003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) io_setup(0xd1e, &(0x7f0000000080)=0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) io_submit(r4, 0x2, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x81, r5, &(0x7f0000000440)="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", 0x1000, 0x1, 0x0, 0x2, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xff, r7, &(0x7f0000000180)="7ce3a6c624f6c32d8a4fd1b00902e218fcc59c05a4f42f3f32205f4552ffa98d6e11f0b3b3a65c26669a3e1974fc08b370e4ba43d303594a1c2db79a2de89374acc21a1097a7fa2c809b3aca0ca11e812e22bb46d165f85ce9a8a2fa0332968c7dcecd94cc86586675e2b41d11c38a9958fdd85e85de9d5ed03b0fe2534b14650e17ca07406b3ad1459718e0f485b6d8b08716d8d42763d93beaae0f41069e30e4b61c01121bc1c545e9211385b551fc7dab1f9bb28728", 0xb7, 0x7fff, 0x0, 0x1, r10}]) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r7 = accept$netrom(r3, &(0x7f0000000280)={{0x3, @bcast}, [@bcast, @default, @rose, @remote, @rose, @null, @netrom, @null]}, &(0x7f00000000c0)=0x48) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r8, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_NMI(r12, 0xae9a) ioctl$KVM_RUN(r12, 0xae80, 0x0) write$binfmt_script(r7, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r8, @ANYRES32=r3, @ANYRESOCT=r8, @ANYRESOCT=r6, @ANYRESDEC=r12], 0x208e2ab) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r14, r13, 0x0, 0x10000a006) [ 752.184104][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.190461][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 13:01:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000006840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f00000068c0)=0xc) (async) r7 = accept4$alg(r1, 0x0, 0x0, 0x0) (async) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) (async) getresuid(&(0x7f0000006900)=0x0, &(0x7f0000006940), &(0x7f0000006980)) (async) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x4) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r11) (async) r12 = getegid() (async) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000006ac0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc, &(0x7f0000000700)=[{&(0x7f0000000180)={0x44, 0x41, 0x718, 0x70bd25, 0x25dfdbff, "", [@nested={0x31, 0x46, 0x0, 0x1, [@generic="25acbaf594178e277c652534a40b6a4daa", @typed={0x14, 0x74, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x92, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x44}, {&(0x7f0000000440)={0x23c, 0x15, 0x10, 0x70bd25, 0x25dfdbfb, "", [@nested={0x21d, 0x2, 0x0, 0x1, [@generic="3cfceefef3c37cf83bc2de0e094a1bef61fdb2943caa692cafb04d0e5e4fca531e45ba34717b4b2341e5cc783596fe735c4e145d87560fd6f9abe36686bddfe2217be0d5dc42c0ce48ca798cf72fadb869f3b4112b429a866f14333cf8394129f1753ee30c7034bc7faf81bcf6eaddeb331a5dfe7e3c671c7ddfcd186524c4d70fca58f38b7c1233a8dac8", @generic="efc0fe53c90d7f541f9aeaa75e93967afc6e2789ec243284e63e2b97b36f92a272c8662b58b20fe44d20d8ea3fcd", @generic="1116bd6b49f24b25314810982f44999ea6b358013ddc88b3c20f5cae8f1529e18751aa69da43b0dbe47d4cf8295cf4356e74ba3a7bfbfed92208861fe8428ddc6579e11fc9261f7039b09deb59cdf9902302b6a186ff07d39c1f693518c9d3", @generic="c74f76d247bae5562de77286760dbb1d5e65", @generic="29c4976f23560f279e3c5324ea1528ab6adb7da92cb0fb89224153812ca1d8cb72a22ba82a6ce3b6cc87f30cd9f3347383648971a8c083501d80a1862ee538cb154ff8699fbba092aa562475f6ae56c346612ec1aeacb2f98b117edd31bae2bb8d8f1326b9f7c81ee6694b17b21843a6151cd85446fb4a09d3087178ec4add1c04b9abedfed1a5a8011b1cca61ae451a25ea01f0319a210377117af161f23be859ee85b87322c087e38bd650d1c82bf5731fadc3fcd4118fe6f2a86eed46186b23ee639e2798d2edf446932175300f128d019f6dab548d4ef7291023adf509b09e916f2292d294ce9b62f4613f4be4"]}, @nested={0xc, 0x80, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x236}]}]}, 0x23c}, {&(0x7f0000000200)={0x1b0, 0x14, 0x100, 0x70bd27, 0x25dfdbfc, "", [@generic="ad6509b733b6fea62e84a6a1169d9e9f3215d77f070f4da33cc55bbaa06083ef5735c5e2d5529f0507a439d27d04669a400d1127346991dbac8d5eb30efda38ad6598db3b02675d7505dff28dd5bdd2c85300c913f358b32c57eaf5cf9bb11d983692caaf5bb839335357ac8dfeaac37a3cacf0897bfe5da87dcd3e5ed6f4e1b02c84d6a1b50b048e1dea05e501c4a8f5dc70c57934f0efe0d7b94931fcafeaa4f86160dba3b45b65b72ecd484145c3365ecde3b8454ec5f0ee77b6c9f402ee2e7a208", @typed={0x1e, 0x5d, 0x0, 0x0, @str='cpuacct.usage_percpu_user\x00'}, @typed={0x8, 0x43, 0x0, 0x0, @u32=0xfffffffe}, @generic="40a0ac495eff1c06da8aecac22dbf0f8b99619b6bb9531052cdcb3d1cf6076679e0e081715dec8802737f1e3179b218007cc0fb8f6d41c735e5783f65ffd49067d1c08c09a2a88748f894886c7581cf1fcf0db592b8e4ffb286f4117ea39c123be8bd22f2eba008bd96f46b57e84f99667f3fdca5c37f25d51de42b6f6d9cc148f520cd44cad9594c4d161d1ed08e84b8866d9b8aa2c281ea2310e6564797bbb904af7", @typed={0x8, 0x63, 0x0, 0x0, @u32=0x100}, @typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1b0}, {&(0x7f0000000880)={0x13e0, 0x21, 0x4, 0x70bd29, 0x25dfdbfb, "", [@generic, @generic="88991d679f152a115f4fbd4b9f8cbdca1147b767c74416ba6f3a8851574e09e7a71f0625e16d77c19035e7406bd32f2b19678b8b19ce2f7e46b0bf29d9698a3bb6ca6d22f462330a353971fd78542aad771c2384fce1c6d7a29e8368acee1f5951235069bba549b54552c0cd61a506393d3326048f7c85d6a439ca51c00b9bbb754aa2b63484dd4008d3e90f71aeda64e09d1dabbf35b7b0940d218271fe4e90fbf111578d76e1dc", @generic="d12f074df518b3289697cfde3aea8e6d7df27daa2d853c711c778cade44c6cf784b8181c8b6b33d336bddc326ba812877693206e147f23b69774434d3d2dcfe9951fe361998215532283e77aa437f671964deeb285c6d6dc12045eb439426252daade536def6a49ce5b50a317bc1a7319cebfedcd915a1a57f741ed766c86d4803e6eb6ed3e6526e8c3cee27b20646", @generic="3f5844884dcd776a5452846aa6bfa7a54509ca6a98b10f2b453a9f3daa882cf31771fe4531216bc6a4c01a6d", @nested={0x1191, 0x0, 0x0, 0x1, [@generic="47aa488a56f19b1fcd7dace0c32adf49df80753e6cbdef85e6f211c897281c7117abeb7c4f10ebfeee392e029bd1813546e1b5bf7da4c518568e71ace77fe77054d77d5ff96af329fcb87bdc7f603aefefb3c0db2bc6e7990c4178d39cc6535b5639af6c701f9c253eb8a3f6fbb1e952bab772995ea6dde4ad867dc0f3c2daad714157dd9039a33542b477256ae3e7402a6b32020a", @generic="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", @typed={0xc, 0x84, 0x0, 0x0, @u64=0x6}, @typed={0x4, 0x36}, @generic="a4911a3c140efb401508b67a3c0d02ce8e8b425ef6ebb4b5bed1cfd4bd41e0da2ded897ecb25e75350f0e30b660506a4a0ad833a4322b612a171dced91abd265fb3126120a27945eb65e659b026e6eb09ca7ac349a1a1dbd12d1b0545605f2f55ad7a0b3b27d0c588b8fbfe1400f09527f4f88eac2dc60e1092cd30b53c4eab870610ddeb6527ffcccb5dd0616c5e6cb72a470642ca1e8a31f2cee6e1c9668af7b1567cc8cfb341aba1ff2026f4d9d8ced3d5bfb1141bf28ca2dc8f65258753a6ddde8185d520f712a7836ffc10462886304f29b85bccf0314a47ff90f893ebba9f8a9b906e51ef3"]}, @generic="f738508d48499c1ed361e83636a4d7a3b4e288e2fcc119632340806325e409fc081e65a4c6f695610169e29d858be8468959dc0fb74c957db021472dcb8a0840305f2fe4f8ed398c928348087834c0de64199a30d47c3c47ece894799300b929656ce10e6760df07a5ba77e6d8818cfc4b59f19b1dc115d6f6f448483382be6266ce6440439908150e402aa607b7d59f7f0ad18add3d6b7f01ce80b20210fa3c787806fc9d46ce258edd0e1a908511799fd3e34d535c2899672e6daf5b14a58cb94d6f61c6e5793f4c0ed7dcee9ab62f0230fa8b0c0bfc"]}, 0x13e0}, {&(0x7f0000000100)={0x30, 0x15, 0x10, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0xa, 0x0, 0x0, @str=']\xf0\xd1\x00'}, @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@loopback}, @typed={0x4, 0x28}]}, 0x30}, {&(0x7f0000001c80)={0x2240, 0x12, 0x1, 0x70bd27, 0x25dfdbfe, "", [@generic="fc48ec62aa5833fc43deadc42a1cfc746c92185a91c56cde7a214dbee2b27a7cfcd9dbf0120afdfc4a7c6fdb47bbc32d60158f8ecbdae534f913adca8cb4c5171df0c39f3c93bbeebf0fbfef685e300eb26ebddc441fb854c421602292a23f5ca094bbcda174aa2d0fa86e6283453b74b592f380293c7b8f81ed7646567aff1d04b219978213240f1478628698d89e96be2fa9bf81827f8275cee85dfcd70724c1cea1659aaa88fb4be472632a5d65f4e2", @generic="f95eeef8eca6bab4e09f24df6386bf3fb96c02d39ebc66c3fff83bce9b0612fce1203e9703c333b8bce9a9dc1dce9f7e96c20ec564820bdc9be43dd6fb47e6074131227d9c68231617e9f9b892", @typed={0x8, 0x2c, 0x0, 0x0, @u32=0x3}, @generic="e49bfae57b46e0fc8026135232194436cd3d1aa8689f948571fe62159f6006", @nested={0x1098, 0x68, 0x0, 0x1, [@generic="49b9495c19e8a7e99d818f905eecd3e191a12530f3ff6c78b4dbf99b5173b067a942734c21f5de508cd100684d0b261bd25c59bd21398382128deeaf141dfb2b14f6428e3fda1bd7985197c46d3a9ec233a0c2148066e65467", @typed={0x8, 0x43, 0x0, 0x0, @pid}, @generic="7c890935bb0a1adda0a72642190a01413977f67af44b1e21ddab4155144021e24d4e80f40812798c28cdc8", @generic="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", @typed={0x8, 0x83, 0x0, 0x0, @u32=0x7}]}, @nested={0x55, 0x72, 0x0, 0x1, [@generic="35aaf5d322bda1dfb3236f82a89a4101eb5707b457ffcc6680cfcc", @typed={0xe, 0x50, 0x0, 0x0, @binary="1efd5f1e1ac6071e4a5f"}, @typed={0x8, 0x7f, 0x0, 0x0, @fd}, @typed={0x8, 0x65, 0x0, 0x0, @uid}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x5}, @generic, @generic="85b1d16e8358a2a9ef976937410c"]}, @generic="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", @typed={0xe, 0x87, 0x0, 0x0, @str='\\\'\\-{-\'*^\x00'}, @typed={0x8, 0x1a, 0x0, 0x0, @pid}]}, 0x2240}, {&(0x7f0000003ec0)={0x304, 0x17, 0x800, 0x70bd25, 0x25dfdbfd, "", [@typed={0x4, 0xa}, @generic="4f7bc80182390c17fce7eac7f4a9b49ef202c6bee75a0ad042d0affaaee90f389312c9218370cce6592348023647a6f0a41adebe7abb44d999995fffe501b37c92381d99684642ffd77651503c4a0f08a5d75ad1b81a3a4cb3b6", @nested={0xe3, 0x77, 0x0, 0x1, [@generic="64a6ddf7f47538a271e006df10d406bb5476829b4dff1b41e422b710d06b46f35c78417f5052ebe6cab9155faa6bfe86f8fc87db47efb2819c9e590c56b57601be0f9655abdea09299e27b3b46dec8acdba7643d655e72f755a3ea1bb95d94ae2604737cb303398f24c37dc4a5952bc10ce640ea4cfdc276faa72c64471a33fbf484124e3aedcf30b347d916777c081da57537a39d6bb5efc15536f415eb47e5a33d22a5a3fb3ff5df30e47793d3bdfde540105dd49685fde6d0366a2231bcf589fb7f70121fec4842a61df1ceecadf19903ca77d87604", @typed={0x8, 0x74, 0x0, 0x0, @u32=0x1}]}, @generic="17a05330851465ed2b4a0544c22d2a8f7bae01109c0dac9131f868c30e2834da2b8961b20036013be36d6c156610f0ecfd28ba7cf81173d4a96217fafdf126c16ed3f234a77e46cf8b4ddd49b9d44f76a401c9af440c99519136d57554ff95b4a70b148906c4fc5d8be097b2b85ce377ca21fceda4a603134e479e45b5428c0e4654dd29eae582445c73ed88af08ec5650d1fe84536a1d202d6474c7b2b2dbd28484dfe36ff6e5cfcf6586eca3f1bca1b1900240903b390c9bbbdf94ddf9b98f7ea0f0a83756ef53d97308adf92afb8fe5bf42aa089ab76fdccb5e6e650e07819a2593f05c5bebf93b24b15a7eb6d57036f62404f23cd119b7fd2866", @nested={0x7e, 0x10, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @str='syz1'}, @generic="2c6dfe2ce1d4fea436c4f3e877d5b9d1526dbca63f1a08a05620f1565d9b56480b247f03722a145cba80efae67b86c9315917172b9ab15938c360fbf2ab516f20c1dcf970cd55ce6ee912e202fbe3c1662fa9025408d8bba52fa38bc06a6e3792fe3bcf1d3c3830892bf", @typed={0x8, 0x37, 0x0, 0x0, @uid}]}, @generic="65d3964759b841c56896c24f58f781da456510e0e511650cbe3187fa869df2054c91ae6ff720cf1f2d027f", @typed={0x8, 0x87, 0x0, 0x0, @pid}]}, 0x304}, {&(0x7f00000006c0)={0x40, 0x2f, 0x0, 0x70bd2c, 0x25dfdbfc, "", [@generic="4634b2420e00f8571703", @generic="241e95a84d7ff7b513ff724a6977e493d1096a830f509efeac197c6a7772a06b1da6e462c4"]}, 0x40}, {&(0x7f0000004200)={0x248c, 0x10, 0x1, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x1a, 0x0, 0x0, @fd}, @generic="2ae34c6e0faee0d9b25a176510c4a9a800b23479cc00e0c4ee7eb0b087ffa4e3e0020f5c61016e045356a2cc2dce9ffb5fdfdbe017511d011258720f9b56027e1fe55aced07032c8a0339471cdb6797f69c3256b2cc6d42ff19862ee2bb5a6eb035ac8548e5cca559d91c14f66ad81f6eef1", @nested={0x22a6, 0x92, 0x0, 0x1, [@generic="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", @typed={0x8, 0x1f, 0x0, 0x0, @fd=r0}, @generic="2c9db0207352fb44304fa4f745fe3e8a95876c74c7cdd46196b26e4057b19da7adbdf64525d35a5c031109d7da66d5485e5dceaeb79e9bd90f85", @generic="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", @generic="58e7569e070e048785a5468241fa283cbbb7a92255f5ab7c0aea8f7a76d09373b1e55cd3080a796efff336ab92e8a6fe9e0146fbf5549662dda29c701ab6d23fdca7004959da1d4c78a71b9842f6f3f46cd9aa3001dd1a6da36fd1bb64ce7b206865afd9bb4c36c8309433edac0a0b92d3a073c17c5cd8e4dbaa230506563922414bc6992d301dce0da34a86297eda47cce470ce385c00ae766228b214ebdc1705f90b81417237be995d3244fbe4d0e1aa440ffc6dcad4254cfd01b8acd3ac8bc9078a59cd89e42f", @typed={0x10, 0x33, 0x0, 0x0, @str='(}@^^$}W,^$\x00'}, @generic="81f3504cc5c7a476e81de572b8343cf07f09cdf7f79612341436fbacd71d994ea60f91de44b6135892c121a60046d5268cd8ce74679a52b44f70a4cae1b0ffc68536467a21ccaf7ee19e923fe4df0e5434990615356c6d48d684ff53ecbe5357570e830b2b6499d83fecf936fb748c0c88825b625518628a67a84dba12b3052fc529b7426c243aa28f5e1b5a4ffb9b2601777f2d81da56d8b6280968604a1a9891e7ea6cc7e28f5df129b368f7ce6fcb8af5376f31d7e1a529c1e110703f39aac10ff399dee4abf304812e7e79a04251760fef7fd0bf503fbf91b2d0d592a3e1917f", @generic="d9a1ebea2025ac9ec996ecce627348e8df33f56b8620f3430e454c19ae2fdad8500ba0683260f4d8355cd7d376f5ca37c4dfd1c08135092dc13a5713871fc05be1c49c52d6915811478556fe2e3cbd744c0c3aa748fa90d044f6eb40df375a82de7eefb021e0fa7d73cfb510dec205cd29a0e29f3b3c35f4a6a3a73737df9cdd8d54c4e6dd9203db716499da9909ab48e71c42fb95e2a4b2065f1b87fe52eed507febe5e6fb2"]}, @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @typed={0x5, 0x89, 0x0, 0x0, @str='\x00'}, @generic="de6034bb3a8ef307cdd69b3e4186eec4b390993d917fe40e18d9a1d46c986e19fe2cb1841fb581dd0762544a66567c6529a2110b16d9ecc1d09ee235ed67bafd035473bd12b9237d265a152bbf9fe34e505feed93f76adf958b1dc6c77911593ffbc82951a9cd5fc351925335e8f804aa25601cb6a2a8d0b19394682e98fc659b8fbe8c0ffcaf01985d428c2ead626f8d5d60699d11ec041f11528d1007a0c742e2f747bd57c7429362fd45550a8612b87cc729f88ff85adf56a319623b1052ed733f0c268fae28a692175bf0ba86b774e625b3fae041d3be2ea872cecf4", @typed={0x8, 0x7c, 0x0, 0x0, @fd=r3}, @nested={0x61, 0x9, 0x0, 0x1, [@generic="4178f28b12134855fefd5ae8289bae0f2dad8e70718e6f4f30c0e95960af1aab4399092e", @typed={0x1e, 0x41, 0x0, 0x0, @str='cpuacct.usage_percpu_user\x00'}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r4}, @generic="fae97d136932f4b9b0158625a7f91178e7"]}]}, 0x248c}, {&(0x7f00000066c0)={0x144, 0x1e, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@generic="62377d08f0651b8cd0434db4e5cd90e16d09f7f3c8eac30422ccab295b85236e28dc037001880d9b45130bae344f4198086a3777", @typed={0x8, 0x36, 0x0, 0x0, @u32=0x6}, @generic="89410ffe899d9c4acba58802782ab00cec2118d172d1058ed554971a4711132b2795a4e6c7cfd8ad0d7b", @generic="d98c1b64ab477af45cc9e3ce86c9d44215a852d4f505b8c61ac5505f811b15a2bd891d1e17953b8305df678281a82a6c808c0d8fb3e18f085d8f2ece1d7e1284b8d1bc70a9004cbd13f4c167e600e1e09accf76449151d42161ca7cff802b93caa5ad8a17e26638edd782c8bbe0c86b7aa1d54e937da1822d1e3113411e9b5134d10eca83de66e41fde3875555d3c3954a7cf6d25721aec3927ea8341bfd7d61ca34a1e56dbd03fe6c0bced96f411c9639b9fd7f1c06b1c436ea1c0e3f5e65f5ccaaf7661566266be41226d2c008"]}, 0x144}], 0xa, &(0x7f00000069c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r6}}}, @rights={{0x34, 0x1, 0x1, [r2, r2, r1, r1, r0, r0, r7, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r12}}}, @rights={{0x20, 0x1, 0x1, [r13, r1, r0, r0]}}], 0xf8, 0x8804}, 0x84004) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r14, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r1, 0x0) ioctl$sock_SIOCINQ(r1, 0x5411, 0x0) r2 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x5, &(0x7f0000000200)=""/5, 0x41100, 0xe, '\x00', 0x0, 0x21, r10, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x10, 0xcee, 0x8}, 0x10, 0x0, r0}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r11, 0x0, 0x10000a006) [ 752.502092][ T5062] Bluetooth: hci0: command 0x0c3a tx timeout [ 752.512582][ T5046] Bluetooth: hci0: Opcode 0x c3a failed: -110 13:01:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) write$binfmt_script(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="10feb43a606a4cd77d4a2f13f6d4821216051fe16f840e79333264afdc809d08931916e16c721e0cd43cb1b763a66059dc208f1603eb5498bf70c16e24728e8f54751bb16f1e1b467faafa74ad81b256d70e99517232e2981c8697be6708a78101306fcaa77441af76c03fa64961cb290e420c7eb4776d9bdc17e1d0b4ee5637490de5ef14304825a5eb80e53563699760e22214e45085a349a33c3274807a33255dc21efd09199b2fe287ecf29c450ee50aff510f75c9612f05f61fe493773d285246c0a88188ea5ac08ac9cc1d901aff5b672b44519f9be04051dd9555d807a746a08c814d901423fa97ed278f79d38408b16f3682", @ANYRESDEC, @ANYRES32=r9, @ANYRESOCT=r6, @ANYRES64=r12], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000006c18000000"], 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0xfffff29c, 0x4) 13:01:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x12) 13:01:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001600000427bd7000fbdbdf250a40c4fd", @ANYRES32=r3, @ANYBLOB="14000100fc00000000000077d411432edd7ecc0700d701f513b000000000000000000008000a00030000009651e28862cc4a4a205c591a52da6e702d40ced13fe137ced028c040c6548c63734fe3d61f8c33c021659c3b18653a0f4de5e8ff53bd9cc3a810b96b136787fabf4625136a013898"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000400) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x24}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x24}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = socket(0x28, 0x800000003, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x210200, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r0, r8, 0xffffffffffffffff, r9, r1]}, 0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r7, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYRES16=r6], 0x6db6e571) (async) write$binfmt_script(r7, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYRES16=r6], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="70797a317a79c6e839"], 0x9) 13:01:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x12) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x12) 13:01:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) (async, rerun: 64) r1 = socket(0x11, 0x800000003, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (rerun: 32) 13:01:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) 13:01:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) socket(0x11, 0x800000003, 0x0) (rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_NMI(r5, 0xae9a) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async) write$binfmt_script(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="10feb43a606a4cd77d4a2f13f6d4821216051fe16f840e79333264afdc809d08931916e16c721e0cd43cb1b763a66059dc208f1603eb5498bf70c16e24728e8f54751bb16f1e1b467faafa74ad81b256d70e99517232e2981c8697be6708a78101306fcaa77441af76c03fa64961cb290e420c7eb4776d9bdc17e1d0b4ee5637490de5ef14304825a5eb80e53563699760e22214e45085a349a33c3274807a33255dc21efd09199b2fe287ecf29c450ee50aff510f75c9612f05f61fe493773d285246c0a88188ea5ac08ac9cc1d901aff5b672b44519f9be04051dd9555d807a746a08c814d901423fa97ed278f79d38408b16f3682", @ANYRESDEC, @ANYRES32=r9, @ANYRESOCT=r6, @ANYRES64=r12], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000006c18000000"], 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0xfffff29c, 0x4) 13:01:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x12) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x12) (async) [ 752.620954][T21840] workqueue: Failed to create a rescuer kthread for wq "kvm": -EINTR [ 753.283609][ T27] audit: type=1804 audit(1685278865.190:410): pid=21848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/545/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 13:01:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r1, 0x0) (async) listen(r1, 0x0) ioctl$sock_SIOCINQ(r1, 0x5411, 0x0) socket(0x0, 0x0, 0x0) (async) r2 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup(r9) (async) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x5, &(0x7f0000000200)=""/5, 0x41100, 0xe, '\x00', 0x0, 0x21, r10, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x10, 0xcee, 0x8}, 0x10, 0x0, r0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x5, &(0x7f0000000200)=""/5, 0x41100, 0xe, '\x00', 0x0, 0x21, r10, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x10, 0xcee, 0x8}, 0x10, 0x0, r0}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r11, 0x0, 0x10000a006) 13:01:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) (async, rerun: 64) r1 = socket(0x11, 0x800000003, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0', "7a36f3e679617e5956e8e5a2b70c9e9e7aa4698a157e272a6c0996c55654833f5b1a42ba5185bd1baa38a636a97dbad73dc343cdea13a050a9afa4"}, 0x3f) 13:01:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x1ba) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, r5, 0x78207b9cf137c31d, 0x0, 0x0, {0x4}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x190, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe51fcf4ab3a6a932}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000020}, 0x4004800) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_NMI(r5, 0xae9a) (rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async, rerun: 64) write$binfmt_script(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="10feb43a606a4cd77d4a2f13f6d4821216051fe16f840e79333264afdc809d08931916e16c721e0cd43cb1b763a66059dc208f1603eb5498bf70c16e24728e8f54751bb16f1e1b467faafa74ad81b256d70e99517232e2981c8697be6708a78101306fcaa77441af76c03fa64961cb290e420c7eb4776d9bdc17e1d0b4ee5637490de5ef14304825a5eb80e53563699760e22214e45085a349a33c3274807a33255dc21efd09199b2fe287ecf29c450ee50aff510f75c9612f05f61fe493773d285246c0a88188ea5ac08ac9cc1d901aff5b672b44519f9be04051dd9555d807a746a08c814d901423fa97ed278f79d38408b16f3682", @ANYRESDEC, @ANYRES32=r9, @ANYRESOCT=r6, @ANYRES64=r12], 