = creat(&(0x7f0000001700)='./file0\x00', 0xc)
r7 = openat$cgroup_freezer_state(r1, &(0x7f0000001740), 0x2, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f0000001780)=0x3ff)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000017c0))
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001800)={0x0, r4, 0x3, 0x5, 0x4, 0x7})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001840)={{0x1, 0x1, 0x18, <r8=>r6, {0x400, 0x8000}}, './file0\x00'})
ioctl$KDGETMODE(r8, 0x4b3b, &(0x7f0000001880))
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000018c0)='{\xb1)-}(\x00', &(0x7f0000001900)='cgroup.subtree_control\x00', 0x0)

09:14:13 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
fcntl$setflags(r0, 0x2, 0x1)
r2 = eventfd(0x3)
lseek(r2, 0x1, 0x3)
r3 = dup3(r1, r2, 0x0)
ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000080)=""/55)
r4 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x62, 0x4, 0x5, 0x0, 0x0, 0x40, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0xc00, 0x3f, 0xc06, 0x1, 0x3, 0x2, 0x0, 0x0, 0x9e69, 0x0, 0xd0a2}, 0xffffffffffffffff, 0x1, r3, 0x1)
r5 = mq_open(&(0x7f0000000180)='./cgroup.net/syz1\x00', 0x2, 0x0, &(0x7f00000001c0)={0x875, 0x380000, 0x2, 0xa9})
r6 = getpid()
mq_notify(r5, &(0x7f0000000200)={0x0, 0x3a, 0x0, @tid=r6})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff}, './file0\x00'})
ppoll(&(0x7f0000000280)=[{r1, 0x480}, {r4, 0xc002}, {r7, 0x18}, {r2, 0x2400}, {r4, 0x8000}], 0x5, &(0x7f00000002c0), &(0x7f0000000300)={[0x3]}, 0x8)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xfc, 0x2, 0x1, 0x1, 0x0, 0xff, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x1142, 0x0, 0x3, 0x5, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, r6, 0x8, r7, 0x2)
r8 = syz_open_dev$vcsu(&(0x7f0000000400), 0x1, 0x400000)
ioctl$EVIOCSABS3F(r8, 0x401845ff, &(0x7f0000000440)={0x1, 0xf2, 0x9, 0x3, 0x8, 0x7f})
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, 0xffffffffffffffff, 0xf58bd000)
ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000480)=[0x3, 0x7])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0xff703f0cd0213ea6}, 0x4)
perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x3, 0x5, 0x3f, 0x3, 0x0, 0x4, 0x12081, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000005c0)}, 0x42808, 0xffffffffffffffff, 0x7, 0x17, 0x6, 0x7, 0xbe6f, 0x0, 0x3f, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)

[  102.760975] Bluetooth: hci0: command 0x0409 tx timeout
[  102.824489] Bluetooth: hci3: command 0x0409 tx timeout
[  102.888564] Bluetooth: hci1: command 0x0409 tx timeout
[  102.889740] Bluetooth: hci4: command 0x0409 tx timeout
[  102.952499] Bluetooth: hci6: command 0x0409 tx timeout
[  102.952552] Bluetooth: hci7: command 0x0409 tx timeout
[  102.954603] Bluetooth: hci2: command 0x0409 tx timeout
[  103.016519] Bluetooth: hci5: command 0x0409 tx timeout
[  104.808500] Bluetooth: hci0: command 0x041b tx timeout
[  104.872470] Bluetooth: hci3: command 0x041b tx timeout
[  104.936513] Bluetooth: hci4: command 0x041b tx timeout
[  104.937200] Bluetooth: hci1: command 0x041b tx timeout
[  105.000504] Bluetooth: hci2: command 0x041b tx timeout
[  105.001202] Bluetooth: hci7: command 0x041b tx timeout
[  105.002661] Bluetooth: hci6: command 0x041b tx timeout
[  105.064644] Bluetooth: hci5: command 0x041b tx timeout
[  106.856509] Bluetooth: hci0: command 0x040f tx timeout
[  106.920476] Bluetooth: hci3: command 0x040f tx timeout
[  106.984519] Bluetooth: hci1: command 0x040f tx timeout
[  106.986307] Bluetooth: hci4: command 0x040f tx timeout
[  107.048536] Bluetooth: hci6: command 0x040f tx timeout
[  107.049238] Bluetooth: hci7: command 0x040f tx timeout
[  107.050764] Bluetooth: hci2: command 0x040f tx timeout
[  107.112499] Bluetooth: hci5: command 0x040f tx timeout
[  108.904494] Bluetooth: hci0: command 0x0419 tx timeout
[  108.968501] Bluetooth: hci3: command 0x0419 tx timeout
[  109.032508] Bluetooth: hci4: command 0x0419 tx timeout
[  109.034219] Bluetooth: hci1: command 0x0419 tx timeout