0x6db6e571) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000006c18000000"], 0x9) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0xfffff29c, 0x4) 13:01:05 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x2, 0x5002) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum, 0x0, @desc4}) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) open(&(0x7f00000000c0)='./file0\x00', 0x300, 0x22) 13:01:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0', "7a36f3e679617e5956e8e5a2b70c9e9e7aa4698a157e272a6c0996c55654833f5b1a42ba5185bd1baa38a636a97dbad73dc343cdea13a050a9afa4"}, 0x3f) 13:01:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='ext4_remove_blocks\x00', r0}, 0x10) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) listen(r1, 0x0) (async) ioctl$sock_SIOCINQ(r1, 0x5411, 0x0) (async) r2 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r4 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x5, &(0x7f0000000200)=""/5, 0x41100, 0xe, '\x00', 0x0, 0x21, r10, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x10, 0xcee, 0x8}, 0x10, 0x0, r0}, 0x80) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r11, 0x0, 0x10000a006) 13:01:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x1ba) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, r5, 0x78207b9cf137c31d, 0x0, 0x0, {0x4}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) (async, rerun: 32) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x190, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe51fcf4ab3a6a932}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000020}, 0x4004800) (async, rerun: 32) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x1ba) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, r5, 0x78207b9cf137c31d, 0x0, 0x0, {0x4}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x190, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe51fcf4ab3a6a932}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000020}, 0x4004800) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000000c0)={'dvmrp1\x00', 0x9}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 64) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0', "7a36f3e679617e5956e8e5a2b70c9e9e7aa4698a157e272a6c0996c55654833f5b1a42ba5185bd1baa38a636a97dbad73dc343cdea13a050a9afa4"}, 0x3f) 13:01:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x7, 0x10000, 0x2, 0x0, 0x0, [{{r0}, 0x8000000000000001}, {{r3}, 0x6}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x1ba) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, r5, 0x78207b9cf137c31d, 0x0, 0x0, {0x4}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x190, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe51fcf4ab3a6a932}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000020}, 0x4004800) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x190, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe51fcf4ab3a6a932}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000020}, 0x4004800) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 754.485467][ T27] audit: type=1804 audit(1685278866.390:411): pid=21954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3541969278/syzkaller.4VvYlY/793/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 754.596312][ T27] audit: type=1804 audit(1685278866.500:412): pid=21979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/548/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 13:01:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x7, 0x10000, 0x2, 0x0, 0x0, [{{r0}, 0x8000000000000001}, {{r3}, 0x6}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x7, 0x10000, 0x2, 0x0, 0x0, [{{r0}, 0x8000000000000001}, {{r3}, 0x6}]}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) 13:01:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000000c0)={'dvmrp1\x00', 0x9}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r6) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x54243, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000440)={r3}) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40600) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)=0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r14) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r15) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="8bdd3a26c5be2dea981a9d8c907fe79d30b89b11722dbe3682a40282d3e3c2f4a4", 0x21}], 0x1000003c, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x1c, 0x1, 0x1, [r7, r8, r4]}}], 0x40, 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="f95f88ccba1dde958e7bdea801d029c5f488916e3a964de50b11b570c1e1a808e20b3cd04daaec3940f69cff73669a", 0x2f}, {&(0x7f00000002c0)="661e0ff4e5f1aa540e949550994f5c7c85b2ecce971d715a529404a9a0cdb7e7816a55b734cb28f0e20a95b25ede8959f6c8e884cdaf0f2ef48b31103848cbe48cd900e48acf380492cfcc7cb9f51b7cac42fb0fd2560a9e3572c8a0", 0x5c}, {&(0x7f0000001300)="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", 0x1000}], 0x3, &(0x7f0000000500)=[@rights={{0x30, 0x1, 0x1, [r9, r1, r10, r11, 0xffffffffffffffff, r3, r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}], 0x50, 0x20000884}}], 0x2, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) getsockname$ax25(r4, &(0x7f0000000080)={{}, [@null, @remote, @null, @remote, @null, @remote, @default, @default]}, &(0x7f0000000100)=0x48) [ 754.902296][ T5062] Bluetooth: hci0: command 0x0c3a tx timeout [ 754.909539][ T5046] Bluetooth: hci0: Opcode 0x c3a failed: -110 13:01:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x410202, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5e}}}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "e65eefc79adcf9ab7d029447643329"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "01"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "c24ac3e22be98739a6b5b53031f834"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4051}, 0x8014) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="737911ef59956211ca"], 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@gettfilter={0x54, 0x2e, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {0xe}, {0xf}}, [{0x8, 0xb, 0xd262}, {0x8}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x400400c}, 0x20008000) 13:01:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) write$bt_hci(r0, &(0x7f0000000100)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x0, 0x8}}}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xc8, 0xfff, 0xf99a, 0xdc, 0x1ff, 0x4, 0x81}}}, 0x15) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000280)={0x1, 0x100000000, 0xef, &(0x7f0000000180)=""/239}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x244200, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) write$binfmt_misc(r5, &(0x7f00000002c0)={'syz0', "7a7925e639"}, 0x9) 13:01:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000000c0)={'dvmrp1\x00', 0x9}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x7, 0x10000, 0x2, 0x0, 0x0, [{{r0}, 0x8000000000000001}, {{r3}, 0x6}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x3, 'batadv_slave_0\x00', {0x23}, 0x7}) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x4, 0x8, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7, 0x7, 0x6, 0x1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) mmap(&(0x7f0000374000/0xa000)=nil, 0xa000, 0x1000000, 0x10, r4, 0xb54bb000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r10, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r8], 0x44}}, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r15 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r15, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r14, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r12], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x134, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0xc041}, 0x4004080) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x410202, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5e}}}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "e65eefc79adcf9ab7d029447643329"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "01"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "c24ac3e22be98739a6b5b53031f834"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4051}, 0x8014) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="737911ef59956211ca"], 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@gettfilter={0x54, 0x2e, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {0xe}, {0xf}}, [{0x8, 0xb, 0xd262}, {0x8}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x400400c}, 0x20008000) 13:01:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x3, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff9bb2c5260004000319166bbeeffc32226510e65ce66d984638353ebfe38dde66a5f93b7958fa45ad4983fba409052d97f028dd706e398971ffbfa37a0d126b97fb6a8a9476c0ac60e37fd041f613bc37f40df6012b9b6ff4ed5089f664875c0f3294b71c193e04eba5c683bb48f390673652cdc75e31443f4274c35574bc68b10dd17cacda9d6a5bc76165769dc6d80a22369a923a566be4fd92efdc0073965ecebee27a227563", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00e6ffffffffffffff"], 0x9) 13:01:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x410202, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5e}}}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "e65eefc79adcf9ab7d029447643329"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "01"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "c24ac3e22be98739a6b5b53031f834"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4051}, 0x8014) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="737911ef59956211ca"], 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@gettfilter={0x54, 0x2e, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {0xe}, {0xf}}, [{0x8, 0xb, 0xd262}, {0x8}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x400400c}, 0x20008000) [ 755.663652][ T27] audit: type=1804 audit(1685278867.570:413): pid=22037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/551/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 13:01:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000080)={r4, 0x4, 0x2, "c7219d3f3313ef47c984082cbc126b8163a9a15afced0c80ad788e6d8f4a2978df2e96763215cc2decc685041a38c9f827a104a4420d99a83f71f39c956f1207756241071fb2b4aa9057cd77e90cfdacbf2de43f56b581ae99fc2e9fb7817b43ba1133119970653a7239d5f2e1255d62975e43897d22bb54af"}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0xb1a, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x3, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff9bb2c5260004000319166bbeeffc32226510e65ce66d984638353ebfe38dde66a5f93b7958fa45ad4983fba409052d97f028dd706e398971ffbfa37a0d126b97fb6a8a9476c0ac60e37fd041f613bc37f40df6012b9b6ff4ed5089f664875c0f3294b71c193e04eba5c683bb48f390673652cdc75e31443f4274c35574bc68b10dd17cacda9d6a5bc76165769dc6d80a22369a923a566be4fd92efdc0073965ecebee27a227563", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x3, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff9bb2c5260004000319166bbeeffc32226510e65ce66d984638353ebfe38dde66a5f93b7958fa45ad4983fba409052d97f028dd706e398971ffbfa37a0d126b97fb6a8a9476c0ac60e37fd041f613bc37f40df6012b9b6ff4ed5089f664875c0f3294b71c193e04eba5c683bb48f390673652cdc75e31443f4274c35574bc68b10dd17cacda9d6a5bc76165769dc6d80a22369a923a566be4fd92efdc0073965ecebee27a227563", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 757.222352][ T5062] Bluetooth: hci0: command 0x0c3a tx timeout [ 757.228481][ T5046] Bluetooth: hci0: Opcode 0x c3a failed: -110 13:01:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x3, 'batadv_slave_0\x00', {0x23}, 0x7}) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x4, 0x8, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7, 0x7, 0x6, 0x1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) mmap(&(0x7f0000374000/0xa000)=nil, 0xa000, 0x1000000, 0x10, r4, 0xb54bb000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r10, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r8], 0x44}}, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r15 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r15, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r14, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r12], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x134, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0xc041}, 0x4004080) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0xb1a, 0x4) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000080)={r4, 0x4, 0x2, "c7219d3f3313ef47c984082cbc126b8163a9a15afced0c80ad788e6d8f4a2978df2e96763215cc2decc685041a38c9f827a104a4420d99a83f71f39c956f1207756241071fb2b4aa9057cd77e90cfdacbf2de43f56b581ae99fc2e9fb7817b43ba1133119970653a7239d5f2e1255d62975e43897d22bb54af"}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000080)={r4, 0x4, 0x2, "c7219d3f3313ef47c984082cbc126b8163a9a15afced0c80ad788e6d8f4a2978df2e96763215cc2decc685041a38c9f827a104a4420d99a83f71f39c956f1207756241071fb2b4aa9057cd77e90cfdacbf2de43f56b581ae99fc2e9fb7817b43ba1133119970653a7239d5f2e1255d62975e43897d22bb54af"}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) 13:01:09 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd2d, 0x25dfdbfe, {0xa, 0x10, 0x20, 0x8, 0x2, 0x0, 0x0, 0x8, 0x10010}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r9, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x40800) 13:01:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000138000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="0f01c2420f1aa42e8d000000c421f92e07400f01c566410f3881b0489a0000b9800000c00f3235001000000f30c4c1fddd8286b946243e0f01c964460f2206c744240000000000c744240241ea0000c7442406000000000f011424", 0x5b}], 0x1, 0x65, &(0x7f0000000280)=[@cstype3={0x5, 0xb}], 0x1) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r9, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xffff}, {0xf, 0x9}, {0x10, 0xa}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0xb1a, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 757.564724][ T27] audit: type=1804 audit(1685278869.470:414): pid=22090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/554/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 13:01:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000080)={r4, 0x4, 0x2, "c7219d3f3313ef47c984082cbc126b8163a9a15afced0c80ad788e6d8f4a2978df2e96763215cc2decc685041a38c9f827a104a4420d99a83f71f39c956f1207756241071fb2b4aa9057cd77e90cfdacbf2de43f56b581ae99fc2e9fb7817b43ba1133119970653a7239d5f2e1255d62975e43897d22bb54af"}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200226bd7000fddbdf250c0000002000018014000200766972745f776966693000000000000008000b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000001500)={0x10000, 0x1000}) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r11) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(r11, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001480)=[@text16={0x10, &(0x7f0000001400)="2e26660ff99d8400f3a666b80500000066b9060000000f01d90f20d86635080000000f22d80f5be0650f01cf0f32ca11ef0f01bcf6fff30f06", 0x39}], 0x1, 0x0, &(0x7f00000014c0), 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRESOCT=r5, @ANYRES32=r6, @ANYBLOB="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", @ANYBLOB="4967646aac5273ac687c99ecba47490b64064f38fb2f8bc6451cc32fd71dc6358af4e1d979b7ae54011480a72391c947", @ANYRES32=r5, @ANYRESHEX=r5, @ANYRES32=r10], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r12, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x25, r3, &(0x7f0000000180)="11cea6d30824edebc7f60f82af4f206605851e451479bcfe9a1489e1bcabade9b3da4d1d687559eb9dede9b8523b0f112595830d60a6a45d40fbe1d146604615654aa394640d5a2a34308436b6166abe8b369ed12c897ae846a9d395b8251e812bacdd16c00b8d1fcccfc72daac3337a5f324671e57aeb5e971a52096943293081a36023531c03cf", 0x88, 0x8001, 0x0, 0x1, r2}]) 13:01:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0xf, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (fail_nth: 1) 13:01:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080), 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd2d, 0x25dfdbfe, {0xa, 0x10, 0x20, 0x8, 0x2, 0x0, 0x0, 0x8, 0x10010}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r9, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x40800) 13:01:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd2d, 0x25dfdbfe, {0xa, 0x10, 0x20, 0x8, 0x2, 0x0, 0x0, 0x8, 0x10010}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r9, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x40800) 13:01:10 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) (fail_nth: 1) [ 758.113279][T22140] FAULT_INJECTION: forcing a failure. [ 758.113279][T22140] name failslab, interval 1, probability 0, space 0, times 0 [ 758.229170][T22140] CPU: 0 PID: 22140 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 758.239147][T22140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 758.249262][T22140] Call Trace: [ 758.252589][T22140] [ 758.255560][T22140] dump_stack_lvl+0x136/0x150 [ 758.260324][T22140] should_fail_ex+0x4a3/0x5b0 [ 758.265080][T22140] should_failslab+0x9/0x20 [ 758.269644][T22140] kmem_cache_alloc_node+0x5c/0x3e0 [ 758.274930][T22140] __alloc_skb+0x288/0x330 [ 758.279427][T22140] ? __napi_build_skb+0x50/0x50 [ 758.284356][T22140] ? __lock_acquire+0xc17/0x5f30 [ 758.289367][T22140] alloc_skb_with_frags+0x9a/0x6c0 [ 758.294545][T22140] ? aa_profile_af_perm+0x470/0x470 [ 758.299827][T22140] sock_alloc_send_pskb+0x7a7/0x930 [ 758.305105][T22140] ? sk_dst_check+0x460/0x460 [ 758.310041][T22140] hci_sock_sendmsg+0x1c0/0x2480 [ 758.315044][T22140] ? aa_af_perm+0x240/0x240 [ 758.319607][T22140] ? aa_file_perm+0x592/0x1250 [ 758.324422][T22140] ? hci_sock_setsockopt+0xa20/0xa20 [ 758.329830][T22140] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 758.335155][T22140] ? hci_sock_setsockopt+0xa20/0xa20 [ 758.340469][T22140] sock_sendmsg+0xde/0x190 [ 758.344939][T22140] sock_write_iter+0x295/0x3d0 [ 758.349755][T22140] ? sock_sendmsg+0x190/0x190 [ 758.354484][T22140] ? bpf_lsm_file_permission+0x9/0x10 [ 758.359912][T22140] ? security_file_permission+0xaf/0xd0 [ 758.365504][T22140] vfs_write+0x945/0xd50 [ 758.369782][T22140] ? kernel_write+0x670/0x670 [ 758.374488][T22140] ? receive_fd+0x110/0x110 [ 758.379027][T22140] ? __fget_files+0x26a/0x480 [ 758.383736][T22140] ? __fget_light+0xe5/0x270 [ 758.388378][T22140] ksys_write+0x1ec/0x250 [ 758.392762][T22140] ? __ia32_sys_read+0xb0/0xb0 [ 758.397568][T22140] ? syscall_enter_from_user_mode+0x26/0x80 [ 758.403505][T22140] do_syscall_64+0x39/0xb0 [ 758.407971][T22140] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 758.413905][T22140] RIP: 0033:0x7fdaed88c169 [ 758.418352][T22140] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 758.438004][T22140] RSP: 002b:00007fdaee599168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 758.446551][T22140] RAX: ffffffffffffffda RBX: 00007fdaed9ac050 RCX: 00007fdaed88c169 [ 758.454559][T22140] RDX: 0000000000000009 RSI: 0000000020000000 RDI: 0000000000000004 [ 758.462562][T22140] RBP: 00007fdaee5991d0 R08: 0000000000000000 R09: 0000000000000000 [ 758.470568][T22140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 13:01:10 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080), 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) (async) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0xf, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002c0ec17f971935c7bd1324ef3fa76c593eb0901783d8987d7a49d8020ea22f5e12da0c418e8bd88e2e0358040b9d540ca53f9cab037e4efffc12c727cb027558673bf893cf3fe8f9dede7498df0f0977301cb6902c37dbf7caf0d498a8fe0482a29455f1e01da0711dbe1308d88bdea0cc8b81e0bf7fc5d28e03787f9f3810e2991d0cfc02a00456d11a8b0b3c85a5ee1b341858292234e2f263d422a7acc8c8be0fde340d998adec6295e671a8cacb7b70ba9649265155"], 0x2c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0xf, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) 13:01:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200226bd7000fddbdf250c0000002000018014000200766972745f776966693000000000000008000b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) (async) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000001500)={0x10000, 0x1000}) (async) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r11) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) (async) syz_kvm_setup_cpu$x86(r11, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001480)=[@text16={0x10, &(0x7f0000001400)="2e26660ff99d8400f3a666b80500000066b9060000000f01d90f20d86635080000000f22d80f5be0650f01cf0f32ca11ef0f01bcf6fff30f06", 0x39}], 0x1, 0x0, &(0x7f00000014c0), 