[  109.096489] Bluetooth: hci2: command 0x0419 tx timeout
[  109.097154] Bluetooth: hci7: command 0x0419 tx timeout
[  109.097817] Bluetooth: hci6: command 0x0419 tx timeout
[  109.160459] Bluetooth: hci5: command 0x0419 tx timeout
[  117.746654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.747587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.748787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  117.850698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.852002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.853306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.139761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.140732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.143110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  118.204631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.205981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.207239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  118.223001] loop1: detected capacity change from 0 to 129024
[  118.292184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.293199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.294479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.307620] loop1: detected capacity change from 0 to 129024
[  118.332382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.333412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.334768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
09:14:32 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x74, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001000010000000000000000000e00000005000000000000001100fc80487fec864b245e0f3f9be149f8000000"], 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x3})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x1)
syz_genetlink_get_family_id$ipvs(0x0, r2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
lseek(r0, 0x1, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2fe1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x403f})
fallocate(r0, 0x20, 0x400, 0xfffffffffffffffd)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000005c0)={0x1, 0x1, 0x1000, 0xa1, &(0x7f0000000300)="8f5fe45076579a27474308f84a78398f8be4c22ec9ba63239f84e305e5e3ccd93faaf084b1d45d1f193a0437fb70f6e2abc9049ca0d30a197209c2154a0decd49e491a0ba26ed813b299578fe9d09e1c6886338449eb24a3e5e8ac232059d13209d94d1c2472f058be84afbd8e4bb7943f8b10ea04c1977532419403197e2555f908a1e7bcf04bfae7dc54c41bb81478b78407d5d0336bc3596b11a136ceb8cac6", 0x53, 0x0, &(0x7f0000000500)="3a54f46a74a03e2e67982124846bb1ef39b246cdec1c7b3c3ff7b1615a39a9951c5f3264e29d75c7d7f670f965f19001bc0d6d2e313d388e956fbe83d726fdccd9e81da2eab9fd94f8b134ea60e80f39d97fb5"})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10)
unshare(0x48020200)

[  118.366028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.367111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.368504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  118.372701] audit: type=1400 audit(1756631672.516:8): avc:  denied  { open } for  pid=3794 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  118.375305] audit: type=1400 audit(1756631672.516:9): avc:  denied  { kernel } for  pid=3794 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  118.383658] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  118.467459] Zero length message leads to an empty skb
[  118.479454] syz-executor.1 (3796) used greatest stack depth: 23448 bytes left
09:14:32 executing program 1:
r0 = socket$inet(0x2, 0x1, 0x3f)
socket$inet(0x2, 0x5, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
r2 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000180)='./mnt\x00', 0x6, 0x8, &(0x7f0000000680)=[{&(0x7f0000000200)="c6be799a10cbc157e0119cdad9a5b88f4fd0aada4947ebec8f401439f10adc6b5a0daf445d3e044197512169dae6b00999eb0f3d50fcaa777318d0feb42229f2e1565674068bd787193a049c2ac4cb7efdde43a1d4e821dbb2229259c97f69421b4318feb3a9bdfaa6031f0b7cfb8d18132bee36921eae", 0x77, 0x8c}, {&(0x7f0000000280)="e34d2934ef7f1021c860471e7ad0b6568be772c41daa4f8f427add21181fd4a2c43fde2db41b189eaacdf0672814831f167d6e396e2193eb32e875ea1f1a33a26d", 0x41, 0x40}, {&(0x7f0000000300)="3995f3883c6d2261eaaf60cdb24e6eb24f13472b1473d8c2f25d752291628d371c1c6c1314e0fecce980f20a43e32f5d091cdd518a32b36c4c1f683315a213f4982b7cedc26f6ef4c5d4c379bf9e578b5a19e23e7b37461c84fca4fcf9ec421be5e9d78796402c7c18819c19a910dac6318a54fb6bf979d669ad5e5cf97f2cfeb54bac61783563355910f9821bb0e86265d9bc5d341899eb9b0448271ec9008fe97b5fad184ace71ca81d7153c9ad888b3d68d66068cfa1db21961dabeea107b8c6a58c739c1ffff366d730b000bdc92ec49eea6303da5e9ff5e1755646454f651568e4906fd392ded989e9974", 0xed, 0x608ab2d4}, {&(0x7f0000000400)="ce19cb54ab9daa1ee8534c7e9dfc3b47cefcc6622de848188e092115f15c836f39348990a21fc2c93a5c8b1e701fea668cb16765939f845d276483363cc14f86a99c1150712e6056b89e4c505dca2202a6cb80", 0x53, 0x578}, {&(0x7f0000000480)="2028afba0f6439", 0x7, 0x1}, {&(0x7f00000004c0)="8347e04f6ef2fa4fed29f3989b82b0b01acf35fdde4ddefd03556a633993d0e126edab4c20877944a8638018184f5c04d93ff3ddcf6adbbadafbc1853c3f7e75ec83e943c5e54b33", 0x48, 0x7}, {&(0x7f0000000540)="3c1972587db628bfdc56d4ebfaf18ebc3e70a077095a03160b523102e079418c82ba1b1755743df94a931a46e12e160eba252e1ce98bd34739301787e7501bd6f88c2140522ba1425b931b5e893844c90e42683cf48a603779bd53876ca30653c2c08149647bbe7cd684f6498f3709dad86b7d44f53457ded820e4999feb527b5fc0355fc994", 0x86, 0xe75}, {&(0x7f0000000600)="0756523fbdc018bda43ba317d640d8b87ff2ca4c51708298f6f82deda5915e806ec904680ad70f87c1b3a8d41e73b79972bb5c09d3ade4158cb17b6010b50895c491189b1f7dd05721e133b3748017e45b13d95af86c88ba8fe7bb571943943c1f744833b9b293e49a5931861c9f1f7dfaac33a06d406ae1", 0x78}], 0x84024, &(0x7f0000000740)=ANY=[@ANYBLOB='hugetlbfs\x00,,uid,\':,tmpfs\x00,uid,permit_directio,smackfsflooz=hugetlbfs\x00,\x00'])
mkdirat(r2, &(0x7f00000007c0)='./mnt\x00', 0x4c)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x8000000)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000)
r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000)
io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={[0x81]}, 0x8)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4, @fd=r5, 0x9, 0x0, 0x0, 0x8, 0x1, {0x2, r6}}, 0xc8e)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./mnt\x00', 0x0, 0x0, 0x0, 0x2a1c8a1, &(0x7f0000000000)={[{}]})

[  118.547479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.548321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.549784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.677794] loop1: detected capacity change from 0 to 135266304
[  118.690872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.691743] hugetlbfs: Unknown parameter 'hugetlbfs'
[  118.692329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.693365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
09:14:32 executing program 7:
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xffffffffffffff32)

[  118.792830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.793840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.795084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
09:14:32 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
pread64(r0, &(0x7f0000000040)=""/37, 0x25, 0xffffffff80000001)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(r6, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

09:14:32 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0, 0x4084}, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000000)=0x6)

[  118.835705] 
[  118.835918] ======================================================
[  118.836621] WARNING: possible circular locking dependency detected
[  118.837316] 5.10.241 #1 Not tainted
[  118.837702] ------------------------------------------------------
[  118.838362] syz-executor.1/3884 is trying to acquire lock:
[  118.839864] ffff88800fb38ae8 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90
[  118.841836] 
[  118.841836] but task is already holding lock:
[  118.843036] ffff88800fb38f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240
[  118.844764] 
[  118.844764] which lock already depends on the new lock.