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRESOCT=r5, @ANYRES32=r6, @ANYBLOB="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", @ANYBLOB="4967646aac5273ac687c99ecba47490b64064f38fb2f8bc6451cc32fd71dc6358af4e1d979b7ae54011480a72391c947", @ANYRES32=r5, @ANYRESHEX=r5, @ANYRES32=r10], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r12, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x25, r3, &(0x7f0000000180)="11cea6d30824edebc7f60f82af4f206605851e451479bcfe9a1489e1bcabade9b3da4d1d687559eb9dede9b8523b0f112595830d60a6a45d40fbe1d146604615654aa394640d5a2a34308436b6166abe8b369ed12c897ae846a9d395b8251e812bacdd16c00b8d1fcccfc72daac3337a5f324671e57aeb5e971a52096943293081a36023531c03cf", 0x88, 0x8001, 0x0, 0x1, r2}]) 13:01:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22, 0x1012, 0xffffffffffffffff, 0xffffffff}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) openat$cgroup_ro(r0, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 758.478571][T22140] R13: 00007fff8e2ddc7f R14: 00007fdaee599300 R15: 0000000000022000 [ 758.486589][T22140] 13:01:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (fail_nth: 2) 13:01:10 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) [ 758.828817][ T27] audit: type=1804 audit(1685278870.730:415): pid=22165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/557/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 13:01:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0xf, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x11, 0x800000003, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (fail_nth: 3) 13:01:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200226bd7000fddbdf250c0000002000018014000200766972745f776966693000000000000008000b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) (async) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = dup(r9) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000001500)={0x10000, 0x1000}) (async) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r11) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(r11, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001480)=[@text16={0x10, &(0x7f0000001400)="2e26660ff99d8400f3a666b80500000066b9060000000f01d90f20d86635080000000f22d80f5be0650f01cf0f32ca11ef0f01bcf6fff30f06", 0x39}], 0x1, 0x0, &(0x7f00000014c0), 0x0) (async) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRESOCT=r5, @ANYRES32=r6, @ANYBLOB="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", @ANYBLOB="4967646aac5273ac687c99ecba47490b64064f38fb2f8bc6451cc32fd71dc6358af4e1d979b7ae54011480a72391c947", @ANYRES32=r5, @ANYRESHEX=r5, @ANYRES32=r10], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r12, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x25, r3, &(0x7f0000000180)="11cea6d30824edebc7f60f82af4f206605851e451479bcfe9a1489e1bcabade9b3da4d1d687559eb9dede9b8523b0f112595830d60a6a45d40fbe1d146604615654aa394640d5a2a34308436b6166abe8b369ed12c897ae846a9d395b8251e812bacdd16c00b8d1fcccfc72daac3337a5f324671e57aeb5e971a52096943293081a36023531c03cf", 0x88, 0x8001, 0x0, 0x1, r2}]) 13:01:10 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0x45) 13:01:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async, rerun: 32) r1 = socket(0x0, 0x0, 0x0) (rerun: 32) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22, 0x1012, 0xffffffffffffffff, 0xffffffff}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) openat$cgroup_ro(r0, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:11 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0x88) [ 759.276498][T22198] FAULT_INJECTION: forcing a failure. [ 759.276498][T22198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.332302][T22198] CPU: 1 PID: 22198 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 759.342288][T22198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 759.352398][T22198] Call Trace: [ 759.355714][T22198] [ 759.358677][T22198] dump_stack_lvl+0x136/0x150 [ 759.363436][T22198] should_fail_ex+0x4a3/0x5b0 [ 759.368190][T22198] _copy_from_iter+0x1d9/0x1290 [ 759.373107][T22198] ? hash_and_copy_to_iter+0x210/0x210 [ 759.378623][T22198] ? __virt_addr_valid+0x61/0x2e0 [ 759.383724][T22198] ? __phys_addr+0xc8/0x140 [ 759.388299][T22198] ? __phys_addr_symbol+0x30/0x70 [ 759.393387][T22198] ? __check_object_size+0x323/0x730 [ 759.398717][T22198] hci_sock_sendmsg+0x414/0x2480 [ 759.403684][T22198] ? aa_af_perm+0x240/0x240 [ 759.408228][T22198] ? aa_file_perm+0x592/0x1250 [ 759.413042][T22198] ? hci_sock_setsockopt+0xa20/0xa20 [ 759.418368][T22198] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 759.423692][T22198] ? hci_sock_setsockopt+0xa20/0xa20 [ 759.429004][T22198] sock_sendmsg+0xde/0x190 [ 759.433476][T22198] sock_write_iter+0x295/0x3d0 [ 759.438372][T22198] ? sock_sendmsg+0x190/0x190 [ 759.443116][T22198] ? bpf_lsm_file_permission+0x9/0x10 [ 759.448538][T22198] ? security_file_permission+0xaf/0xd0 [ 759.454124][T22198] vfs_write+0x945/0xd50 [ 759.458407][T22198] ? kernel_write+0x670/0x670 [ 759.463113][T22198] ? receive_fd+0x110/0x110 [ 759.467649][T22198] ? __fget_files+0x26a/0x480 [ 759.472368][T22198] ? __fget_light+0xe5/0x270 [ 759.476992][T22198] ksys_write+0x1ec/0x250 [ 759.481350][T22198] ? __ia32_sys_read+0xb0/0xb0 [ 759.486145][T22198] ? syscall_enter_from_user_mode+0x26/0x80 [ 759.492093][T22198] do_syscall_64+0x39/0xb0 [ 759.496554][T22198] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 759.502496][T22198] RIP: 0033:0x7fdaed88c169 [ 759.506933][T22198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 759.526561][T22198] RSP: 002b:00007fdaee599168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 759.534999][T22198] RAX: ffffffffffffffda RBX: 00007fdaed9ac050 RCX: 00007fdaed88c169 [ 759.542992][T22198] RDX: 0000000000000009 RSI: 0000000020000000 RDI: 0000000000000004 [ 759.550977][T22198] RBP: 00007fdaee5991d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.558971][T22198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.566960][T22198] R13: 00007fff8e2ddc7f R14: 00007fdaee599300 R15: 0000000000022000 [ 759.574965][T22198] 13:01:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) (rerun: 64) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080), 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r2 = socket(0x11, 0x800000003, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:11 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xcb) 13:01:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'vxcan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:11 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./f|ile0']) r1 = getegid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) socket$inet_udplite(0x2, 0x2, 0x88) accept4$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0xc0800) pipe(&(0x7f0000000340)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000005c0)=0xfffffffffffffe3e) setuid(r7) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@audit}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@obj_role={'obj_role', 0x3d, '@'}}, {@smackfshat={'smackfshat', 0x3d, '{'}}, {@uid_lt={'uid<', r7}}, {@flag='sync'}]}}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket(0x11, 0x800000003, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) setuid(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r12) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r12}}, './file0\x00'}) write$binfmt_script(r10, &(0x7f0000000400)=ANY=[@ANYRES32=r11, @ANYRES16=r9], 0x6db6e571) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000600)=ANY=[@ANYBLOB="7feb006f82b1ffc7db0700000000b40aedf036d8eb649d59e9b5fb13000000ffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r13, 0x0) bind$bt_hci(r13, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22, 0x1012, 0xffffffffffffffff, 0xffffffff}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) openat$cgroup_ro(r0, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:11 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xfdef) 13:01:11 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./f|ile0']) r1 = getegid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) accept4$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0xc0800) pipe(&(0x7f0000000340)) (async) pipe(&(0x7f0000000340)) pipe(&(0x7f0000000380)) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000005c0)=0xfffffffffffffe3e) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000005c0)=0xfffffffffffffe3e) setuid(r7) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@audit}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@obj_role={'obj_role', 0x3d, '@'}}, {@smackfshat={'smackfshat', 0x3d, '{'}}, {@uid_lt={'uid<', r7}}, {@flag='sync'}]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket(0x11, 0x800000003, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) setuid(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r12) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r12}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r12}}, './file0\x00'}) write$binfmt_script(r10, &(0x7f0000000400)=ANY=[@ANYRES32=r11, @ANYRES16=r9], 0x6db6e571) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000600)=ANY=[@ANYBLOB="7feb006f82b1ffc7db0700000000b40aedf036d8eb649d59e9b5fb13000000ffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r13, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r13, 0x0) bind$bt_hci(r13, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (fail_nth: 4) 13:01:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xffffffff, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x40000001, 0x42, 0xd51, 0x3f}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'vxcan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'vxcan1\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) 13:01:11 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xfffffdef) 13:01:12 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./f|ile0']) (async) r1 = getegid() (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) socket$inet_udplite(0x2, 0x2, 0x88) accept4$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0xc0800) pipe(&(0x7f0000000340)) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000005c0)=0xfffffffffffffe3e) setuid(r7) (async) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@audit}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@obj_role={'obj_role', 0x3d, '@'}}, {@smackfshat={'smackfshat', 0x3d, '{'}}, {@uid_lt={'uid<', r7}}, {@flag='sync'}]}}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) (async) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket(0x11, 0x800000003, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) setuid(0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r12) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r12}}, './file0\x00'}) (async) write$binfmt_script(r10, &(0x7f0000000400)=ANY=[@ANYRES32=r11, @ANYRES16=r9], 0x6db6e571) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000600)=ANY=[@ANYBLOB="7feb006f82b1ffc7db0700000000b40aedf036d8eb649d59e9b5fb13000000ffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r13, 0x0) (async) bind$bt_hci(r13, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) (async) write$binfmt_misc(r8, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 760.289989][T22241] FAULT_INJECTION: forcing a failure. [ 760.289989][T22241] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 760.309490][ T27] audit: type=1804 audit(1685278872.210:416): pid=22239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/560/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 760.321934][T22241] CPU: 0 PID: 22241 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 760.346066][T22241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 760.356168][T22241] Call Trace: [ 760.359507][T22241] [ 760.362480][T22241] dump_stack_lvl+0x136/0x150 [ 760.367237][T22241] should_fail_ex+0x4a3/0x5b0 [ 760.372006][T22241] prepare_alloc_pages+0x178/0x570 [ 760.377165][T22241] ? stack_trace_save+0x90/0xc0 [ 760.382060][T22241] __alloc_pages+0x149/0x4a0 [ 760.386681][T22241] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 760.393483][T22241] ? find_held_lock+0x2d/0x110 [ 760.398286][T22241] alloc_pages+0x1aa/0x270 [ 760.402732][T22241] pte_alloc_one+0x1a/0x230 [ 760.407279][T22241] __handle_mm_fault+0x27af/0x4170 [ 760.412436][T22241] ? vm_iomap_memory+0x190/0x190 [ 760.417434][T22241] ? mt_validate_nulls+0xd10/0xd10 [ 760.422642][T22241] handle_mm_fault+0x2af/0x9f0 [ 760.427448][T22241] do_user_addr_fault+0x51a/0x1210 [ 760.432605][T22241] exc_page_fault+0x98/0x170 [ 760.437273][T22241] asm_exc_page_fault+0x26/0x30 [ 760.442181][T22241] RIP: 0010:rep_movs_alternative+0x30/0xb0 [ 760.448062][T22241] Code: f9 40 73 46 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 760.467700][T22241] RSP: 0018:ffffc90003b6f9b0 EFLAGS: 00050202 [ 760.474863][T22241] RAX: 0000000000000001 RBX: 0000000000000009 RCX: 0000000000000009 [ 760.482854][T22241] RDX: ffffed1004ebdda3 RSI: 0000000020000000 RDI: ffff8880275eed08 [ 760.490851][T22241] RBP: 0000000020000000 R08: 0000000000000001 R09: ffffed1004ebdda2 [ 760.498843][T22241] R10: ffff8880275eed10 R11: 0000000000000001 R12: ffff8880275eed08 [ 760.506837][T22241] R13: 0000000020000009 R14: 0000000000000000 R15: 0000000000000009 [ 760.514846][T22241] copyin.part.0+0x68/0x80 [ 760.519292][T22241] _copy_from_iter+0x2cc/0x1290 [ 760.524179][T22241] ? hash_and_copy_to_iter+0x210/0x210 [ 760.529670][T22241] ? __virt_addr_valid+0x61/0x2e0 [ 760.534737][T22241] ? __phys_addr+0xc8/0x140 [ 760.539281][T22241] ? __phys_addr_symbol+0x30/0x70 [ 760.544344][T22241] ? __check_object_size+0x323/0x730 [ 760.549670][T22241] hci_sock_sendmsg+0x414/0x2480 [ 760.554636][T22241] ? aa_af_perm+0x240/0x240 [ 760.559178][T22241] ? aa_file_perm+0x592/0x1250 [ 760.563983][T22241] ? hci_sock_setsockopt+0xa20/0xa20 [ 760.569294][T22241] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 760.574612][T22241] ? hci_sock_setsockopt+0xa20/0xa20 [ 760.579931][T22241] sock_sendmsg+0xde/0x190 [ 760.584394][T22241] sock_write_iter+0x295/0x3d0 [ 760.589197][T22241] ? sock_sendmsg+0x190/0x190 [ 760.593932][T22241] ? bpf_lsm_file_permission+0x9/0x10 [ 760.599342][T22241] ? security_file_permission+0xaf/0xd0 [ 760.604916][T22241] vfs_write+0x945/0xd50 [ 760.609191][T22241] ? kernel_write+0x670/0x670 [ 760.613902][T22241] ? receive_fd+0x110/0x110 [ 760.618429][T22241] ? __fget_files+0x26a/0x480 [ 760.623142][T22241] ? __fget_light+0xe5/0x270 [ 760.627770][T22241] ksys_write+0x1ec/0x250 [ 760.632135][T22241] ? __ia32_sys_read+0xb0/0xb0 [ 760.636925][T22241] ? syscall_enter_from_user_mode+0x26/0x80 [ 760.642859][T22241] do_syscall_64+0x39/0xb0 [ 760.647319][T22241] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 760.653250][T22241] RIP: 0033:0x7fdaed88c169 [ 760.657679][T22241] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 760.677313][T22241] RSP: 002b:00007fdaee599168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 760.685764][T22241] RAX: ffffffffffffffda RBX: 00007fdaed9ac050 RCX: 00007fdaed88c169 [ 760.693756][T22241] RDX: 0000000000000009 RSI: 0000000020000000 RDI: 0000000000000004 [ 760.701741][T22241] RBP: 00007fdaee5991d0 R08: 0000000000000000 R09: 0000000000000000 [ 760.709724][T22241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.717706][T22241] R13: 00007fff8e2ddc7f R14: 00007fdaee599300 R15: 0000000000022000 [ 760.725731][T22241] 13:01:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:12 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xfffffffffffffdef) 13:01:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'vxcan1\x00'}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r2 = socket(0x11, 0x800000003, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f00000018c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (fail_nth: 5) 13:01:12 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) 13:01:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xffffffff, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x40000001, 0x42, 0xd51, 0x3f}, 0x10}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:12 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) 13:01:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x112) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x2, 0x67, "3f9743", 0x80, 0x1f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3398f14309169d0f}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0000000000000000df254f0000020c009900001f6300000028007a800800040007080000080004000200000015000400070000400c000300ccb4bb57191a012a"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040805) 13:01:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f00000018c0)=ANY=[@ANYBLOB="e17aa76ca293ab3659ea984a979307be7d09b2f57c7aac5504119c1f0da57770cb1367390d59ac43ac91103bd7faf50916ab320e263938abbcd10f2fe9888dba60ce40331988da2b1d125b9b7e1c31bbc16ecd24b8577541bb256dd959fcd70185992e349b0d48773f201255af79e7bee265a483a758b1255d9eaa258e728b87dd2cb2b5f98b53e75afc9aba4567d80c87534630738d39be21bc4a268e60368ccd9134d620b66b4b77a0b29ae6ffec98e3e6cb7817006377f6ff018551d54f936912e19260a3f66df77ff970a29b12e52ad5128187e50fcc9a2b30d408e971d144c6c1b8b4427dc4a87da3cd762a0608cd3a797e215e0309cac3f61409c9e26aa52634b2417823ef9b4d84a6e35075c45a4f5b1f89b1ca967dc33c970cb49caf0c18d618608984afa4e012b2ff404244ecee3711aa76269c3d7aaa16840dea336bc740f343774857182ecd35f3f4869d1fe2c863fc19a14a220316d17dffc9ff72c0889e429c49e00cdcd9f42f77e143f16de8b1e46b4978eb50837667f4e79b08eeaa620e8e9e040325177892cef2b12722978224c87cd15647a9fc7d42168c27a89db227e72ecb7b989b64f9cb7623c0398a26607016ed22f27b41a91982bc19bd5249616504ccea2543cef6c26a9fa17ff0ee554afc046faa1c76146667986f2808626fa8a3047670754cabc255ce36cecdc1db939f226f1d4e9a942d974698d57b664a58a0da65f52975a6fd37bccc19a8f161dd41489a3c49eee5922b64362e62fc55ac6e7289364877acea31fc58529c3eeb264b54a1943f33fc9a5a956a17e887c1726e46fb6660a92bb579280e0a5ad1aabe16b45abdf8dddb7b976818c74e6bf6a850fa35bb4dae6484bd460925b50519eef24df1a8fbe799a6e8ac5659a6f50a91aff60afc8c5a705dfdfe473afdd19b47395bd5135500001f88537f6756b10bfef49ae4b1e32819aefdd8fbf4cd55099c28e9f1e971f561d1ccfcbcee6d2533a8e7560d34472aba90d76421be41f9a1138b616b944bd140824948cc5334ea79a83157000a6561deed73eeebb5597cf0a867c5c1c09703ace24e22606aa5ee7746df17c221b7349a80c67a2c644e9267aed096d9667b7a4bf691a1cfaeab0994574b38c894adec89f877553948b0eae26479099eba0a51611dbb76c31a0b518168eaf4d14562b55e03a327d0e4950ae5c57b390af27b69730d1f1f4f42bd9c4acdaeb101de64db2e503ff2b873e6d81dc03ecebd71525a630134ca5edf3e168e9d9e962d035bfa27dcead59b8e6a516c302dec70b41210675b9069c6872e4049e49e5189a34848f486bda83648ca52cbac48169dfa826027e2ae709883930ff2527c34c5cadda16d4214be69a49f52907c21d3a690aaaf1fa22cdf53cc204f883f178e87820cdda03333716b64d658b3f679889faa06e2a4f4799a97886880631f74e25d5c2590cf23050f5cea91055e8e3302093e62604d1d3ddf387fadaff86c7bbabc1c34713db6963220c09c0053915bbae3e40bc152f090e67d41ab1f928669ef7a1306b513b6ebf24590dbe6e4218a59111fdff6e3f54a3cfd4b4be062869fe02f33682167abcaec38f8341e798c1649ee4bcd4a6e59b475211b703b858c33c80406e9fe4494fd8d1dfb1d293ddaf23f2b6d375795827255ec83162cc4db772853d15d3dc5e0849f732159d8ff5f98f90f828123c38ceed56f85b4c0fa1ba77dd1eba9e7e4e529b8964e88adfee4a06dddc1b1774855ef6b17109aaae33f732bcf33ea1b0c1ca1731a509dbc96c19beda2dc830dfc2886b3d8c115e156a7905d3a82d22091a2cc748f64de711c8c0866cccf5187619b1fc2fdca10c4ae46e4413650681df124815f9e79784fc283cde64f07ee75f487fe628654aa16a985e95cc44846e9aec6df7c9cd6be9cc8f94b2ab01117b29762d94c5cea7e532cc3384d7bc9547a77a97076a04bdeb28f331d7847aaaeb318f94c9a9ae401c975c4c4dedd9b375642e6afedbed105539ffe95d1820e574a1c000ac0a7284c9e9227cec3848d22955b39a9423a828dfbf13f14811bce3bd04be5ffd4e231bda4a5ad119ad8735daf74037ea648555ed18139e965ef24450ce819b08897d465164b9c7ace7138bcd953332a8bf9826206da102ce3dfe24352779d8567fb4890e7a035132590ea257793bad0bcfba314e18e9fbe2e58bde2fa02401365f82274d0c498c1ce30a970bec9765a89679d1ca141cf198bd1e10088bf1e04d52bbfc9008fda1255695ce48ea828f86ac75cad5e0d230e8806cb2bebdd28617605045721bb3ddca987d6a2e6d69d713636edf0dde260c5418bdd2aa197b589a8f64efbd61e0aedd9957c1ceb69ae2b6c5a37e5555ad17fa8c3e85c8a47d3cc2d2f69f197d909ee0fe588c46a0108f24f51830f30bf1d80e0e36484068aa575a68d8562f081902044b583f0a27b16d138cc164f3730bcf7ffe5a5bdcc092879a0c2b990e35eb402ee6bd8238aa1e6a6cd83b5fea2f03ddca53ba890525bc588160e0fae26e152397fb53d200932fc3cf98955208f46392e23a7120ee904818f4042af630ffc351c901901a4c7e02cf8aab481cf73b565069e8fe221b914b9e17299014700e0b4fbe9bebcfd0ca460921e26c97b60c22ac7b432ec69e1b72edbd02bdd3d03059e80480ad9ebbc8daa9df0dbe47673adc4a3a878d95d0482f6606f0046b29f23c6a2fc92f4fb1bc6191427226f9ebe5aecf03ce083f110726811b2c1054e8edb432e44f10ad10b50264f6904ed05b99125339e21fc3b5cccda544f3acfd63cf4f86afca937dffcaffa1c16f26b37f1239e0968ef6336099bc8b06c1ccddfc5fcf59bd49a1dfb00b2b8153771c70c30e2f38684fdc2233f8aaba74ef6cf5490cabf0061335e3deb8b0508c2989c0ba065f6d3544ef00e6bee32d01e2a46f9c63d57d3069705c182ec8328d895a081e549e69a0cb45f0d8de090b48f7e1a971b102f3377d74bbb75ec3e45dbf4fb0822100d98dbcb020e74a92ac88d66b6b01c95d54f589f5764fc9c87ebd77340becba3c3cdd905edd4eefca10f951350b53a0c6f92d452e998277adc7fc80d1de7f46e3d5273de927cba3acaef40e6eb702d986c415a99c51299396bd2d80e6e645cb1e9cc34101cf5af33b19d556e5b0fc0f66eceba74c3e311fa3e108b3d2aadb99