[  118.844764] 
[  118.846804] 
[  118.846804] the existing dependency chain (in reverse order) is:
[  118.848544] 
[  118.848544] -> #3 (&hdev->req_lock){+.+.}-{3:3}:
[  118.849996]        __mutex_lock+0x13d/0x10b0
[  118.851055]        hci_dev_do_close+0xef/0x1240
[  118.851572]        hci_rfkill_set_block+0x166/0x1a0
[  118.852125]        rfkill_set_block+0x1fd/0x540
[  118.852649]        rfkill_fop_write+0x253/0x4b0
[  118.853165]        vfs_write+0x29a/0xb10
[  118.853614]        ksys_write+0x1f6/0x260
[  118.854073]        do_syscall_64+0x33/0x40
[  118.854539]        entry_SYSCALL_64_after_hwframe+0x67/0xd1
[  118.855161] 
[  118.855161] -> #2 (rfkill_global_mutex){+.+.}-{3:3}:
[  118.855882]        __mutex_lock+0x13d/0x10b0
[  118.856347]        rfkill_register+0x36/0xa10
[  118.856829]        hci_register_dev+0x42e/0xc00
[  118.857321]        __vhci_create_device+0x2c8/0x5c0
[  118.857847]        vhci_open_timeout+0x38/0x50
[  118.858328]        process_one_work+0x9a9/0x14b0
[  118.858828]        worker_thread+0x61d/0x1310
[  118.859301]        kthread+0x38f/0x470
[  118.859711]        ret_from_fork+0x22/0x30
[  118.860150] 
[  118.860150] -> #1 (&data->open_mutex){+.+.}-{3:3}:
[  118.860847]        __mutex_lock+0x13d/0x10b0
[  118.861313]        vhci_send_frame+0x63/0xa0
[  118.861776]        hci_send_frame+0x1b9/0x320
[  118.862248]        hci_tx_work+0xfb4/0x15d0
[  118.862701]        process_one_work+0x9a9/0x14b0
[  118.863198]        worker_thread+0x61d/0x1310
[  118.863673]        kthread+0x38f/0x470
[  118.864080]        ret_from_fork+0x22/0x30
[  118.864533] 
[  118.864533] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  118.865397]        __lock_acquire+0x29e7/0x5b00
[  118.865913]        lock_acquire+0x197/0x470
[  118.866388]        __flush_work+0x105/0xa90
[  118.866866]        hci_dev_do_close+0x131/0x1240
[  118.867392]        hci_rfkill_set_block+0x166/0x1a0
[  118.867943]        rfkill_set_block+0x1fd/0x540
[  118.868461]        rfkill_fop_write+0x253/0x4b0
[  118.868983]        vfs_write+0x29a/0xb10
[  118.869432]        ksys_write+0x1f6/0x260
[  118.869887]        do_syscall_64+0x33/0x40
[  118.870354]        entry_SYSCALL_64_after_hwframe+0x67/0xd1
[  118.870975] 
[  118.870975] other info that might help us debug this:
[  118.870975] 
[  118.871832] Chain exists of:
[  118.871832]   (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock
[  118.871832] 
[  118.873242]  Possible unsafe locking scenario:
[  118.873242] 
[  118.873901]        CPU0                    CPU1
[  118.874415]        ----                    ----
[  118.874923]   lock(&hdev->req_lock);
[  118.875334]                                lock(rfkill_global_mutex);
[  118.876054]                                lock(&hdev->req_lock);
[  118.876745]   lock((work_completion)(&hdev->tx_work));
[  118.877326] 
[  118.877326]  *** DEADLOCK ***
[  118.877326] 
[  118.877986] 2 locks held by syz-executor.1/3884:
[  118.878479]  #0: ffffffff85620568 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0
[  118.879462]  #1: ffff88800fb38f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240
[  118.880421] 
[  118.880421] stack backtrace:
[  118.880918] CPU: 1 PID: 3884 Comm: syz-executor.1 Not tainted 5.10.241 #1
[  118.881670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  118.882589] Call Trace:
[  118.882881]  dump_stack+0x107/0x167
[  118.883284]  check_noncircular+0x263/0x2e0
[  118.883760]  ? register_lock_class+0xbb/0x17b0
[  118.884266]  ? print_circular_bug+0x470/0x470
[  118.884771]  ? stack_trace_consume_entry+0x160/0x160
[  118.885335]  ? alloc_chain_hlocks+0x342/0x5a0
[  118.885835]  __lock_acquire+0x29e7/0x5b00
[  118.886295]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[  118.886881]  ? rwlock_bug.part.0+0x90/0x90
[  118.887351]  lock_acquire+0x197/0x470
[  118.887772]  ? __flush_work+0xdd/0xa90
[  118.888205]  ? lock_release+0x680/0x680
[  118.888657]  ? lock_release+0x680/0x680
[  118.889095]  ? lock_chain_count+0x20/0x20
[  118.889554]  ? lock_chain_count+0x20/0x20
[  118.890013]  ? lock_acquire+0x197/0x470
[  118.890456]  __flush_work+0x105/0xa90
[  118.890875]  ? __flush_work+0xdd/0xa90
[  118.891305]  ? queue_delayed_work_on+0xe0/0xe0
[  118.891811]  ? hci_dev_do_close+0xef/0x1240
[  118.892289]  ? __cancel_work_timer+0x2a9/0x4c0
[  118.892804]  ? mutex_lock_io_nested+0xf30/0xf30