db93af6d9d3d976b139a31265ed4255fc11789ee40b4ea0b7c7350ba4012339977b9d5ebdf7a743d37fe545a0625fe63ad0036c0dc12d24477cfbf8d1050014ad4b9fe4c6b764c79000ac9548fb8d8d30863a89d83f938a81c06b9c34797d29823457b9ab55d1cbaa6523ea922683df9a4bd405e4d7e9ae73875d37447dbd8858ecd56f20679d173a755454eba321e9744a8c4e18eb0b4170e52451e28746f755c4f9f66aad40687e2cc72e86d74fba01bf53e6daaab4b41af44bc416e3c36a9f120d22b674a2ace05c4e19ca541dc8a96a261130db9f211bcce8150a624b32576021734602a7c9c8143bfeb54c7269fa3231d60dfbd9825ad0a27839e4cebd859a164793d1c765085bad11d2efc9d0803fb6cdebd4ef9f90c561c68103ab9c42ec4e5921d61cc109c87af611f290fe7dc5bf8e688f02f86a23e8e932a61cf00b6d6e2468481efaff9ccb36c8a841f40c1847491ba5b314c2ac169e017fecb02c39ee29ec0e482f52322c876a143f791e1d09f1d6a7558383c09d95b29e5765d321cfd2c80817735a1bd55307980d8748584e09ce5d52291c4238ecf0f74387e0489edb3e2757fa7441044e98db4d844f29cb90fb2c2f2ceba7055dce08bd98a19bcb0846e8379544cf84cadeaefed399d38ae46e72e98fea26374314d2772ed64145f2143f50484ce45a4fccbb7fe108a6b8c0cbabff4351b4ebaf3f7318162dc80c37c4e1ead5236966b5c8ee1fda2c176e69312bf841418723ba2eb9e4380dd2b39460688f296a7f0647b1f13043098347e71f3370552cdca18865754e42e849f9cfab5d3f36aa077857444267125eda28e2e74c5a1838102708607561dfae460f211cf51c654e66bf7c8b44d5e9c2a4d8d3353baf00f7883dd0898d4ed6f5bb7cc6e97eeb280369063ef711859135d68ddc93f62d5fef5613a65908acbad3e73d15c03325e329c8d880e77e84740e1ad1761ad2b1d9badfdd38c81605d0b8a6e277e5cdf7da920f92978452e857e376a1b0df2f97aa1ca207c9479c3756c06f42ab4c0c8924043e7a23e636bcec78628f5ede1f81c12e70363dd612b2d4a5019d226e0b137e7019e272878e2e19d581aee7e1799605ca6f2e7c998b59beed393a24ddd4d8d99d90a0ed0f4b828da334e4e36fff8aabf6529410aafd2387a32af78eeac6fd386a68db56d5d8de4974192007cb84e099064c7fb23c13ffecad7522bcb4aeb16274e621f9f82a46e11e6513fbf60c94ad2baf2c407f37e017d510fef9a952fcb8c9717f4ec3198ccb9bb54ae556ec76554beb5339e4130190fea4faf625b2f02dfbbb8cdc4f9bfcb9d31a3059bb7447e8904067daffd42fb0aefc44be856301040be667484c079023eec298b91e3a507a9b2fa44436dbb7bb79b3486ab9f7a3f2c5f2f60e6254237faf0f7810089e35a6673c2b6b1a2abe9c35173ece85351af60232bfce18249701fe7091994f9d38ff257576b17b4427cfb5a189f5cf180edad44f390d2b975ff291781ea897c663c2ffd5d3b5c0877958cee827f823c047d69050a260cb29df2c2e5cebc239e90a4eed56181ac9edee0c118150e5e9b65a04036c0248a05bee2b041bde53e8adf0f3ea97a14fb3dc6354b4d1f973638636ff2c31f7de31af7bea9b1df71d2d19a729956af9e4c3115b74159585f6439522215cc443977b4b26606b2787e24280cb293d23c4ed52b07aab00e23b4d4ed7da964e4fbcf31fd5bdf15586d07af93563f88c49b7f0d59ade85df6b8881370a6353e4a16d9c55bb6ced910690dc60e7569348d9984f160f0ff667ec2439432d825f6f3fbc13e99e9eccb7078e59a0370ed4d5df6b88e41ef450a8e0e877664678cb0fb80cfa03639c0b455752692567c32b7cdb1880a962ed1f62d4236ab521ea670179f8baeb7c74f1bb5e460518a4817647c68d78737efe852ecc7f59ce4d687a67d0c89fa8f807c48dc068325e7fbb257331e99bd3f919db653e40bc27c0868e838a85b19b3669068898b56973ee312c51c142a1dc55371f1593abe1e32b52129170c1cfbda25bd08e369d517a242e296edb767fab7a38d4d58ee33b90f3e33f0f5e1dbc179892981014de315ae38505457b8f3c2affec930153807accf6ee2d690b987a096266793b2950df6dae5faf3f37da52b0574c6b918cfcb68e5114514ed5b6e8eb13c8e3119845dfae8b15129fd71abbe7184f4dc9fcc514bca23b1abb3d27b8907541e212409906b1b7c113fbb3fc42d6bb1e15be8dc20c60c85a891d72ea7ad5cde29d2fdae42b09eac751a32ce413e4a919a909fa2dcc3b329a83a80795a69c0a80fcf5c065cef7074d8eefdd8143e4d0c7bc6617b6384a6c5a9074ad3e153333ecab5484e7d7838b828664573f4538148f38eeaf90d829bbc5c27df4220dcbbb82667b0056e4cbee794068aa8a8abcacae6d51df1b8607d5283196702417da99a63cefb4e1cbe981e7ced6b1aed1987bed466a0a8841b790e2b1363c5ac1eba5ea88b0f970ae93741f839763f05b8c64d67c0ec01f93748fcfbb7382cf559ed6b8b793196e3f365a7a517512c2089865bfc8c64ce694b7882264615cca39", @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (rerun: 32) 13:01:13 executing program 5: setreuid(0x0, 0xee00) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) 13:01:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xffffffff, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x40000001, 0x42, 0xd51, 0x3f}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (rerun: 32) 13:01:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x17c, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}]}, @NL80211_ATTR_KEYS={0x148, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8c863fccbd58e9e60266f297bf"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "c8644cf6a547450d72ee97085e"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x13, 0x4, "bcc5feb1b40ab038cd576c14848a9f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b6fb8999d9"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xd, 0x4, "948523660f841ff98b"}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40001) setreuid(0x0, 0xee00) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r2, &(0x7f0000000240)=""/180, 0xb4) 13:01:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) (async) r1 = socket(0x11, 0x800000003, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) creat(&(0x7f0000000240)='./file0\x00', 0x112) (async) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x112) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x2, 0x67, "3f9743", 0x80, 0x1f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3398f14309169d0f}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0000000000000000df254f0000020c009900001f6300000028007a800800040007080000080004000200000015000400070000400c000300ccb4bb57191a012a"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040805) 13:01:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (fail_nth: 6) 13:01:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f00000018c0)=ANY=[@ANYBLOB="e17aa76ca293ab3659ea984a979307be7d09b2f57c7aac5504119c1f0da57770cb1367390d59ac43ac91103bd7faf50916ab320e263938abbcd10f2fe9888dba60ce40331988da2b1d125b9b7e1c31bbc16ecd24b8577541bb256dd959fcd70185992e349b0d48773f201255af79e7bee265a483a758b1255d9eaa258e728b87dd2cb2b5f98b53e75afc9aba4567d80c87534630738d39be21bc4a268e60368ccd9134d620b66b4b77a0b29ae6ffec98e3e6cb7817006377f6ff018551d54f936912e19260a3f66df77ff970a29b12e52ad5128187e50fcc9a2b30d408e971d144c6c1b8b4427dc4a87da3cd762a0608cd3a797e215e0309cac3f61409c9e26aa52634b2417823ef9b4d84a6e35075c45a4f5b1f89b1ca967dc33c970cb49caf0c18d618608984afa4e012b2ff404244ecee3711aa76269c3d7aaa16840dea336bc740f343774857182ecd35f3f4869d1fe2c863fc19a14a220316d17dffc9ff72c0889e429c49e00cdcd9f42f77e143f16de8b1e46b4978eb50837667f4e79b08eeaa620e8e9e040325177892cef2b12722978224c87cd15647a9fc7d42168c27a89db227e72ecb7b989b64f9cb7623c0398a26607016ed22f27b41a91982bc19bd5249616504ccea2543cef6c26a9fa17ff0ee554afc046faa1c76146667986f2808626fa8a3047670754cabc255ce36cecdc1db939f226f1d4e9a942d974698d57b664a58a0da65f52975a6fd37bccc19a8f161dd41489a3c49eee5922b64362e62fc55ac6e7289364877acea31fc58529c3eeb264b54a1943f33fc9a5a956a17e887c1726e46fb6660a92bb579280e0a5ad1aabe16b45abdf8dddb7b976818c74e6bf6a850fa35bb4dae6484bd460925b50519eef24df1a8fbe799a6e8ac5659a6f50a91aff60afc8c5a705dfdfe473afdd19b47395bd5135500001f88537f6756b10bfef49ae4b1e32819aefdd8fbf4cd55099c28e9f1e971f561d1ccfcbcee6d2533a8e7560d34472aba90d76421be41f9a1138b616b944bd140824948cc5334ea79a83157000a6561deed73eeebb5597cf0a867c5c1c09703ace24e22606aa5ee7746df17c221b7349a80c67a2c644e9267aed096d9667b7a4bf691a1cfaeab0994574b38c894adec89f877553948b0eae26479099eba0a51611dbb76c31a0b518168eaf4d14562b55e03a327d0e4950ae5c57b390af27b69730d1f1f4f42bd9c4acdaeb101de64db2e503ff2b873e6d81dc03ecebd71525a630134ca5edf3e168e9d9e962d035bfa27dcead59b8e6a516c302dec70b41210675b9069c6872e4049e49e5189a34848f486bda83648ca52cbac48169dfa826027e2ae709883930ff2527c34c5cadda16d4214be69a49f52907c21d3a690aaaf1fa22cdf53cc204f883f178e87820cdda03333716b64d658b3f679889faa06e2a4f4799a97886880631f74e25d5c2590cf23050f5cea91055e8e3302093e62604d1d3ddf387fadaff86c7bbabc1c34713db6963220c09c0053915bbae3e40bc152f090e67d41ab1f928669ef7a1306b513b6ebf24590dbe6e4218a59111fdff6e3f54a3cfd4b4be062869fe02f33682167abcaec38f8341e798c1649ee4bcd4a6e59b475211b703b858c33c80406e9fe4494fd8d1dfb1d293ddaf23f2b6d375795827255ec83162cc4db772853d15d3dc5e0849f732159d8ff5f98f90f828123c38ceed56f85b4c0fa1ba77dd1eba9e7e4e529b8964e88adfee4a06dddc1b1774855ef6b17109aaae33f732bcf33ea1b0c1ca1731a509dbc96c19beda2dc830dfc2886b3d8c115e156a7905d3a82d22091a2cc748f64de711c8c0866cccf5187619b1fc2fdca10c4ae46e4413650681df124815f9e79784fc283cde64f07ee75f487fe628654aa16a985e95cc44846e9aec6df7c9cd6be9cc8f94b2ab01117b29762d94c5cea7e532cc3384d7bc9547a77a97076a04bdeb28f331d7847aaaeb318f94c9a9ae401c975c4c4dedd9b375642e6afedbed105539ffe95d1820e574a1c000ac0a7284c9e9227cec3848d22955b39a9423a828dfbf13f14811bce3bd04be5ffd4e231bda4a5ad119ad8735daf74037ea648555ed18139e965ef24450ce819b08897d465164b9c7ace7138bcd953332a8bf9826206da102ce3dfe24352779d8567fb4890e7a035132590ea257793bad0bcfba314e18e9fbe2e58bde2fa02401365f82274d0c498c1ce30a970bec9765a89679d1ca141cf198bd1e10088bf1e04d52bbfc9008fda1255695ce48ea828f86ac75cad5e0d230e8806cb2bebdd28617605045721bb3ddca987d6a2e6d69d713636edf0dde260c5418bdd2aa197b589a8f64efbd61e0aedd9957c1ceb69ae2b6c5a37e5555ad17fa8c3e85c8a47d3cc2d2f69f197d909ee0fe588c46a0108f24f51830f30bf1d80e0e36484068aa575a68d8562f081902044b583f0a27b16d138cc164f3730bcf7ffe5a5bdcc092879a0c2b990e35eb402ee6bd8238aa1e6a6cd83b5fea2f03ddca53ba890525bc588160e0fae26e152397fb53d200932fc3cf98955208f46392e23a7120ee904818f4042af630ffc351c901901a4c7e02cf8aab481cf73b565069e8fe221b914b9e17299014700e0b4fbe9bebcfd0ca460921e26c97b60c22ac7b432ec69e1b72edbd02bdd3d03059e80480ad9ebbc8daa9df0dbe47673adc4a3a878d95d0482f6606f0046b29f23c6a2fc92f4fb1bc6191427226f9ebe5aecf03ce083f110726811b2c1054e8edb432e44f10ad10b50264f6904ed05b99125339e21fc3b5cccda544f3acfd63cf4f86afca937dffcaffa1c16f26b37f1239e0968ef6336099bc8b06c1ccddfc5fcf59bd49a1dfb00b2b8153771c70c30e2f38684fdc2233f8aaba74ef6cf5490cabf0061335e3deb8b0508c2989c0ba065f6d3544ef00e6bee32d01e2a46f9c63d57d3069705c182ec8328d895a081e549e69a0cb45f0d8de090b48f7e1a971b102f3377d74bbb75ec3e45dbf4fb0822100d98dbcb020e74a92ac88d66b6b01c95d54f589f5764fc9c87ebd77340becba3c3cdd905edd4eefca10f951350b53a0c6f92d452e998277adc7fc80d1de7f46e3d5273de927cba3acaef40e6eb702d986c415a99c51299396bd2d80e6e645cb1e9cc34101cf5af33b19d556e5b0fc0f66eceba74c3e311fa3e108b3d2aadb99db93af6d9d3d976b139a31265ed4255fc11789ee40b4ea0b7c7350ba4012339977b9d5ebdf7a743d37fe545a0625fe63ad0036c0dc12d24477cfbf8d1050014ad4b9fe4c6b764c79000ac9548fb8d8d30863a89d83f938a81c06b9c34797d29823457b9ab55d1cbaa6523ea922683df9a4bd405e4d7e9ae73875d37447dbd8858ecd56f20679d173a755454eba321e9744a8c4e18eb0b4170e52451e28746f755c4f9f66aad40687e2cc72e86d74fba01bf53e6daaab4b41af44bc416e3c36a9f120d22b674a2ace05c4e19ca541dc8a96a261130db9f211bcce8150a624b32576021734602a7c9c8143bfeb54c7269fa3231d60dfbd9825ad0a27839e4cebd859a164793d1c765085bad11d2efc9d0803fb6cdebd4ef9f90c561c68103ab9c42ec4e5921d61cc109c87af611f290fe7dc5bf8e688f02f86a23e8e932a61cf00b6d6e2468481efaff9ccb36c8a841f40c1847491ba5b314c2ac169e017fecb02c39ee29ec0e482f52322c876a143f791e1d09f1d6a7558383c09d95b29e5765d321cfd2c80817735a1bd55307980d8748584e09ce5d52291c4238ecf0f74387e0489edb3e2757fa7441044e98db4d844f29cb90fb2c2f2ceba7055dce08bd98a19bcb0846e8379544cf84cadeaefed399d38ae46e72e98fea26374314d2772ed64145f2143f50484ce45a4fccbb7fe108a6b8c0cbabff4351b4ebaf3f7318162dc80c37c4e1ead5236966b5c8ee1fda2c176e69312bf841418723ba2eb9e4380dd2b39460688f296a7f0647b1f13043098347e71f3370552cdca18865754e42e849f9cfab5d3f36aa077857444267125eda28e2e74c5a1838102708607561dfae460f211cf51c654e66bf7c8b44d5e9c2a4d8d3353baf00f7883dd0898d4ed6f5bb7cc6e97eeb280369063ef711859135d68ddc93f62d5fef5613a65908acbad3e73d15c03325e329c8d880e77e84740e1ad1761ad2b1d9badfdd38c81605d0b8a6e277e5cdf7da920f92978452e857e376a1b0df2f97aa1ca207c9479c3756c06f42ab4c0c8924043e7a23e636bcec78628f5ede1f81c12e70363dd612b2d4a5019d226e0b137e7019e272878e2e19d581aee7e1799605ca6f2e7c998b59beed393a24ddd4d8d99d90a0ed0f4b828da334e4e36fff8aabf6529410aafd2387a32af78eeac6fd386a68db56d5d8de4974192007cb84e099064c7fb23c13ffecad7522bcb4aeb16274e621f9f82a46e11e6513fbf60c94ad2baf2c407f37e017d510fef9a952fcb8c9717f4ec3198ccb9bb54ae556ec76554beb5339e4130190fea4faf625b2f02dfbbb8cdc4f9bfcb9d31a3059bb7447e8904067daffd42fb0aefc44be856301040be667484c079023eec298b91e3a507a9b2fa44436dbb7bb79b3486ab9f7a3f2c5f2f60e6254237faf0f7810089e35a6673c2b6b1a2abe9c35173ece85351af60232bfce18249701fe7091994f9d38ff257576b17b4427cfb5a189f5cf180edad44f390d2b975ff291781ea897c663c2ffd5d3b5c0877958cee827f823c047d69050a260cb29df2c2e5cebc239e90a4eed56181ac9edee0c118150e5e9b65a04036c0248a05bee2b041bde53e8adf0f3ea97a14fb3dc6354b4d1f973638636ff2c31f7de31af7bea9b1df71d2d19a729956af9e4c3115b74159585f6439522215cc443977b4b26606b2787e24280cb293d23c4ed52b07aab00e23b4d4ed7da964e4fbcf31fd5bdf15586d07af93563f88c49b7f0d59ade85df6b8881370a6353e4a16d9c55bb6ced910690dc60e7569348d9984f160f0ff667ec2439432d825f6f3fbc13e99e9eccb7078e59a0370ed4d5df6b88e41ef450a8e0e877664678cb0fb80cfa03639c0b455752692567c32b7cdb1880a962ed1f62d4236ab521ea670179f8baeb7c74f1bb5e460518a4817647c68d78737efe852ecc7f59ce4d687a67d0c89fa8f807c48dc068325e7fbb257331e99bd3f919db653e40bc27c0868e838a85b19b3669068898b56973ee312c51c142a1dc55371f1593abe1e32b52129170c1cfbda25bd08e369d517a242e296edb767fab7a38d4d58ee33b90f3e33f0f5e1dbc179892981014de315ae38505457b8f3c2affec930153807accf6ee2d690b987a096266793b2950df6dae5faf3f37da52b0574c6b918cfcb68e5114514ed5b6e8eb13c8e3119845dfae8b15129fd71abbe7184f4dc9fcc514bca23b1abb3d27b8907541e212409906b1b7c113fbb3fc42d6bb1e15be8dc20c60c85a891d72ea7ad5cde29d2fdae42b09eac751a32ce413e4a919a909fa2dcc3b329a83a80795a69c0a80fcf5c065cef7074d8eefdd8143e4d0c7bc6617b6384a6c5a9074ad3e153333ecab5484e7d7838b828664573f4538148f38eeaf90d829bbc5c27df4220dcbbb82667b0056e4cbee794068aa8a8abcacae6d51df1b8607d5283196702417da99a63cefb4e1cbe981e7ced6b1aed1987bed466a0a8841b790e2b1363c5ac1eba5ea88b0f970ae93741f839763f05b8c64d67c0ec01f93748fcfbb7382cf559ed6b8b793196e3f365a7a517512c2089865bfc8c64ce694b7882264615cca39", @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000580)={&(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000280)="2a783f58cdcf80383ac9ed1e758b9bca6e7d9392171cc1e70e99a8cab561b3e5b00d9a598aed9a480550f310c53658fc17857f41112c532ac8269f421f90f3f2e67a63470a0901cc066f65ac6c4c287cebd95f60e5270e82f2ddd078969679965a40d933895221b65a", 0x69}, {&(0x7f0000000440)="4a55dbb73d2785df2cdeb302bd6b61c6cc18f14b4c320cfb81312623d0431f7a933f0e7f2e2c001cc72850ab7257a12630563f207ccd6c96a5d00045541f883c4860584306a8a50ab090e77cb022f171cce94cb7dd7c4b9973a3f06751212757afb53cc03565d8ebc0cefad95a2aec930c3600a934422e7a08ef14725621e647b2632b4f3dd5c052be87a3eab111476852bef9b7f79f435a8443046f2c481fa811f1c832b44b5a7594261add0d3c9943786148953f0379df6c1a95da254987d9b2c568b150", 0xc5}, {&(0x7f0000000300)="94e74f5743b123710e3121b147a28a906f614737080676655cdd98e226eda5abe2a2f1d61748f1aa61d1588cc2f1b860a40f1fe1233077f65dfe399f7db7902d615cfbb34a73a59c9991da26b6447167fc802e62e5ebc36f52bc9860c6998a4871a26634c19b7d5ab81cd27c4bcde427c4e90311ba11a06c1c5c6138b58b055f090a978e29b6ada3619fb7d2c53931632ede8678ecfcaa9fb113b2315b6797cfe74fbe", 0xa3}, {&(0x7f0000000680)="ce5558c861762aeadf9d7959a5edcb7d75bbf9e1f04fdba9f34b1584d5e503dff40d720a69b59fb4f766b084fa3a680ffd651d8c9fa46c3205aeb3bb206f9690d622a041d24b38601c19acd3f206f761aa0be20b9e69a8598e311c84458a8a45306867944cfb13e2f3cd656410d49200bb95a2bd72db044b1bae202366181d48572f5a6547c35a6646737b", 0x8b}, {&(0x7f0000000540)="9f05676736fd9cc6095584cf7c65f62d7bccfb2c5710e4e9ad18111a1bfba400033d836bd2f18ef1ab3686", 0x2b}, {&(0x7f0000000740)="abf789842ee3ff46af7fdb29e09452726f6ca32647e9a7e198be55ab2ec94fd26bf5ee8a89370396f3bb798ebe8eb22ac1f2c7d67cf7f93c56f4fa4a195e42e2e044e34ec277b7a35ffe6367621901", 0x4f}, {&(0x7f00000008c0)="5d5306629567488fa22a07a7c5c90518456da4a61238026c1c483f981c16ca2a058b1b3c6ecb4e6f5e45bea8f79700ab5c5981ca4e69437d21b7cc7951a4237291bde886d8dd0107b1104bdde8a6ad4c30e3f4b641e3b4d2abd7d4972130f79bac708ce2cc92e38ad1d434b154094ec2e5da690d539b746a7b47a59ff1259393613cf068212297fc0eb5dcda9996", 0x8e}, {&(0x7f0000000980)="3948dfc87f93dcca8234f0e912401b7702a5aef1c0c134cdc0bba5026a53e8b127af929cf3a3d69435c6f5e4db87b3feffe98ac09828d66c80d5c237434987b594d1a9bbff6d5aaf0d0bd2d86fb48f266681e6363c3570720abc20ebadde0c656d721689d4620d", 0x67}, {&(0x7f0000000a00)="15df7044c52fa7bd153450032598edafd3bc67413529daadbf7e68e3945d8752cc90c9dbbf29e6d9c1027370b7f821a848a3b3a5f3e0b22f7ddc259d13a98fa8ed867d10eda707f933de019a9fe4b887b3c90fbe56fd6013404f3a532bf291adc4368e9479caa69eee983132907c9e22e91cf715fb7aa07effed3548833fc93ae4364f43b6d2e33f869af33fe19c81f5595a12952a23375f91aaf36ecf5c2acf88ad8b9c364a11442bea66e83b3559b450", 0xb1}], 0x9}, 0x24008080) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000880)={0x1c, r6, 0x412d6ba1d00e5677, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, r6, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r9 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0xa, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r7, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x100, 0x10001, 0x0, 0x7b}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080d5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r11, 0x0, 0x10000a006) 13:01:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x17c, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}]}, @NL80211_ATTR_KEYS={0x148, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8c863fccbd58e9e60266f297bf"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "c8644cf6a547450d72ee97085e"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x13, 0x4, "bcc5feb1b40ab038cd576c14848a9f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b6fb8999d9"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xd, 0x4, "948523660f841ff98b"}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40001) (async, rerun: 32) setreuid(0x0, 0xee00) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r2, &(0x7f0000000240)=""/180, 0xb4) [ 761.763113][T22313] FAULT_INJECTION: forcing a failure. [ 761.763113][T22313] name failslab, interval 1, probability 0, space 0, times 0 [ 761.836929][T22313] CPU: 1 PID: 22313 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 761.846900][T22313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 761.857002][T22313] Call Trace: [ 761.860327][T22313] [ 761.863300][T22313] dump_stack_lvl+0x136/0x150 [ 761.868071][T22313] should_fail_ex+0x4a3/0x5b0 [ 761.872835][T22313] should_failslab+0x9/0x20 [ 761.877403][T22313] kmem_cache_alloc_node+0x5c/0x3e0 [ 761.882734][T22313] __alloc_skb+0x288/0x330 [ 761.887224][T22313] ? __napi_build_skb+0x50/0x50 [ 761.892153][T22313] ? find_held_lock+0x2d/0x110 [ 761.897014][T22313] mgmt_cmd_status+0x42/0x500 [ 761.901846][T22313] set_discoverable+0x3e0/0xfa0 [ 761.906772][T22313] ? set_bredr+0x9a0/0x9a0 [ 761.911262][T22313] ? do_raw_read_unlock+0x44/0xe0 [ 761.916364][T22313] ? set_class_sync+0x90/0x90 [ 761.921292][T22313] hci_sock_sendmsg+0x1de0/0x2480 [ 761.926384][T22313] ? hci_sock_setsockopt+0xa20/0xa20 [ 761.931730][T22313] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 761.937118][T22313] ? hci_sock_setsockopt+0xa20/0xa20 [ 761.942450][T22313] sock_sendmsg+0xde/0x190 [ 761.946920][T22313] sock_write_iter+0x295/0x3d0 [ 761.951730][T22313] ? sock_sendmsg+0x190/0x190 [ 761.956474][T22313] ? bpf_lsm_file_permission+0x9/0x10 [ 761.961890][T22313] ? security_file_permission+0xaf/0xd0 [ 761.967471][T22313] vfs_write+0x945/0xd50 [ 761.971745][T22313] ? kernel_write+0x670/0x670 [ 761.976496][T22313] ? receive_fd+0x110/0x110 [ 761.981032][T22313] ? __fget_files+0x26a/0x480 [ 761.985745][T22313] ? __fget_light+0xe5/0x270 [ 761.990370][T22313] ksys_write+0x1ec/0x250 [ 761.994733][T22313] ? __ia32_sys_read+0xb0/0xb0 [ 761.999552][T22313] ? syscall_enter_from_user_mode+0x26/0x80 [ 762.005492][T22313] do_syscall_64+0x39/0xb0 [ 762.009949][T22313] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 762.015882][T22313] RIP: 0033:0x7fdaed88c169 [ 762.020325][T22313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 762.039948][T22313] RSP: 002b:00007fdaee599168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 762.048387][T22313] RAX: ffffffffffffffda RBX: 00007fdaed9ac050 RCX: 00007fdaed88c169 [ 762.056375][T22313] RDX: 0000000000000009 RSI: 0000000020000000 RDI: 0000000000000004 [ 762.064446][T22313] RBP: 00007fdaee5991d0 R08: 0000000000000000 R09: 0000000000000000 [ 762.072436][T22313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.080426][T22313] R13: 00007fff8e2ddc7f R14: 00007fdaee599300 R15: 0000000000022000 [ 762.088436][T22313] 13:01:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x17c, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}]}, @NL80211_ATTR_KEYS={0x148, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8c863fccbd58e9e60266f297bf"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "c8644cf6a547450d72ee97085e"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x13, 0x4, "bcc5feb1b40ab038cd576c14848a9f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b6fb8999d9"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xd, 0x4, "948523660f841ff98b"}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40001) setreuid(0x0, 