[  118.893319]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[  118.893898]  ? __cancel_work+0x250/0x2b0
[  118.894346]  ? trace_hardirqs_on+0x5b/0x180
[  118.894822]  ? __cancel_work+0x1bb/0x2b0
[  118.895270]  ? try_to_grab_pending+0xe0/0xe0
[  118.895757]  hci_dev_do_close+0x131/0x1240
[  118.896226]  ? rfkill_set_block+0x18f/0x540
[  118.896714]  ? hci_dev_open+0x350/0x350
[  118.897155]  ? mark_held_locks+0x9e/0xe0
[  118.897606]  hci_rfkill_set_block+0x166/0x1a0
[  118.898102]  ? hci_power_off+0x20/0x20
[  118.898532]  rfkill_set_block+0x1fd/0x540
[  118.898990]  rfkill_fop_write+0x253/0x4b0
[  118.899455]  ? rfkill_sync_work+0xa0/0xa0
[  118.899915]  ? security_file_permission+0xb1/0xe0
[  118.900450]  ? rfkill_sync_work+0xa0/0xa0
[  118.900912]  vfs_write+0x29a/0xb10
[  118.901306]  ksys_write+0x1f6/0x260
[  118.901710]  ? __ia32_sys_read+0xb0/0xb0
[  118.902160]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[  118.902746]  ? syscall_enter_from_user_mode+0x1d/0x50
[  118.903316]  do_syscall_64+0x33/0x40
[  118.903728]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[  118.904294] RIP: 0033:0x7fd0fc57eb19
[  118.904714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  118.906765] RSP: 002b:00007fd0f9af4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  118.907608] RAX: ffffffffffffffda RBX: 00007fd0fc691f60 RCX: 00007fd0fc57eb19
[  118.908401] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003
[  118.909200] RBP: 00007fd0fc5d8f6d R08: 0000000000000000 R09: 0000000000000000
[  118.910001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.910790] R13: 00007ffd93708fcf R14: 00007fd0f9af4300 R15: 0000000000022000
[  119.273807] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht'
[  119.297125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.298177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.299060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  119.314717] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
[  119.350586] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht'
[  119.351394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.352562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.361930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  119.389100] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht'
[  119.400203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.401012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.401843] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  119.407702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.408588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.409374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  119.425522] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht'
[  119.493372] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht'
[  119.494249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.495037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.495893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  119.526576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.527374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.528411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready

VM DIAGNOSIS:
09:14:33  Registers:
info registers vcpu 0
RAX=ffffffff8119f418 RBX=ffffffff856cf484 RCX=ffffffff8119f491 RDX=0000000000000000
RSI=ffffffff859945b4 RDI=ffffffff856cf478 RBP=ffffffff856cf488 RSP=ffff888045baf7e8
R8 =ffffffff859945b4 R9 =ffffffff859945d8 R10=0000000000032046 R11=1ffff11008b75f0e
R12=ffffffff856cf484 R13=ffffffff856cf478 R14=000000000000000c R15=dffffc0000000000
RIP=ffffffff81107927 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555593119400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb323cb96f4 CR3=0000000045bb2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822e3fc1 RDI=ffffffff879f71c0 RBP=ffffffff879f7180 RSP=ffff88804720f2f0
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001
R12=0000000000000020 R13=0000000000000020 R14=ffffffff879f7180 R15=dffffc0000000000
RIP=ffffffff822e4018 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd0f9af4700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd0fc688d84 CR3=0000000045d0e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fd0fc6657c000007fd0fc6657c8
XMM02=00007fd0fc6657e000007fd0fc6657c0 XMM03=00007fd0fc6657c800007fd0fc6657c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000