0xee00) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r2, &(0x7f0000000240)=""/180, 0xb4) 13:01:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x112) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x2, 0x67, "3f9743", 0x80, 0x1f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3398f14309169d0f}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0000000000000000df254f0000020c009900001f6300000028007a800800040007080000080004000200000015000400070000400c000300ccb4bb57191a012a"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040805) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) creat(&(0x7f0000000240)='./file0\x00', 0x112) (async) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x2, 0x67, "3f9743", 0x80, 0x1f}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3398f14309169d0f}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0000000000000000df254f0000020c009900001f6300000028007a800800040007080000080004000200000015000400070000400c000300ccb4bb57191a012a"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040805) (async) [ 762.260405][ T27] audit: type=1804 audit(1685278874.160:417): pid=22330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/563/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 13:01:14 executing program 5: setreuid(0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x7fffffffffffffff) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = socket$isdn(0x22, 0x3, 0x21) sendfile(0xffffffffffffffff, r1, &(0x7f0000000080)=0x27, 0x38) 13:01:14 executing program 5: setreuid(0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) (async, rerun: 32) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x7fffffffffffffff) (rerun: 32) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = socket$isdn(0x22, 0x3, 0x21) sendfile(0xffffffffffffffff, r1, &(0x7f0000000080)=0x27, 0x38) 13:01:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0xa, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r7, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x100, 0x10001, 0x0, 0x7b}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080d5) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r7, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x100, 0x10001, 0x0, 0x7b}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080d5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r11, 0x0, 0x10000a006) 13:01:14 executing program 5: setreuid(0xffffffffffffffff, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x7fffffffffffffff) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = socket$isdn(0x22, 0x3, 0x21) sendfile(0xffffffffffffffff, r1, &(0x7f0000000080)=0x27, 0x38) [ 762.822031][ T5046] Bluetooth: hci0: Opcode 0x c3a failed: -110 [ 762.822390][ T5062] Bluetooth: hci0: command 0x0c3a tx timeout 13:01:14 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x90) quotactl_fd$Q_SYNC(r0, 0x1, 0x0, 0x0) 13:01:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) r1 = socket(0x11, 0x800000003, 0x0) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async, rerun: 64) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r7 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000580)={&(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000280)="2a783f58cdcf80383ac9ed1e758b9bca6e7d9392171cc1e70e99a8cab561b3e5b00d9a598aed9a480550f310c53658fc17857f41112c532ac8269f421f90f3f2e67a63470a0901cc066f65ac6c4c287cebd95f60e5270e82f2ddd078969679965a40d933895221b65a", 0x69}, {&(0x7f0000000440)="4a55dbb73d2785df2cdeb302bd6b61c6cc18f14b4c320cfb81312623d0431f7a933f0e7f2e2c001cc72850ab7257a12630563f207ccd6c96a5d00045541f883c4860584306a8a50ab090e77cb022f171cce94cb7dd7c4b9973a3f06751212757afb53cc03565d8ebc0cefad95a2aec930c3600a934422e7a08ef14725621e647b2632b4f3dd5c052be87a3eab111476852bef9b7f79f435a8443046f2c481fa811f1c832b44b5a7594261add0d3c9943786148953f0379df6c1a95da254987d9b2c568b150", 0xc5}, {&(0x7f0000000300)="94e74f5743b123710e3121b147a28a906f614737080676655cdd98e226eda5abe2a2f1d61748f1aa61d1588cc2f1b860a40f1fe1233077f65dfe399f7db7902d615cfbb34a73a59c9991da26b6447167fc802e62e5ebc36f52bc9860c6998a4871a26634c19b7d5ab81cd27c4bcde427c4e90311ba11a06c1c5c6138b58b055f090a978e29b6ada3619fb7d2c53931632ede8678ecfcaa9fb113b2315b6797cfe74fbe", 0xa3}, {&(0x7f0000000680)="ce5558c861762aeadf9d7959a5edcb7d75bbf9e1f04fdba9f34b1584d5e503dff40d720a69b59fb4f766b084fa3a680ffd651d8c9fa46c3205aeb3bb206f9690d622a041d24b38601c19acd3f206f761aa0be20b9e69a8598e311c84458a8a45306867944cfb13e2f3cd656410d49200bb95a2bd72db044b1bae202366181d48572f5a6547c35a6646737b", 0x8b}, {&(0x7f0000000540)="9f05676736fd9cc6095584cf7c65f62d7bccfb2c5710e4e9ad18111a1bfba400033d836bd2f18ef1ab3686", 0x2b}, {&(0x7f0000000740)="abf789842ee3ff46af7fdb29e09452726f6ca32647e9a7e198be55ab2ec94fd26bf5ee8a89370396f3bb798ebe8eb22ac1f2c7d67cf7f93c56f4fa4a195e42e2e044e34ec277b7a35ffe6367621901", 0x4f}, {&(0x7f00000008c0)="5d5306629567488fa22a07a7c5c90518456da4a61238026c1c483f981c16ca2a058b1b3c6ecb4e6f5e45bea8f79700ab5c5981ca4e69437d21b7cc7951a4237291bde886d8dd0107b1104bdde8a6ad4c30e3f4b641e3b4d2abd7d4972130f79bac708ce2cc92e38ad1d434b154094ec2e5da690d539b746a7b47a59ff1259393613cf068212297fc0eb5dcda9996", 0x8e}, {&(0x7f0000000980)="3948dfc87f93dcca8234f0e912401b7702a5aef1c0c134cdc0bba5026a53e8b127af929cf3a3d69435c6f5e4db87b3feffe98ac09828d66c80d5c237434987b594d1a9bbff6d5aaf0d0bd2d86fb48f266681e6363c3570720abc20ebadde0c656d721689d4620d", 0x67}, {&(0x7f0000000a00)="15df7044c52fa7bd153450032598edafd3bc67413529daadbf7e68e3945d8752cc90c9dbbf29e6d9c1027370b7f821a848a3b3a5f3e0b22f7ddc259d13a98fa8ed867d10eda707f933de019a9fe4b887b3c90fbe56fd6013404f3a532bf291adc4368e9479caa69eee983132907c9e22e91cf715fb7aa07effed3548833fc93ae4364f43b6d2e33f869af33fe19c81f5595a12952a23375f91aaf36ecf5c2acf88ad8b9c364a11442bea66e83b3559b450", 0xb1}], 0x9}, 0x24008080) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000880)={0x1c, r6, 0x412d6ba1d00e5677, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, r6, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r9 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x3ff, "8eeca7", 0x6, 0xff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x3, &(0x7f0000000180)=[{@fixed}, {@fixed}, {}]}) 13:01:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) readahead(r4, 0x4, 0x10001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES16=r1], 0x6db6e571) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r8, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="6466660f3882260600dde29ad26a9100ba200066ed0f226666260f3567d0bdf87f0000ba400066ed660f3880b0304bf2f01127", 0x33}], 0x1, 0x20, &(0x7f0000000100)=[@efer={0x2, 0xa801}, @cstype0={0x4, 0xe}], 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0xa, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r7, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x100, 0x10001, 0x0, 0x7b}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080d5) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r11, 0x0, 0x10000a006) 13:01:15 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x90) quotactl_fd$Q_SYNC(r0, 0x1, 0x0, 0x0) 13:01:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x3ff, "8eeca7", 0x6, 0xff}) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x3, &(0x7f0000000180)=[{@fixed}, {@fixed}, {}]}) 13:01:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x3) 13:01:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async, rerun: 32) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x3ff, "8eeca7", 0x6, 0xff}) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x3, &(0x7f0000000180)=[{@fixed}, {@fixed}, {}]}) 13:01:15 executing program 5: setreuid(0x0, 0xee00) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x90) (async) quotactl_fd$Q_SYNC(r0, 0x1, 0x0, 0x0) 13:01:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) readahead(r4, 0x4, 0x10001) (async) readahead(r4, 0x4, 0x10001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES16=r1], 0x6db6e571) (async) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES16=r1], 0x6db6e571) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) write$binfmt_script(r7, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r8, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="6466660f3882260600dde29ad26a9100ba200066ed0f226666260f3567d0bdf87f0000ba400066ed660f3880b0304bf2f01127", 0x33}], 0x1, 0x20, &(0x7f0000000100)=[@efer={0x2, 0xa801}, @cstype0={0x4, 0xe}], 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000580)={&(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000280)="2a783f58cdcf80383ac9ed1e758b9bca6e7d9392171cc1e70e99a8cab561b3e5b00d9a598aed9a480550f310c53658fc17857f41112c532ac8269f421f90f3f2e67a63470a0901cc066f65ac6c4c287cebd95f60e5270e82f2ddd078969679965a40d933895221b65a", 0x69}, {&(0x7f0000000440)="4a55dbb73d2785df2cdeb302bd6b61c6cc18f14b4c320cfb81312623d0431f7a933f0e7f2e2c001cc72850ab7257a12630563f207ccd6c96a5d00045541f883c4860584306a8a50ab090e77cb022f171cce94cb7dd7c4b9973a3f06751212757afb53cc03565d8ebc0cefad95a2aec930c3600a934422e7a08ef14725621e647b2632b4f3dd5c052be87a3eab111476852bef9b7f79f435a8443046f2c481fa811f1c832b44b5a7594261add0d3c9943786148953f0379df6c1a95da254987d9b2c568b150", 0xc5}, {&(0x7f0000000300)="94e74f5743b123710e3121b147a28a906f614737080676655cdd98e226eda5abe2a2f1d61748f1aa61d1588cc2f1b860a40f1fe1233077f65dfe399f7db7902d615cfbb34a73a59c9991da26b6447167fc802e62e5ebc36f52bc9860c6998a4871a26634c19b7d5ab81cd27c4bcde427c4e90311ba11a06c1c5c6138b58b055f090a978e29b6ada3619fb7d2c53931632ede8678ecfcaa9fb113b2315b6797cfe74fbe", 0xa3}, {&(0x7f0000000680)="ce5558c861762aeadf9d7959a5edcb7d75bbf9e1f04fdba9f34b1584d5e503dff40d720a69b59fb4f766b084fa3a680ffd651d8c9fa46c3205aeb3bb206f9690d622a041d24b38601c19acd3f206f761aa0be20b9e69a8598e311c84458a8a45306867944cfb13e2f3cd656410d49200bb95a2bd72db044b1bae202366181d48572f5a6547c35a6646737b", 0x8b}, {&(0x7f0000000540)="9f05676736fd9cc6095584cf7c65f62d7bccfb2c5710e4e9ad18111a1bfba400033d836bd2f18ef1ab3686", 0x2b}, {&(0x7f0000000740)="abf789842ee3ff46af7fdb29e09452726f6ca32647e9a7e198be55ab2ec94fd26bf5ee8a89370396f3bb798ebe8eb22ac1f2c7d67cf7f93c56f4fa4a195e42e2e044e34ec277b7a35ffe6367621901", 0x4f}, {&(0x7f00000008c0)="5d5306629567488fa22a07a7c5c90518456da4a61238026c1c483f981c16ca2a058b1b3c6ecb4e6f5e45bea8f79700ab5c5981ca4e69437d21b7cc7951a4237291bde886d8dd0107b1104bdde8a6ad4c30e3f4b641e3b4d2abd7d4972130f79bac708ce2cc92e38ad1d434b154094ec2e5da690d539b746a7b47a59ff1259393613cf068212297fc0eb5dcda9996", 0x8e}, {&(0x7f0000000980)="3948dfc87f93dcca8234f0e912401b7702a5aef1c0c134cdc0bba5026a53e8b127af929cf3a3d69435c6f5e4db87b3feffe98ac09828d66c80d5c237434987b594d1a9bbff6d5aaf0d0bd2d86fb48f266681e6363c3570720abc20ebadde0c656d721689d4620d", 0x67}, {&(0x7f0000000a00)="15df7044c52fa7bd153450032598edafd3bc67413529daadbf7e68e3945d8752cc90c9dbbf29e6d9c1027370b7f821a848a3b3a5f3e0b22f7ddc259d13a98fa8ed867d10eda707f933de019a9fe4b887b3c90fbe56fd6013404f3a532bf291adc4368e9479caa69eee983132907c9e22e91cf715fb7aa07effed3548833fc93ae4364f43b6d2e33f869af33fe19c81f5595a12952a23375f91aaf36ecf5c2acf88ad8b9c364a11442bea66e83b3559b450", 0xb1}], 0x9}, 0x24008080) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000880)={0x1c, r6, 0x412d6ba1d00e5677, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, r6, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r9 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f7002"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) socket$phonet(0x23, 0x2, 0x1) (async) sendmsg$inet(r7, &(0x7f0000000580)={&(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000280)="2a783f58cdcf80383ac9ed1e758b9bca6e7d9392171cc1e70e99a8cab561b3e5b00d9a598aed9a480550f310c53658fc17857f41112c532ac8269f421f90f3f2e67a63470a0901cc066f65ac6c4c287cebd95f60e5270e82f2ddd078969679965a40d933895221b65a", 0x69}, {&(0x7f0000000440)="4a55dbb73d2785df2cdeb302bd6b61c6cc18f14b4c320cfb81312623d0431f7a933f0e7f2e2c001cc72850ab7257a12630563f207ccd6c96a5d00045541f883c4860584306a8a50ab090e77cb022f171cce94cb7dd7c4b9973a3f06751212757afb53cc03565d8ebc0cefad95a2aec930c3600a934422e7a08ef14725621e647b2632b4f3dd5c052be87a3eab111476852bef9b7f79f435a8443046f2c481fa811f1c832b44b5a7594261add0d3c9943786148953f0379df6c1a95da254987d9b2c568b150", 0xc5}, {&(0x7f0000000300)="94e74f5743b123710e3121b147a28a906f614737080676655cdd98e226eda5abe2a2f1d61748f1aa61d1588cc2f1b860a40f1fe1233077f65dfe399f7db7902d615cfbb34a73a59c9991da26b6447167fc802e62e5ebc36f52bc9860c6998a4871a26634c19b7d5ab81cd27c4bcde427c4e90311ba11a06c1c5c6138b58b055f090a978e29b6ada3619fb7d2c53931632ede8678ecfcaa9fb113b2315b6797cfe74fbe", 0xa3}, {&(0x7f0000000680)="ce5558c861762aeadf9d7959a5edcb7d75bbf9e1f04fdba9f34b1584d5e503dff40d720a69b59fb4f766b084fa3a680ffd651d8c9fa46c3205aeb3bb206f9690d622a041d24b38601c19acd3f206f761aa0be20b9e69a8598e311c84458a8a45306867944cfb13e2f3cd656410d49200bb95a2bd72db044b1bae202366181d48572f5a6547c35a6646737b", 0x8b}, {&(0x7f0000000540)="9f05676736fd9cc6095584cf7c65f62d7bccfb2c5710e4e9ad18111a1bfba400033d836bd2f18ef1ab3686", 0x2b}, {&(0x7f0000000740)="abf789842ee3ff46af7fdb29e09452726f6ca32647e9a7e198be55ab2ec94fd26bf5ee8a89370396f3bb798ebe8eb22ac1f2c7d67cf7f93c56f4fa4a195e42e2e044e34ec277b7a35ffe6367621901", 0x4f}, {&(0x7f00000008c0)="5d5306629567488fa22a07a7c5c90518456da4a61238026c1c483f981c16ca2a058b1b3c6ecb4e6f5e45bea8f79700ab5c5981ca4e69437d21b7cc7951a4237291bde886d8dd0107b1104bdde8a6ad4c30e3f4b641e3b4d2abd7d4972130f79bac708ce2cc92e38ad1d434b154094ec2e5da690d539b746a7b47a59ff1259393613cf068212297fc0eb5dcda9996", 0x8e}, {&(0x7f0000000980)="3948dfc87f93dcca8234f0e912401b7702a5aef1c0c134cdc0bba5026a53e8b127af929cf3a3d69435c6f5e4db87b3feffe98ac09828d66c80d5c237434987b594d1a9bbff6d5aaf0d0bd2d86fb48f266681e6363c3570720abc20ebadde0c656d721689d4620d", 0x67}, {&(0x7f0000000a00)="15df7044c52fa7bd153450032598edafd3bc67413529daadbf7e68e3945d8752cc90c9dbbf29e6d9c1027370b7f821a848a3b3a5f3e0b22f7ddc259d13a98fa8ed867d10eda707f933de019a9fe4b887b3c90fbe56fd6013404f3a532bf291adc4368e9479caa69eee983132907c9e22e91cf715fb7aa07effed3548833fc93ae4364f43b6d2e33f869af33fe19c81f5595a12952a23375f91aaf36ecf5c2acf88ad8b9c364a11442bea66e83b3559b450", 0xb1}], 0x9}, 0x24008080) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000880)={0x1c, r6, 0x412d6ba1d00e5677, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, r6, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) 13:01:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000022c000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r1, 0x805e8000) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000fa34d181b619087de10000000060c8"], 0x9) 13:01:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x5) [ 764.250054][ T27] audit: type=1804 audit(1685278876.150:418): pid=22412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/566/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 13:01:16 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 13:01:16 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) 13:01:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0xf) 13:01:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) (async) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000022c000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r1, 0x805e8000) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000fa34d181b619087de10000000060c8"], 0x9) 13:01:16 executing program 5: setreuid(0x0, 0xee00) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) 13:01:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) readahead(r4, 0x4, 0x10001) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES16=r1], 0x6db6e571) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r8, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="6466660f3882260600dde29ad26a9100ba200066ed0f226666260f3567d0bdf87f0000ba400066ed660f3880b0304bf2f01127", 0x33}], 0x1, 0x20, &(0x7f0000000100)=[@efer={0x2, 0xa801}, @cstype0={0x4, 0xe}], 0x2) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:16 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) setreuid(0x0, 0xee00) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) (async) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) (async) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) (async) 13:01:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x4c) 13:01:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000022c000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r1, 0x805e8000) (async) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) (async) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000fa34d181b619087de10000000060c8"], 0x9) [ 765.079631][ T27] audit: type=1804 audit(1685278876.980:419): pid=22464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/568/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 13:01:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r2 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='spmi_cmd\x00', r1}, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a006) [ 765.542057][ T5046] Bluetooth: hci0: Opcode 0x c3a failed: -110 [ 765.542157][ T5062] Bluetooth: hci0: command 0x0c3a tx timeout [ 765.592203][ T27] audit: type=1804 audit(1685278877.500:420): pid=22487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/569/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 765.649764][T22440] loop4: detected capacity change from 0 to 32768 [ 765.658218][T22440] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (22440) [ 765.676442][T22440] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 765.687477][T22440] BTRFS info (device loop4): turning on sync discard [ 765.694507][T22440] BTRFS info (device loop4): using free space tree [ 765.729059][T22440] BTRFS info (device loop4): enabling ssd optimizations [ 765.761753][T22440] FAULT_INJECTION: forcing a failure. [ 765.761753][T22440] name failslab, interval 1, probability 0, space 0, times 0 [ 765.774708][T22440] CPU: 0 PID: 22440 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 765.784675][T22440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 765.794769][T22440] Call Trace: [ 765.798108][T22440] [ 765.801080][T22440] dump_stack_lvl+0x136/0x150 [ 765.805838][T22440] should_fail_ex+0x4a3/0x5b0 [ 765.810609][T22440] should_failslab+0x9/0x20 [ 765.815178][T22440] __kmem_cache_alloc_node+0x5b/0x320 [ 765.820611][T22440] ? tomoyo_realpath_from_path+0xc3/0x600 [ 765.826398][T22440] ? tomoyo_realpath_from_path+0xc3/0x600 [ 765.832174][T22440] __kmalloc+0x4e/0x190 [ 765.836382][T22440] ? rcu_is_watching+0x12/0xb0 [ 765.841201][T22440] tomoyo_realpath_from_path+0xc3/0x600 [ 765.846813][T22440] ? tomoyo_path_number_perm+0x1c1/0x570 [ 765.852489][T22440] tomoyo_path_number_perm+0x21a/0x570 [ 765.857977][T22440] ? tomoyo_path_number_perm+0x1c1/0x570 [ 765.863646][T22440] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 765.869482][T22440] ? find_held_lock+0x2d/0x110 [ 765.874294][T22440] ? lock_downgrade+0x690/0x690 [ 765.879205][T22440] ? trace_lock_acquire+0x12d/0x180 [ 765.884458][T22440] ? receive_fd+0x110/0x110 [ 765.888995][T22440] ? lock_acquire+0x32/0xc0 [ 765.893548][T22440] ? receive_fd+0x110/0x110 [ 765.898088][T22440] ? __fget_files+0x26a/0x480 [ 765.902805][T22440] security_file_ioctl+0x54/0xb0 [ 765.907795][T22440] __x64_sys_ioctl+0xb7/0x210 [ 765.912521][T22440] do_syscall_64+0x39/0xb0 [ 765.916987][T22440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.922932][T22440] RIP: 0033:0x7ffba488c169 [ 765.927377][T22440] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 765.947015][T22440] RSP: 002b:00007ffba55ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.955472][T22440] RAX: ffffffffffffffda RBX: 00007ffba49abf80 RCX: 00007ffba488c169 [ 765.963468][T22440] RDX: 0000000020000240 RSI: 0000000040806685 RDI: 0000000000000004 [ 765.971480][T22440] RBP: 00007ffba55ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 765.979473][T22440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.987462][T22440] R13: 00007ffebbcc4d0f R14: 00007ffba55ef300 R15: 0000000000022000 [ 765.995473][T22440] [ 766.012031][T22440] ERROR: Out of memory at tomoyo_realpath_from_path. 13:01:17 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 13:01:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x138) 13:01:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@delnexthop={0x58, 0x69, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x44041) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73827a317a792587bcf5e9d126d2c84e2fd0f5e726d51564a4343e16bfaf4ca5111b4dd206e67f0050d5f37fbf29de3e1f2f0408a54fbef7e84fa50345374a0372d57c1c"], 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0x4, 0x4}, 0x6) 13:01:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='exofs\x00', 0xb10410, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00') write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80700, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1ff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0x585}, 0x8) setreuid(0x0, 0xee00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x4, 0x8}, {0x3, 0x21}]}, 0x14, 0x1) read$snddsp(r4, &(0x7f0000000240)=""/180, 0xb4) [ 766.029570][T22440] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) 13:01:18 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r2 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) socket(0x2c, 0x3, 0x0) (async) r4 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='spmi_cmd\x00', r1}, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a006) 13:01:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80700, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1ff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0x585}, 0x8) (async, rerun: 32) setreuid(0x0, 0xee00) (rerun: 32) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x4, 0x8}, {0x3, 0x21}]}, 0x14, 0x1) (async) read$snddsp(r4, &(0x7f0000000240)=""/180, 0xb4) 13:01:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async, rerun: 32) r2 = socket(0x0, 0x0, 0x0) (rerun: 32) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='spmi_cmd\x00', r1}, 0x10) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a006) 13:01:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000540)={@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, 0x0, 0x3, [@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}]}, 0x1c) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xdc, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xf}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x3c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xf, 0x1, @random="800e2a583457fc5d7058c6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, @NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0x15, 0x0, @random="fbc2a92586a9afcc56b1243dfdac9554e1"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xb, 0x0, @random="b0a710045f3644"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eab3c2bfdbae"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCDELRT(r10, 0x890c, &(0x7f00000004c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x4000000}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x2}}, 0x7f, 0x0, 0x0, 0x0, 0x81, &(0x7f00000003c0)='veth1_to_hsr\x00', 0x9, 0xffffffff, 0x81}) sendfile(r9, r8, 0x0, 0x10000a006) 13:01:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@delnexthop={0x58, 0x69, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x44041) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73827a317a792587bcf5e9d126d2c84e2fd0f5e726d51564a4343e16bfaf4ca5111b4dd206e67f0050d5f37fbf29de3e1f2f0408a54fbef7e84fa50345374a0372d57c1c"], 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) (async) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0x4, 0x4}, 0x6) 13:01:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x404) 13:01:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80700, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1ff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0x585}, 0x8) setreuid(0x0, 0xee00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x4, 0x8}, {0x3, 0x21}]}, 0x14, 0x1) (async) read$snddsp(r4, &(0x7f0000000240)=""/180, 0xb4) [ 766.998355][ T27] audit: type=1804 audit(1685278878.900:421): pid=22551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/572/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 767.358506][T22557] loop4: detected capacity change from 0 to 32768 [ 767.366439][T22557] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (22557) [ 767.397089][T22557] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 767.406631][T22557] BTRFS info (device loop4): turning on sync discard [ 767.413823][T22557] BTRFS info (device loop4): using free space tree [ 767.435269][T22557] BTRFS info (device loop4): enabling ssd optimizations [ 767.457892][T22557] FAULT_INJECTION: forcing a failure. [ 767.457892][T22557] name failslab, interval 1, probability 0, space 0, times 0 [ 767.470866][T22557] CPU: 1 PID: 22557 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 767.480814][T22557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 767.490919][T22557] Call Trace: [ 767.494233][T22557] [ 767.497215][T22557] dump_stack_lvl+0x136/0x150 [ 767.501975][T22557] should_fail_ex+0x4a3/0x5b0 [ 767.506737][T22557] should_failslab+0x9/0x20 [ 767.511317][T22557] __kmem_cache_alloc_node+0x5b/0x320 [ 767.516749][T22557] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 767.522193][T22557] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 767.527618][T22557] __kmalloc+0x4e/0x190 [ 767.531825][T22557] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 767.537531][T22557] tomoyo_encode2.part.0+0xe9/0x3a0 [ 767.542787][T22557] ? tomoyo_realpath_from_path+0xc3/0x600 [ 767.548573][T22557] ? rcu_is_watching+0x12/0xb0 [ 767.553402][T22557] tomoyo_encode+0x2c/0x50 [ 767.557874][T22557] tomoyo_realpath_from_path+0x185/0x600 [ 767.563574][T22557] tomoyo_path_number_perm+0x21a/0x570 [ 767.569091][T22557] ? tomoyo_path_number_perm+0x1c1/0x570 [ 767.574789][T22557] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 767.580760][T22557] ? find_held_lock+0x2d/0x110 [ 767.585617][T22557] ? lock_downgrade+0x690/0x690 [ 767.590569][T22557] ? trace_lock_acquire+0x12d/0x180 [ 767.595844][T22557] ? receive_fd+0x110/0x110 [ 767.600397][T22557] ? lock_acquire+0x32/0xc0 [ 767.604966][T22557] ? receive_fd+0x110/0x110 [ 767.609535][T22557] ? __fget_files+0x26a/0x480 [ 767.614277][T22557] security_file_ioctl+0x54/0xb0 [ 767.619291][T22557] __x64_sys_ioctl+0xb7/0x210 [ 767.624035][T22557] do_syscall_64+0x39/0xb0 [ 767.628529][T22557] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 767.634514][T22557] RIP: 0033:0x7ffba488c169 [ 767.638977][T22557] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 767.658638][T22557] RSP: 002b:00007ffba55ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.667118][T22557] RAX: ffffffffffffffda RBX: 00007ffba49abf80 RCX: 00007ffba488c169 [ 767.675143][T22557] RDX: 0000000020000240 RSI: 0000000040806685 RDI: 0000000000000004 [ 767.683158][T22557] RBP: 00007ffba55ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.691174][T22557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.699189][T22557] R13: 00007ffebbcc4d0f R14: 00007ffba55ef300 R15: 0000000000022000 [ 767.707212][T22557] 13:01:19 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) 13:01:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='exofs\x00', 0xb10410, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00') write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@delnexthop={0x58, 0x69, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x44041) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73827a317a792587bcf5e9d126d2c84e2fd0f5e726d51564a4343e16bfaf4ca5111b4dd206e67f0050d5f37fbf29de3e1f2f0408a54fbef7e84fa50345374a0372d57c1c"], 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) (async) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0x4, 0x4}, 0x6) 13:01:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0xfdef) 13:01:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async, rerun: 64) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000540)={@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, 0x0, 0x3, [@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}]}, 0x1c) (async) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xdc, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xf}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x3c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xf, 0x1, @random="800e2a583457fc5d7058c6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, @NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0x15, 0x0, @random="fbc2a92586a9afcc56b1243dfdac9554e1"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xb, 0x0, @random="b0a710045f3644"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eab3c2bfdbae"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCDELRT(r10, 0x890c, &(0x7f00000004c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x4000000}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x2}}, 0x7f, 0x0, 0x0, 0x0, 0x81, &(0x7f00000003c0)='veth1_to_hsr\x00', 0x9, 0xffffffff, 0x81}) (async) sendfile(r9, r8, 0x0, 0x10000a006) 13:01:19 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) [ 767.717177][T22557] ERROR: Out of memory at tomoyo_realpath_from_path. [ 767.727412][T22557] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) 13:01:19 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) setreuid(0x0, 0xee00) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) (async) 13:01:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='exofs\x00', 0xb10410, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00') write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) dup(r5) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='exofs\x00', 0xb10410, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00') (async) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) 13:01:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) (async) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000540)={@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, 0x0, 0x3, [@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}]}, 0x1c) (async) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xdc, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xf}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x3c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xf, 0x1, @random="800e2a583457fc5d7058c6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, @NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0x15, 0x0, @random="fbc2a92586a9afcc56b1243dfdac9554e1"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xb, 0x0, @random="b0a710045f3644"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eab3c2bfdbae"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCDELRT(r10, 0x890c, &(0x7f00000004c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x4000000}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x2}}, 0x7f, 0x0, 0x0, 0x0, 0x81, &(0x7f00000003c0)='veth1_to_hsr\x00', 0x9, 0xffffffff, 0x81}) (async) sendfile(r9, r8, 0x0, 0x10000a006) 13:01:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0xfffffdef) 13:01:20 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) 13:01:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={0x0, 0xd86}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 768.634519][ T27] audit: type=1804 audit(1685278880.530:422): pid=22635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/575/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 768.885140][T22639] loop4: detected capacity change from 0 to 32768 [ 768.893398][T22639] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (22639) [ 768.910812][T22639] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 768.920722][T22639] BTRFS info (device loop4): turning on sync discard [ 768.929290][T22639] BTRFS info (device loop4): using free space tree [ 768.950822][T22639] BTRFS info (device loop4): enabling ssd optimizations [ 768.987581][T22639] FAULT_INJECTION: forcing a failure. [ 768.987581][T22639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.006639][T22639] CPU: 1 PID: 22639 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 769.016581][T22639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 769.026649][T22639] Call Trace: [ 769.029939][T22639] [ 769.032878][T22639] dump_stack_lvl+0x136/0x150 [ 769.037616][T22639] should_fail_ex+0x4a3/0x5b0 [ 769.042328][T22639] _copy_from_user+0x30/0xf0 [ 769.046943][T22639] fsverity_ioctl_enable+0xa1/0x560 [ 769.052168][T22639] ? enable_verity+0x9d0/0x9d0 [ 769.056955][T22639] ? kasan_quarantine_put+0xf9/0x220 [ 769.062264][T22639] ? find_held_lock+0x2d/0x110 [ 769.067062][T22639] ? tomoyo_path_number_perm+0x245/0x570 [ 769.072726][T22639] ? lock_downgrade+0x690/0x690 [ 769.077608][T22639] ? __kmem_cache_free+0xaf/0x2d0 [ 769.082660][T22639] btrfs_ioctl+0x2e84/0x5b30 [ 769.087310][T22639] ? tomoyo_path_number_perm+0x166/0x570 [ 769.092965][T22639] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 769.098791][T22639] ? find_held_lock+0x2d/0x110 [ 769.103592][T22639] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 769.110070][T22639] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 769.116022][T22639] ? do_vfs_ioctl+0x132/0x1670 [ 769.120846][T22639] ? vfs_fileattr_set+0xc40/0xc40 [ 769.125942][T22639] ? trace_lock_acquire+0x12d/0x180 [ 769.131201][T22639] ? do_one_initcall+0x4e8/0x540 [ 769.136186][T22639] ? receive_fd+0x110/0x110 [ 769.140710][T22639] ? __fget_files+0x26a/0x480 [ 769.145422][T22639] ? bpf_lsm_file_ioctl+0x9/0x10 [ 769.150391][T22639] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 769.156844][T22639] __x64_sys_ioctl+0x197/0x210 [ 769.161626][T22639] do_syscall_64+0x39/0xb0 [ 769.166117][T22639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 769.172058][T22639] RIP: 0033:0x7ffba488c169 [ 769.176574][T22639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 769.196198][T22639] RSP: 002b:00007ffba55ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 769.204635][T22639] RAX: ffffffffffffffda RBX: 00007ffba49abf80 RCX: 00007ffba488c169 [ 769.212644][T22639] RDX: 0000000020000240 RSI: 0000000040806685 RDI: 0000000000000004 [ 769.220655][T22639] RBP: 00007ffba55ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 769.228672][T22639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 13:01:21 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 13:01:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101181, 0x22) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r9, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r7], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x1, 0x401, 0x16, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, 0x700, 0x7800, 0x3, 0x3f}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@ipmr_newroute={0x60, 0x18, 0x800, 0x70bd26, 0x25dfdbfe, {0x80, 0x14, 0x0, 0x9, 0xfe, 0x4, 0xfd, 0x8, 0x2400}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x4, 0xc, r9}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x11, 0x0, r11}}, @RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_PREFSRC={0x8, 0x7, @private=0xa010101}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x0, 0x4, r12}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004c}, 0x5840) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="f75fbac8add8630f5c1e6cd5531904489a88397d92ae9a238c28e8784be6205f2740f6001b461d7ca7240e494adc2cda169849f61207c7c4d6cfb17ac44ff22e7b4c8cfffab6301178ef2f993470fe73c1399cd772f1d2cb120ced35732e2f31a71edcd384aca521a9f753f34eec26fff80449bdeb45c323af3a5391d87f22131a7d161eb761adf91fe67eaa63e3f529d3ae0737cb75499417410c0c10ac9f6bf6a9b33bb68206e5a486df2e1c", 0xad}, {&(0x7f00000000c0)="24a6753949fd98c27f343285933ef19ffc90a5c0df4e201c3db5e79b9d7507952cb4cea8227e9f60ad3b3507f8269318d8627a27fef7410262f91af3facfd1cc1650101415cdaae9a67ee6e8354e39d5a4dacbc9e8601e02be189d9c63", 0x5d}, {&(0x7f0000000240)="8205f5997f05c6ea323abe7316dfde58081734ea79269ec93cab370a189e80c75714ca7ef28ff511b3cd313bf95bf65475c2f7d24ee244ffec5d04377c23ad9549b0a05fcc4a538478723edab19f4c0e9a3aeb2f9f295613958a82097591e1f81cddafe27d5d0b82d2c0683d25803ae7f4018425ddb8eeeabf919fcb3e2088f385d31e9ae057ff221df37d91490149fd2910892b04f1fcbd1dc2ad1bb5687aeff46a2f21c84e04544da7d52411d3cc0fbb9bb95791b9e8903fddd595f5baf8eb325c4070735a182156b760d705b152f612da096de280e1d9dd1dd34e97c2914046fc8ccbe65eb9afd18d92dd3eb3", 0xee}, {&(0x7f0000000340)="278b3828cd9e6f01ffef40017f7a51264eccd606a887bf2a", 0x18}], 0x4, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r5, r3]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0x70, 0x20008885}, 0x0) socketpair(0x6, 0x1, 0x63, &(0x7f0000000240)={0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r13, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r14, @ANYBLOB="04002abd7000fddbdf25045269046f62391e2257f757020004000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x74, r14, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0xc800) 13:01:21 executing program 5: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x9, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000001c0)=0x2, 0x2) setreuid(0x0, 0xee00) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r2, &(0x7f00000000c0)=""/188, 0xbc) 13:01:21 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001a00)={0x2, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={r0, 0x1, 0x8}, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000280)=""/235, 0xeb}, {&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000500)=""/207, 0xcf}], 0x6, &(0x7f0000000680)=""/229, 0xe5}, 0x5}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000000880)=""/77, 0x4d}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x3, &(0x7f0000001900)=""/87, 0x57}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001980)=""/95, 0x5f}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/76, 0x4c}], 0x4, &(0x7f0000001b40)=""/76, 0x4c}, 0x8}], 0x3, 0x100, &(0x7f0000001c80)={0x0, 0x989680}) 13:01:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0xfffffffffffffdef) 13:01:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={0x0, 0xd86}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 769.236687][T22639] R13: 00007ffebbcc4d0f R14: 00007ffba55ef300 R15: 0000000000022000 [ 769.244724][T22639] 13:01:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={0x0, 0xd86}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:21 executing program 5: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x9, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000001c0)=0x2, 0x2) setreuid(0x0, 0xee00) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r2, &(0x7f00000000c0)=""/188, 0xbc) 13:01:21 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001a00)={0x2, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={r0, 0x1, 0x8}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={r0, 0x1, 0x8}, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x11, 0x800000003, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000280)=""/235, 0xeb}, {&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000500)=""/207, 0xcf}], 0x6, &(0x7f0000000680)=""/229, 0xe5}, 0x5}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000000880)=""/77, 0x4d}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x3, &(0x7f0000001900)=""/87, 0x57}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001980)=""/95, 0x5f}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/76, 0x4c}], 0x4, &(0x7f0000001b40)=""/76, 0x4c}, 0x8}], 0x3, 0x100, &(0x7f0000001c80)={0x0, 0x989680}) 13:01:21 executing program 5: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x9, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000001c0)=0x2, 0x2) setreuid(0x0, 0xee00) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r2, &(0x7f00000000c0)=""/188, 0xbc) clock_gettime(0x0, &(0x7f0000000040)) (async) futex(&(0x7f0000000000)=0x1, 0x9, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000001c0)=0x2, 0x2) (async) setreuid(0x0, 0xee00) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) (async) read$snddsp(r2, &(0x7f00000000c0)=""/188, 0xbc) (async) 13:01:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb831f4de89eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a006) 13:01:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x6db6e571) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) ftruncate(r3, 0x7fff) io_getevents(r4, 0x1, 0x1, &(0x7f0000000240)=[{}], 0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) r5 = socket(0x9, 0x6, 0x7e3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) mkdir(&(0x7f0000000000)='./bus\x00', 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) r9 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x80000000000, 0x0) io_submit(r4, 0x3, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x8000, r5, &(0x7f0000000080)="dac1411b6fb9f4c94189f1d0ce418b84d5", 0x11, 0xfffffffffffffe00, 0x0, 0x1, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r8, &(0x7f0000000180)="ef8cb0ea2832fe2bfe596cca2ed6929e34af674f64e2ba629efce8ec13f2677dce0c5cabcf556c9e387ab5eb9442b7c6db4e1db05fefc5f99e45eca6ba67e625242d4951392c3fb88a8e2c754d31e9be933f40afa826a4a3fd2e530556b3df87cf28d120253c1c61cc8e93605416cb66064ca4f075f59b13a13eaa0bc19e4108ad3c67fc6380e610898cad141792936605a59a2c94c1e999ad936e9e7abe5926dc965e85ebd44a36bc", 0xa9, 0x6717, 0x0, 0x0, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1000, r9, &(0x7f00000002c0)="695e582e8f210e8ec858ab9c27e8f4fc27603e22bbb16be53067bdcb2a1108c686e7adf4176bb0f61c3849759074ec611d07de538b54f0d2ce303159e703fda5e15169c02d44ba6e553379da9802e2a95a4f4a5c54b5d067f8f9fa19972a3ab82cb48868d10461d5d76a08b44172090ead2c1fb065976e15109d1880e5e50fecca0fa0f16915b8e5f536f81f85f0ac0b9881b15b526875d453beb37e689d53621d133cbfce5ca7d7baee8c45c2bc6d110e", 0xb1, 0x0, 0x0, 0x3, r1}]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac809fd83f96e521eca7a113d0447cda21b523c39604f547ae6d5c0db9c878c3e9a36918d71827c1f69efdd0657676314415b89ae78d0e22760734ebd478bd04043c9bccad5af9ba3bcb77397d67f56b3fb37034209cf30a880b5cf9abbf366bd12717f5c5af76ab2b8b5577c9d9d5ae8f6511f4c25e0dfd1d2fe91b092e6ca1d12250a7e4"], 0x9) [ 770.281427][ T27] audit: type=1804 audit(1685278882.180:423): pid=22701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/578/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 770.524094][T22687] loop4: detected capacity change from 0 to 32768 [ 770.532201][T22687] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (22687) [ 770.548818][T22687] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 770.558821][T22687] BTRFS info (device loop4): turning on sync discard [ 770.565833][T22687] BTRFS info (device loop4): using free space tree [ 770.596277][T22687] BTRFS info (device loop4): enabling ssd optimizations [ 770.630783][T22687] FAULT_INJECTION: forcing a failure. [ 770.630783][T22687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.652124][T22687] CPU: 1 PID: 22687 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 770.662091][T22687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 770.672188][T22687] Call Trace: [ 770.675501][T22687] [ 770.678471][T22687] dump_stack_lvl+0x136/0x150 [ 770.683229][T22687] should_fail_ex+0x4a3/0x5b0 [ 770.687992][T22687] _copy_from_user+0x30/0xf0 [ 770.693220][T22687] fsverity_ioctl_enable+0xa1/0x560 [ 770.698494][T22687] ? enable_verity+0x9d0/0x9d0 [ 770.703330][T22687] ? kasan_quarantine_put+0xf9/0x220 [ 770.708684][T22687] ? find_held_lock+0x2d/0x110 [ 770.713524][T22687] ? tomoyo_path_number_perm+0x245/0x570 [ 770.719219][T22687] ? lock_downgrade+0x690/0x690 [ 770.724242][T22687] ? __kmem_cache_free+0xaf/0x2d0 [ 770.729325][T22687] btrfs_ioctl+0x2e84/0x5b30 [ 770.733998][T22687] ? tomoyo_path_number_perm+0x166/0x570 [ 770.739691][T22687] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 770.745571][T22687] ? find_held_lock+0x2d/0x110 [ 770.750401][T22687] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 770.756901][T22687] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 770.762862][T22687] ? do_vfs_ioctl+0x132/0x1670 [ 770.767653][T22687] ? vfs_fileattr_set+0xc40/0xc40 [ 770.772716][T22687] ? trace_lock_acquire+0x12d/0x180 [ 770.777951][T22687] ? do_one_initcall+0x4e8/0x540 [ 770.782926][T22687] ? receive_fd+0x110/0x110 [ 770.787459][T22687] ? __fget_files+0x26a/0x480 [ 770.792171][T22687] ? bpf_lsm_file_ioctl+0x9/0x10 [ 770.797149][T22687] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 770.803599][T22687] __x64_sys_ioctl+0x197/0x210 [ 770.808387][T22687] do_syscall_64+0x39/0xb0 [ 770.812852][T22687] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 770.818785][T22687] RIP: 0033:0x7ffba488c169 [ 770.823222][T22687] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 770.842856][T22687] RSP: 002b:00007ffba55ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.851288][T22687] RAX: ffffffffffffffda RBX: 00007ffba49abf80 RCX: 00007ffba488c169 [ 770.859277][T22687] RDX: 0000000020000240 RSI: 0000000040806685 RDI: 0000000000000004 [ 770.867266][T22687] RBP: 00007ffba55ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 770.875256][T22687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.883243][T22687] R13: 00007ffebbcc4d0f R14: 00007ffba55ef300 R15: 0000000000022000 [ 770.891326][T22687] 13:01:22 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 5) 13:01:22 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) setuid(0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x1000, r0, 0x2}) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) ioprio_get$uid(0x3, 0xee00) mount$nfs4(&(0x7f0000000040)='/+,\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="2f700100000000000000002c2f70726f632f6b65797314002c2f70726f632f6b657973002c2f70726f630300657973002c7365636c6162656c2c00"]) 13:01:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async, rerun: 32) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async, rerun: 32) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101181, 0x22) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async, rerun: 64) r10 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r9, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r7], 0x44}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x1, 0x401, 0x16, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, 0x700, 0x7800, 0x3, 0x3f}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@ipmr_newroute={0x60, 0x18, 0x800, 0x70bd26, 0x25dfdbfe, {0x80, 0x14, 0x0, 0x9, 0xfe, 0x4, 0xfd, 0x8, 0x2400}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x4, 0xc, r9}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x11, 0x0, r11}}, @RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_PREFSRC={0x8, 0x7, @private=0xa010101}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x0, 0x4, r12}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004c}, 0x5840) (async) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="f75fbac8add8630f5c1e6cd5531904489a88397d92ae9a238c28e8784be6205f2740f6001b461d7ca7240e494adc2cda169849f61207c7c4d6cfb17ac44ff22e7b4c8cfffab6301178ef2f993470fe73c1399cd772f1d2cb120ced35732e2f31a71edcd384aca521a9f753f34eec26fff80449bdeb45c323af3a5391d87f22131a7d161eb761adf91fe67eaa63e3f529d3ae0737cb75499417410c0c10ac9f6bf6a9b33bb68206e5a486df2e1c", 0xad}, {&(0x7f00000000c0)="24a6753949fd98c27f343285933ef19ffc90a5c0df4e201c3db5e79b9d7507952cb4cea8227e9f60ad3b3507f8269318d8627a27fef7410262f91af3facfd1cc1650101415cdaae9a67ee6e8354e39d5a4dacbc9e8601e02be189d9c63", 0x5d}, {&(0x7f0000000240)="8205f5997f05c6ea323abe7316dfde58081734ea79269ec93cab370a189e80c75714ca7ef28ff511b3cd313bf95bf65475c2f7d24ee244ffec5d04377c23ad9549b0a05fcc4a538478723edab19f4c0e9a3aeb2f9f295613958a82097591e1f81cddafe27d5d0b82d2c0683d25803ae7f4018425ddb8eeeabf919fcb3e2088f385d31e9ae057ff221df37d91490149fd2910892b04f1fcbd1dc2ad1bb5687aeff46a2f21c84e04544da7d52411d3cc0fbb9bb95791b9e8903fddd595f5baf8eb325c4070735a182156b760d705b152f612da096de280e1d9dd1dd34e97c2914046fc8ccbe65eb9afd18d92dd3eb3", 0xee}, {&(0x7f0000000340)="278b3828cd9e6f01ffef40017f7a51264eccd606a887bf2a", 0x18}], 0x4, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r5, r3]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0x70, 0x20008885}, 0x0) (async) socketpair(0x6, 0x1, 0x63, &(0x7f0000000240)={0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r13, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r14, @ANYBLOB="04002abd7000fddbdf25045269046f62391e2257f757020004000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x74, r14, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0xc800) 13:01:22 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001a00)={0x2, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={r0, 0x1, 0x8}, 0xc) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r2 = socket(0x11, 0x800000003, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000280)=""/235, 0xeb}, {&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000500)=""/207, 0xcf}], 0x6, &(0x7f0000000680)=""/229, 0xe5}, 0x5}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000000880)=""/77, 0x4d}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x3, &(0x7f0000001900)=""/87, 0x57}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001980)=""/95, 0x5f}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/76, 0x4c}], 0x4, &(0x7f0000001b40)=""/76, 0x4c}, 0x8}], 0x3, 0x100, &(0x7f0000001c80)={0x0, 0x989680}) 13:01:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x6db6e571) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) ftruncate(r3, 0x7fff) io_getevents(r4, 0x1, 0x1, &(0x7f0000000240)=[{}], 0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) (async) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) r5 = socket(0x9, 0x6, 0x7e3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) mkdir(&(0x7f0000000000)='./bus\x00', 0x2) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(r8) (async) dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) syz_open_dev$sndmidi(&(0x7f0000000280), 0x80000000000, 0x0) (async) r9 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x80000000000, 0x0) io_submit(r4, 0x3, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x8000, r5, &(0x7f0000000080)="dac1411b6fb9f4c94189f1d0ce418b84d5", 0x11, 0xfffffffffffffe00, 0x0, 0x1, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r8, &(0x7f0000000180)="ef8cb0ea2832fe2bfe596cca2ed6929e34af674f64e2ba629efce8ec13f2677dce0c5cabcf556c9e387ab5eb9442b7c6db4e1db05fefc5f99e45eca6ba67e625242d4951392c3fb88a8e2c754d31e9be933f40afa826a4a3fd2e530556b3df87cf28d120253c1c61cc8e93605416cb66064ca4f075f59b13a13eaa0bc19e4108ad3c67fc6380e610898cad141792936605a59a2c94c1e999ad936e9e7abe5926dc965e85ebd44a36bc", 0xa9, 0x6717, 0x0, 0x0, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1000, r9, &(0x7f00000002c0)="695e582e8f210e8ec858ab9c27e8f4fc27603e22bbb16be53067bdcb2a1108c686e7adf4176bb0f61c3849759074ec611d07de538b54f0d2ce303159e703fda5e15169c02d44ba6e553379da9802e2a95a4f4a5c54b5d067f8f9fa19972a3ab82cb48868d10461d5d76a08b44172090ead2c1fb065976e15109d1880e5e50fecca0fa0f16915b8e5f536f81f85f0ac0b9881b15b526875d453beb37e689d53621d133cbfce5ca7d7baee8c45c2bc6d110e", 0xb1, 0x0, 0x0, 0x3, r1}]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac809fd83f96e521eca7a113d0447cda21b523c39604f547ae6d5c0db9c878c3e9a36918d71827c1f69efdd0657676314415b89ae78d0e22760734ebd478bd04043c9bccad5af9ba3bcb77397d67f56b3fb37034209cf30a880b5cf9abbf366bd12717f5c5af76ab2b8b5577c9d9d5ae8f6511f4c25e0dfd1d2fe91b092e6ca1d12250a7e4"], 0x9) 13:01:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r6, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb831f4de89eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a006) 13:01:23 executing program 5: setreuid(0x0, 0xee00) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) setuid(0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x1000, r0, 0x2}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x1000, r0, 0x2}) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) ioprio_get$uid(0x3, 0xee00) mount$nfs4(&(0x7f0000000040)='/+,\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="2f700100000000000000002c2f70726f632f6b65797314002c2f70726f632f6b657973002c2f70726f630300657973002c7365636c6162656c2c00"]) 13:01:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb831f4de89eb7968c"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async, rerun: 64) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a006) 13:01:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x5, 0x800000003, 0x10005) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) r4 = accept$alg(r1, 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x8031, r5, 0x46c13000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$cgroup_type(r8, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a317a7923cf39"], 0x9) 13:01:23 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) setuid(0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x1000, r0, 0x2}) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) (async) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) ioprio_get$uid(0x3, 0xee00) mount$nfs4(&(0x7f0000000040)='/+,\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="2f700100000000000000002c2f70726f632f6b65797314002c2f70726f632f6b657973002c2f70726f630300657973002c7365636c6162656c2c00"]) (async) mount$nfs4(&(0x7f0000000040)='/+,\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="2f700100000000000000002c2f70726f632f6b65797314002c2f70726f632f6b657973002c2f70726f630300657973002c7365636c6162656c2c00"]) 13:01:23 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x80800) 13:01:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x6db6e571) (async) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) (async) ftruncate(r3, 0x7fff) io_getevents(r4, 0x1, 0x1, &(0x7f0000000240)=[{}], 0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) r5 = socket(0x9, 0x6, 0x7e3) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x2) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(r8) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) (async) r9 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x80000000000, 0x0) io_submit(r4, 0x3, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x8000, r5, &(0x7f0000000080)="dac1411b6fb9f4c94189f1d0ce418b84d5", 0x11, 0xfffffffffffffe00, 0x0, 0x1, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r8, &(0x7f0000000180)="ef8cb0ea2832fe2bfe596cca2ed6929e34af674f64e2ba629efce8ec13f2677dce0c5cabcf556c9e387ab5eb9442b7c6db4e1db05fefc5f99e45eca6ba67e625242d4951392c3fb88a8e2c754d31e9be933f40afa826a4a3fd2e530556b3df87cf28d120253c1c61cc8e93605416cb66064ca4f075f59b13a13eaa0bc19e4108ad3c67fc6380e610898cad141792936605a59a2c94c1e999ad936e9e7abe5926dc965e85ebd44a36bc", 0xa9, 0x6717, 0x0, 0x0, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1000, r9, &(0x7f00000002c0)="695e582e8f210e8ec858ab9c27e8f4fc27603e22bbb16be53067bdcb2a1108c686e7adf4176bb0f61c3849759074ec611d07de538b54f0d2ce303159e703fda5e15169c02d44ba6e553379da9802e2a95a4f4a5c54b5d067f8f9fa19972a3ab82cb48868d10461d5d76a08b44172090ead2c1fb065976e15109d1880e5e50fecca0fa0f16915b8e5f536f81f85f0ac0b9881b15b526875d453beb37e689d53621d133cbfce5ca7d7baee8c45c2bc6d110e", 0xb1, 0x0, 0x0, 0x3, r1}]) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac809fd83f96e521eca7a113d0447cda21b523c39604f547ae6d5c0db9c878c3e9a36918d71827c1f69efdd0657676314415b89ae78d0e22760734ebd478bd04043c9bccad5af9ba3bcb77397d67f56b3fb37034209cf30a880b5cf9abbf366bd12717f5c5af76ab2b8b5577c9d9d5ae8f6511f4c25e0dfd1d2fe91b092e6ca1d12250a7e4"], 0x9) [ 771.462096][ T5062] Bluetooth: hci0: Opcode 0x c3a failed: -110 [ 771.472348][ T5062] Bluetooth: hci0: command 0x0c3a tx timeout [ 771.990987][T22779] loop4: detected capacity change from 0 to 32768 [ 772.001320][T22779] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (22779) [ 772.018602][T22779] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 772.028516][T22779] BTRFS info (device loop4): turning on sync discard [ 772.036581][T22779] BTRFS info (device loop4): using free space tree [ 772.060544][T22779] BTRFS info (device loop4): enabling ssd optimizations [ 772.080153][T22779] FAULT_INJECTION: forcing a failure. [ 772.080153][T22779] name failslab, interval 1, probability 0, space 0, times 0 [ 772.101634][T22779] CPU: 1 PID: 22779 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 772.111601][T22779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 772.121701][T22779] Call Trace: [ 772.125031][T22779] [ 772.128003][T22779] dump_stack_lvl+0x136/0x150 [ 772.132765][T22779] should_fail_ex+0x4a3/0x5b0 [ 772.137526][T22779] should_failslab+0x9/0x20 [ 772.142096][T22779] kmem_cache_alloc+0x63/0x3b0 [ 772.146941][T22779] drop_verity_items+0x9a/0x410 [ 772.151872][T22779] ? btrfs_zoned_activate_one_bg+0x460/0x460 [ 772.157916][T22779] ? down_write+0x14f/0x200 [ 772.162485][T22779] ? down_write_killable_nested+0x250/0x250 [ 772.168455][T22779] btrfs_begin_enable_verity+0x111/0x230 [ 772.174168][T22779] enable_verity+0x636/0x9d0 [ 772.178850][T22779] ? __mnt_want_write+0x3f/0x2e0 [ 772.183894][T22779] ? build_merkle_tree+0xc50/0xc50 [ 772.189071][T22779] ? trace_lock_acquire+0x12d/0x180 [ 772.194353][T22779] ? __mnt_want_write+0x1fe/0x2e0 [ 772.199453][T22779] fsverity_ioctl_enable+0x404/0x560 [ 772.204802][T22779] ? enable_verity+0x9d0/0x9d0 [ 772.209674][T22779] ? __kmem_cache_free+0xaf/0x2d0 [ 772.214792][T22779] btrfs_ioctl+0x2e84/0x5b30 [ 772.219476][T22779] ? tomoyo_path_number_perm+0x166/0x570 [ 772.225169][T22779] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 772.231031][T22779] ? find_held_lock+0x2d/0x110 [ 772.235864][T22779] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 772.242363][T22779] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.248351][T22779] ? do_vfs_ioctl+0x132/0x1670 [ 772.253171][T22779] ? vfs_fileattr_set+0xc40/0xc40 [ 772.258275][T22779] ? trace_lock_acquire+0x12d/0x180 [ 772.263552][T22779] ? do_one_initcall+0x4e8/0x540 [ 772.268558][T22779] ? receive_fd+0x110/0x110 [ 772.273136][T22779] ? __fget_files+0x26a/0x480 [ 772.277879][T22779] ? bpf_lsm_file_ioctl+0x9/0x10 [ 772.282896][T22779] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 772.289419][T22779] __x64_sys_ioctl+0x197/0x210 [ 772.294246][T22779] do_syscall_64+0x39/0xb0 [ 772.298723][T22779] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 772.304679][T22779] RIP: 0033:0x7ffba488c169 [ 772.309141][T22779] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 772.328804][T22779] RSP: 002b:00007ffba55ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:01:24 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 6) 13:01:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 64) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (rerun: 64) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) (async) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101181, 0x22) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r9, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r7], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x1, 0x401, 0x16, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, 0x700, 0x7800, 0x3, 0x3f}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@ipmr_newroute={0x60, 0x18, 0x800, 0x70bd26, 0x25dfdbfe, {0x80, 0x14, 0x0, 0x9, 0xfe, 0x4, 0xfd, 0x8, 0x2400}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x4, 0xc, r9}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x11, 0x0, r11}}, @RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_PREFSRC={0x8, 0x7, @private=0xa010101}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x0, 0x4, r12}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004c}, 0x5840) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="f75fbac8add8630f5c1e6cd5531904489a88397d92ae9a238c28e8784be6205f2740f6001b461d7ca7240e494adc2cda169849f61207c7c4d6cfb17ac44ff22e7b4c8cfffab6301178ef2f993470fe73c1399cd772f1d2cb120ced35732e2f31a71edcd384aca521a9f753f34eec26fff80449bdeb45c323af3a5391d87f22131a7d161eb761adf91fe67eaa63e3f529d3ae0737cb75499417410c0c10ac9f6bf6a9b33bb68206e5a486df2e1c", 0xad}, {&(0x7f00000000c0)="24a6753949fd98c27f343285933ef19ffc90a5c0df4e201c3db5e79b9d7507952cb4cea8227e9f60ad3b3507f8269318d8627a27fef7410262f91af3facfd1cc1650101415cdaae9a67ee6e8354e39d5a4dacbc9e8601e02be189d9c63", 0x5d}, {&(0x7f0000000240)="8205f5997f05c6ea323abe7316dfde58081734ea79269ec93cab370a189e80c75714ca7ef28ff511b3cd313bf95bf65475c2f7d24ee244ffec5d04377c23ad9549b0a05fcc4a538478723edab19f4c0e9a3aeb2f9f295613958a82097591e1f81cddafe27d5d0b82d2c0683d25803ae7f4018425ddb8eeeabf919fcb3e2088f385d31e9ae057ff221df37d91490149fd2910892b04f1fcbd1dc2ad1bb5687aeff46a2f21c84e04544da7d52411d3cc0fbb9bb95791b9e8903fddd595f5baf8eb325c4070735a182156b760d705b152f612da096de280e1d9dd1dd34e97c2914046fc8ccbe65eb9afd18d92dd3eb3", 0xee}, {&(0x7f0000000340)="278b3828cd9e6f01ffef40017f7a51264eccd606a887bf2a", 0x18}], 0x4, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r5, r3]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0x70, 0x20008885}, 0x0) (async) socketpair(0x6, 0x1, 0x63, &(0x7f0000000240)={0xffffffffffffffff}) (async, rerun: 32) r14 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r13, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r14, @ANYBLOB="04002abd7000fddbdf25045269046f62391e2257f757020004000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x74, r14, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0xc800) 13:01:24 executing program 3: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x2, 0x56}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000880) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) vmsplice(r5, &(0x7f0000000780)=[{&(0x7f0000000300)="21117fb76082e9f13367c3f3400f7f8036187c2529fda3aec6ee77050e55ecb5f3170721e9058e02c6b00229927c51d5178274c41ebe6121bb71367a83a0aadb24c3c86c7654d82555db58a56db8a8749903745360309fa002", 0x59}, {&(0x7f00000004c0)="8a91608dc35b68f9ccd037c939760bac88a34da39625d163e5fdac583c7cfba5553d5432b226ea48dfc39e27ba0a5aef1aa206c14b65256a6f64da7d78a49a65ffb5bcdbfb824c2355b77852d5e381e6bd0e6a8a42b90de855746c1b7541b4fd4698907966618c1b329cbc4cd79d6b20b20f3c603d4b31f65f1c84316fcab139de3b7de55fcd1d6bc38bc5909899f28236c148a312c485e2f0a879491c2ab48d6b36c27a80338ac1b81a06f6d2b0798ab43e4f014573108699c698cf6d120b921a214eae37e591e4d9b810aef2b676c0d70853ec004e133bc5ee57f8548506d6a1e0c297c768bf0c4338b0db2ef365daf4c2", 0xf2}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000005c0)="bbea0b38fd7786068d8f397310ae3abb4ec9dc4e09636370e43b01d8e97fd31f39115814b614e6ed56872fff302940fb69cc43e0f264cb7a9157b2c60dc483c9420795e2867990e9b5ea810245a5d63d3cb1bd602fe604c52ff9fc3f4ca257060c3e68f3f24cf59cbf802f2488b5bd37d7457855145fdcb600d79456f98d50db5b1d3637c3c22d3a11acb05a775f938c275f3cb870a44e2cf5263667fa05bbb951c15eace6809bfd84ec36f6afd40ab5e69aedb96f881aa05899868473b31d38b749b3550944c72d880c82d6656dd3c207572ec88582307c", 0xd8}, {&(0x7f0000000900)="601b2ebb83952df28c7ae7cf744769fb3fafca8962e41ae0c0c2cd12380c04723f8449c0b4003cd218cc48e7cbbefddb34fa29413d271ed60f3e50bf2c4099edcf32f0a50e2c08bd96f2935982a35ad2e8c7f44e0bfae72f9a42b1619a4a06a2e087b15d6f9437132b73c0b71b1b51bfc596b253aa8d692b660323147df15fbce30104050ee76e1ddbf3239535ba03aaf6418e6c2c11c7b2e5a2a304091affe6485c290f", 0xa4}], 0x5, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r7 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000640000090000000000000001000000184e0000ffffffff00000000000000009500000000000000000000000000000000000000001ab065ada7cbefa78b345e03e0c6d31d3050f9158d5ffcb35bd8262e48ce4f3231f1394e7a534ea3e01cb30da01e236becfd499f467f6ea64618b876b095673826e55df918d0a107016779343ae8f861658349761e81cdb7ece551f89d36d4b52bb9ba84166ab25287bf55b89f25cb157a392579d9c5e1a7fdce2113dc1738a44e93334f8a552002d78dc124babdc9322e1db56841d49d775ba6be07020b86c37d332b78231836ce4706fdd0335a407cb1ce80ddad4b98ad9c0af67bcb0ba2774a93805af5a11f9aaaf75f8b0e9599a128de8a29a20c2ad3cc913bc053d8c3bd273e56937970bcdc937514aea53d69"], &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r11, 0x0, 0x10000a006) 13:01:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x5, 0x800000003, 0x10005) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) r4 = accept$alg(r1, 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000080), 0x10) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x8031, r5, 0x46c13000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) openat$cgroup_type(r8, &(0x7f00000000c0), 0x2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a317a7923cf39"], 0x9) 13:01:24 executing program 5: setreuid(0x0, 0xee00) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x80800) 13:01:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz1', "d9a296e7a49c4a53f5495d881c25ecd84bd802fd1cba35e7c49392876daccaadfdb4c27b753fe1119e9d516148bfd596dccfc359ad57e7cf35af16fcb7423e1a47442189e80b22fae1ce088735ccb656fd0a9ae1da021ef753760b31881e2771fdf5bd1f7b89d21a9b33ea8bc1038b2761b26e69f8c0f946579a0d053656a1fa1b629fab01cb282ab925c28a446f35fe38b2352afdabd951e85cb5a882a45692d9611299"}, 0xa8) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 772.337270][T22779] RAX: ffffffffffffffda RBX: 00007ffba49abf80 RCX: 00007ffba488c169 [ 772.345358][T22779] RDX: 0000000020000240 RSI: 0000000040806685 RDI: 0000000000000004 [ 772.353372][T22779] RBP: 00007ffba55ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.361354][T22779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.369360][T22779] R13: 00007ffebbcc4d0f R14: 00007ffba55ef300 R15: 0000000000022000 [ 772.377361][T22779] 13:01:24 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x80800) 13:01:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x5, 0x800000003, 0x10005) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) r4 = accept$alg(r1, 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000080), 0x10) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x8031, r5, 0x46c13000) (rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$cgroup_type(r8, &(0x7f00000000c0), 0x2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a317a7923cf39"], 0x9) 13:01:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) 13:01:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r2, &(0x7f0000000080)={'syz1', "d9a296e7a49c4a53f5495d881c25ecd84bd802fd1cba35e7c49392876daccaadfdb4c27b753fe1119e9d516148bfd596dccfc359ad57e7cf35af16fcb7423e1a47442189e80b22fae1ce088735ccb656fd0a9ae1da021ef753760b31881e2771fdf5bd1f7b89d21a9b33ea8bc1038b2761b26e69f8c0f946579a0d053656a1fa1b629fab01cb282ab925c28a446f35fe38b2352afdabd951e85cb5a882a45692d9611299"}, 0xa8) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:24 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000280)=0xc) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x440c00, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x10010, r3, 0x3c25a000) setuid(r2) setreuid(r2, 0xee00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r4, &(0x7f0000000240)=""/180, 0xb4) [ 772.829752][ T27] audit: type=1804 audit(1685278884.730:424): pid=22797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/581/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 13:01:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (rerun: 64) write$binfmt_misc(r2, &(0x7f0000000080)={'syz1', "d9a296e7a49c4a53f5495d881c25ecd84bd802fd1cba35e7c49392876daccaadfdb4c27b753fe1119e9d516148bfd596dccfc359ad57e7cf35af16fcb7423e1a47442189e80b22fae1ce088735ccb656fd0a9ae1da021ef753760b31881e2771fdf5bd1f7b89d21a9b33ea8bc1038b2761b26e69f8c0f946579a0d053656a1fa1b629fab01cb282ab925c28a446f35fe38b2352afdabd951e85cb5a882a45692d9611299"}, 0xa8) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 773.541643][T22850] loop4: detected capacity change from 0 to 32768 [ 773.550007][T22850] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (22850) [ 773.567568][T22850] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 773.578355][T22850] BTRFS info (device loop4): turning on sync discard [ 773.585553][T22850] BTRFS info (device loop4): using free space tree [ 773.608147][T22850] BTRFS info (device loop4): enabling ssd optimizations [ 773.628209][T22850] FAULT_INJECTION: forcing a failure. [ 773.628209][T22850] name failslab, interval 1, probability 0, space 0, times 0 [ 773.648871][T22850] CPU: 0 PID: 22850 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 773.658847][T22850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 773.668960][T22850] Call Trace: [ 773.672270][T22850] [ 773.675239][T22850] dump_stack_lvl+0x136/0x150 [ 773.679986][T22850] should_fail_ex+0x4a3/0x5b0 [ 773.684733][T22850] should_failslab+0x9/0x20 [ 773.689323][T22850] kmem_cache_alloc+0x63/0x3b0 [ 773.694169][T22850] start_transaction+0x345/0x14c0 [ 773.699259][T22850] ? kmem_cache_alloc+0x337/0x3b0 [ 773.704364][T22850] drop_verity_items+0x234/0x410 [ 773.709361][T22850] ? btrfs_zoned_activate_one_bg+0x460/0x460 [ 773.715410][T22850] ? down_write+0x14f/0x200 [ 773.719982][T22850] ? down_write_killable_nested+0x250/0x250 [ 773.725965][T22850] btrfs_begin_enable_verity+0x111/0x230 [ 773.731660][T22850] enable_verity+0x636/0x9d0 [ 773.736321][T22850] ? __mnt_want_write+0x3f/0x2e0 [ 773.741331][T22850] ? build_merkle_tree+0xc50/0xc50 [ 773.746500][T22850] ? trace_lock_acquire+0x12d/0x180 [ 773.751788][T22850] ? __mnt_want_write+0x1fe/0x2e0 [ 773.756890][T22850] fsverity_ioctl_enable+0x404/0x560 [ 773.762247][T22850] ? enable_verity+0x9d0/0x9d0 [ 773.767101][T22850] ? __kmem_cache_free+0xaf/0x2d0 [ 773.772188][T22850] btrfs_ioctl+0x2e84/0x5b30 [ 773.776853][T22850] ? tomoyo_path_number_perm+0x166/0x570 [ 773.782533][T22850] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 773.788390][T22850] ? find_held_lock+0x2d/0x110 [ 773.793214][T22850] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 773.799712][T22850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 773.805678][T22850] ? do_vfs_ioctl+0x132/0x1670 [ 773.810501][T22850] ? vfs_fileattr_set+0xc40/0xc40 [ 773.815606][T22850] ? trace_lock_acquire+0x12d/0x180 [ 773.820884][T22850] ? do_one_initcall+0x4e8/0x540 [ 773.825892][T22850] ? receive_fd+0x110/0x110 [ 773.830460][T22850] ? __fget_files+0x26a/0x480 [ 773.835208][T22850] ? bpf_lsm_file_ioctl+0x9/0x10 [ 773.840228][T22850] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 773.846729][T22850] __x64_sys_ioctl+0x197/0x210 [ 773.851551][T22850] do_syscall_64+0x39/0xb0 [ 773.856042][T22850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 773.861979][T22850] RIP: 0033:0x7ffba488c169 [ 773.866422][T22850] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 773.886065][T22850] RSP: 002b:00007ffba55ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.894521][T22850] RAX: ffffffffffffffda RBX: 00007ffba49abf80 RCX: 00007ffba488c169 13:01:25 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 7) 13:01:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) 13:01:25 executing program 3: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x2, 0x56}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000880) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) vmsplice(r5, &(0x7f0000000780)=[{&(0x7f0000000300)="21117fb76082e9f13367c3f3400f7f8036187c2529fda3aec6ee77050e55ecb5f3170721e9058e02c6b00229927c51d5178274c41ebe6121bb71367a83a0aadb24c3c86c7654d82555db58a56db8a8749903745360309fa002", 0x59}, {&(0x7f00000004c0)="8a91608dc35b68f9ccd037c939760bac88a34da39625d163e5fdac583c7cfba5553d5432b226ea48dfc39e27ba0a5aef1aa206c14b65256a6f64da7d78a49a65ffb5bcdbfb824c2355b77852d5e381e6bd0e6a8a42b90de855746c1b7541b4fd4698907966618c1b329cbc4cd79d6b20b20f3c603d4b31f65f1c84316fcab139de3b7de55fcd1d6bc38bc5909899f28236c148a312c485e2f0a879491c2ab48d6b36c27a80338ac1b81a06f6d2b0798ab43e4f014573108699c698cf6d120b921a214eae37e591e4d9b810aef2b676c0d70853ec004e133bc5ee57f8548506d6a1e0c297c768bf0c4338b0db2ef365daf4c2", 0xf2}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000005c0)="bbea0b38fd7786068d8f397310ae3abb4ec9dc4e09636370e43b01d8e97fd31f39115814b614e6ed56872fff302940fb69cc43e0f264cb7a9157b2c60dc483c9420795e2867990e9b5ea810245a5d63d3cb1bd602fe604c52ff9fc3f4ca257060c3e68f3f24cf59cbf802f2488b5bd37d7457855145fdcb600d79456f98d50db5b1d3637c3c22d3a11acb05a775f938c275f3cb870a44e2cf5263667fa05bbb951c15eace6809bfd84ec36f6afd40ab5e69aedb96f881aa05899868473b31d38b749b3550944c72d880c82d6656dd3c207572ec88582307c", 0xd8}, {&(0x7f0000000900)="601b2ebb83952df28c7ae7cf744769fb3fafca8962e41ae0c0c2cd12380c04723f8449c0b4003cd218cc48e7cbbefddb34fa29413d271ed60f3e50bf2c4099edcf32f0a50e2c08bd96f2935982a35ad2e8c7f44e0bfae72f9a42b1619a4a06a2e087b15d6f9437132b73c0b71b1b51bfc596b253aa8d692b660323147df15fbce30104050ee76e1ddbf3239535ba03aaf6418e6c2c11c7b2e5a2a304091affe6485c290f", 0xa4}], 0x5, 0x0) (async) vmsplice(r5, &(0x7f0000000780)=[{&(0x7f0000000300)="21117fb76082e9f13367c3f3400f7f8036187c2529fda3aec6ee77050e55ecb5f3170721e9058e02c6b00229927c51d5178274c41ebe6121bb71367a83a0aadb24c3c86c7654d82555db58a56db8a8749903745360309fa002", 0x59}, {&(0x7f00000004c0)="8a91608dc35b68f9ccd037c939760bac88a34da39625d163e5fdac583c7cfba5553d5432b226ea48dfc39e27ba0a5aef1aa206c14b65256a6f64da7d78a49a65ffb5bcdbfb824c2355b77852d5e381e6bd0e6a8a42b90de855746c1b7541b4fd4698907966618c1b329cbc4cd79d6b20b20f3c603d4b31f65f1c84316fcab139de3b7de55fcd1d6bc38bc5909899f28236c148a312c485e2f0a879491c2ab48d6b36c27a80338ac1b81a06f6d2b0798ab43e4f014573108699c698cf6d120b921a214eae37e591e4d9b810aef2b676c0d70853ec004e133bc5ee57f8548506d6a1e0c297c768bf0c4338b0db2ef365daf4c2", 0xf2}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000005c0)="bbea0b38fd7786068d8f397310ae3abb4ec9dc4e09636370e43b01d8e97fd31f39115814b614e6ed56872fff302940fb69cc43e0f264cb7a9157b2c60dc483c9420795e2867990e9b5ea810245a5d63d3cb1bd602fe604c52ff9fc3f4ca257060c3e68f3f24cf59cbf802f2488b5bd37d7457855145fdcb600d79456f98d50db5b1d3637c3c22d3a11acb05a775f938c275f3cb870a44e2cf5263667fa05bbb951c15eace6809bfd84ec36f6afd40ab5e69aedb96f881aa05899868473b31d38b749b3550944c72d880c82d6656dd3c207572ec88582307c", 0xd8}, {&(0x7f0000000900)="601b2ebb83952df28c7ae7cf744769fb3fafca8962e41ae0c0c2cd12380c04723f8449c0b4003cd218cc48e7cbbefddb34fa29413d271ed60f3e50bf2c4099edcf32f0a50e2c08bd96f2935982a35ad2e8c7f44e0bfae72f9a42b1619a4a06a2e087b15d6f9437132b73c0b71b1b51bfc596b253aa8d692b660323147df15fbce30104050ee76e1ddbf3239535ba03aaf6418e6c2c11c7b2e5a2a304091affe6485c290f", 0xa4}], 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) socket(0x2c, 0x3, 0x0) (async) r7 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r10, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r11, 0x0, 0x10000a006) (async) sendfile(r12, r11, 0x0, 0x10000a006) 13:01:25 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000280)=0xc) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x440c00, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x10010, r3, 0x3c25a000) setuid(r2) setreuid(r2, 0xee00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r4, &(0x7f0000000240)=""/180, 0xb4) (async) read$snddsp(r4, &(0x7f0000000240)=""/180, 0xb4) 13:01:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) ftruncate(r2, 0x7fff) io_getevents(r3, 0x1, 0x1, &(0x7f0000000240)=[{}], 0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2000, r1, &(0x7f0000000180)="c22dda0100ec40d4437830f472a433982254ac769da934f67484ee0eafcf3ef910e109cad6fcd10321c322f18c20fc9b5fd87f03c9647e69a1ba30230dda81f94ecd23734849d31b766f2c47e0485784e886eb899724414ff6f23751edd9e9fac422407e7bd368d44a675b9516e06c16584987d11b", 0x75, 0x3537d575, 0x0, 0x2, r1}, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000280)=0x10000) sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)=0x3ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="30000000690008002abd7000fddbdf25000000000000000008000100000000000800010002000000000000000000000025957938738a5de3fb47279188107a8baf59"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x40004) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000c80)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket$netlink(0x10, 0x3, 0x0) 13:01:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000001c0)=0xfffffffe, 0x4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = dup3(r1, r1, 0x80000) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x4f300714d6b5753b, 0x10000}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000a, 0x4010, r8, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r8, 0xc0585609, &(0x7f0000000080)={0xfffeffff, 0x5, 0x4, 0x20, 0xffffffff, {0x0, 0xea60}, {0x1, 0x2, 0x20, 0xfc, 0x7f, 0x8, "35fb99f3"}, 0x6, 0x4, {0xffffffffffffffff}, 0x1}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r10, @ANYBLOB="0200000032003000000000000e997c93"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000130000000000000008000020070002009160413f778698a9a588cb4fe2c5a9076d03b0e0fb9f87a2798f5aad5a9ace614750e8c199bc40df574da83048bc7c66cdc7b9917c3fe8b7f0e3eb7a1aca9daa964dd16341ed3c155d14f0a1038ac629edc45e3d2058cc282aa53be8b2184d", @ANYRES32=r11, @ANYRES32=r9, @ANYRES8], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x2, 0xcb, {{0x13, 0x4, 0x1, 0x3, 0x4c, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@generic={0x83, 0x10, "a104ec0a1382be5495620f1bdd9e"}, @cipso={0x86, 0x26, 0x2, [{0x6, 0x4, "ea01"}, {0x1, 0x10, "910a4dfa9a798e4bbe2c8c8cc700"}, {0x7, 0x2}, {0x5, 0xa, "00f59782b0f300bb"}]}]}}}}}) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r17 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r17, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r16, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r14], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x234, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x234}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 773.902529][T22850] RDX: 0000000020000240 RSI: 0000000040806685 RDI: 0000000000000004 [ 773.910876][T22850] RBP: 00007ffba55ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 773.918948][T22850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.926932][T22850] R13: 00007ffebbcc4d0f R14: 00007ffba55ef300 R15: 0000000000022000 [ 773.934935][T22850] 13:01:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) r1 = socket(0x11, 0x800000003, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) 13:01:26 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000280)=0xc) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x440c00, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x10010, r3, 0x3c25a000) (async) setuid(r2) setreuid(r2, 0xee00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r4, &(0x7f0000000240)=""/180, 0xb4) 13:01:26 executing program 5: setreuid(0x0, 0xee00) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff496cb34f591a9e34a83e00ac"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) read$snddsp(r0, &(0x7f0000000040)=""/161, 0xa1) 13:01:26 executing program 3: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x2, 0x56}) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000880) (async, rerun: 64) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) vmsplice(r5, &(0x7f0000000780)=[{&(0x7f0000000300)="21117fb76082e9f13367c3f3400f7f8036187c2529fda3aec6ee77050e55ecb5f3170721e9058e02c6b00229927c51d5178274c41ebe6121bb71367a83a0aadb24c3c86c7654d82555db58a56db8a8749903745360309fa002", 0x59}, {&(0x7f00000004c0)="8a91608dc35b68f9ccd037c939760bac88a34da39625d163e5fdac583c7cfba5553d5432b226ea48dfc39e27ba0a5aef1aa206c14b65256a6f64da7d78a49a65ffb5bcdbfb824c2355b77852d5e381e6bd0e6a8a42b90de855746c1b7541b4fd4698907966618c1b329cbc4cd79d6b20b20f3c603d4b31f65f1c84316fcab139de3b7de55fcd1d6bc38bc5909899f28236c148a312c485e2f0a879491c2ab48d6b36c27a80338ac1b81a06f6d2b0798ab43e4f014573108699c698cf6d120b921a214eae37e591e4d9b810aef2b676c0d70853ec004e133bc5ee57f8548506d6a1e0c297c768bf0c4338b0db2ef365daf4c2", 0xf2}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000005c0)="bbea0b38fd7786068d8f397310ae3abb4ec9dc4e09636370e43b01d8e97fd31f39115814b614e6ed56872fff302940fb69cc43e0f264cb7a9157b2c60dc483c9420795e2867990e9b5ea810245a5d63d3cb1bd602fe604c52ff9fc3f4ca257060c3e68f3f24cf59cbf802f2488b5bd37d7457855145fdcb600d79456f98d50db5b1d3637c3c22d3a11acb05a775f938c275f3cb870a44e2cf5263667fa05bbb951c15eace6809bfd84ec36f6afd40ab5e69aedb96f881aa05899868473b31d38b749b3550944c72d880c82d6656dd3c207572ec88582307c", 0xd8}, {&(0x7f0000000900)="601b2ebb83952df28c7ae7cf744769fb3fafca8962e41ae0c0c2cd12380c04723f8449c0b4003cd218cc48e7cbbefddb34fa29413d271ed60f3e50bf2c4099edcf32f0a50e2c08bd96f2935982a35ad2e8c7f44e0bfae72f9a42b1619a4a06a2e087b15d6f9437132b73c0b71b1b51bfc596b253aa8d692b660323147df15fbce30104050ee76e1ddbf3239535ba03aaf6418e6c2c11c7b2e5a2a304091affe6485c290f", 0xa4}], 0x5, 0x0) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r7 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r11, 0x0, 0x10000a006) 13:01:26 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) socket(0x11, 0x800000003, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000100)='mm_vmscan_kswapd_sleep\x00'}, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x14e) dup2(r1, r1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000480)={'\x00', 0x6, 0x7fff, 0x67, 0x0, 0x6}) unshare(0x6c060000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000400)={@private0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x2, 0x2, 0xa, 0x7, 0x200}, 0x20) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(r2, 0x8200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x18}}, 0x4048800) close(r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000008c0)=0x8001, 0x3b) write$cgroup_type(r2, &(0x7f0000000200), 0x175d900f) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) unshare(0x20000000) mmap(&(0x7f000013a000/0x2000)=nil, 0x2000, 0x3000008, 0x110, 0xffffffffffffffff, 0x36208000) 13:01:26 executing program 5: setreuid(0x0, 0xee00) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff496cb34f591a9e34a83e00ac"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async) read$snddsp(r0, &(0x7f0000000040)=""/161, 0xa1) [ 774.654860][T22907] workqueue: Failed to create a rescuer kthread for wq "kvm": -EINTR [ 774.665541][ T5062] Bluetooth: hci0: command 0x0c3a tx timeout [ 774.671995][ T5046] Bluetooth: hci0: Opcode 0x c3a failed: -110 [ 775.263845][T22921] loop4: detected capacity change from 0 to 32768 [ 775.271684][T22921] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (22921) [ 775.288268][T22921] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 775.302229][T22921] BTRFS info (device loop4): turning on sync discard [ 775.309040][T22921] BTRFS info (device loop4): using free space tree [ 775.337903][T22921] BTRFS info (device loop4): enabling ssd optimizations [ 775.364823][T22921] FAULT_INJECTION: forcing a failure. [ 775.364823][T22921] name failslab, interval 1, probability 0, space 0, times 0 [ 775.378426][T22921] CPU: 1 PID: 22921 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 775.388383][T22921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 775.398482][T22921] Call Trace: [ 775.401795][T22921] [ 775.404766][T22921] dump_stack_lvl+0x136/0x150 [ 775.409534][T22921] should_fail_ex+0x4a3/0x5b0 [ 775.414298][T22921] should_failslab+0x9/0x20 [ 775.418866][T22921] __kmem_cache_alloc_node+0x5b/0x320 [ 775.424294][T22921] ? btrfs_cache_block_group+0xc9/0x7f0 [ 775.429944][T22921] kmalloc_trace+0x26/0xe0 [ 775.434425][T22921] btrfs_cache_block_group+0xc9/0x7f0 [ 775.439864][T22921] ? find_free_extent+0x743/0x67c0 [ 775.445137][T22921] find_free_extent+0x30b0/0x67c0 [ 775.450248][T22921] ? _raw_spin_unlock+0x28/0x40 [ 775.455148][T22921] ? btrfs_get_alloc_profile+0x2f4/0x7c0 [ 775.460844][T22921] btrfs_reserve_extent+0x322/0x680 [ 775.466109][T22921] ? walk_down_tree+0x4b0/0x4b0 [ 775.471030][T22921] ? do_raw_spin_unlock+0x175/0x230 [ 775.476299][T22921] ? _raw_spin_unlock+0x28/0x40 [ 775.481206][T22921] ? btrfs_use_block_rsv+0x309/0x820 [ 775.486554][T22921] btrfs_alloc_tree_block+0x205/0x1480 [ 775.492088][T22921] ? btrfs_alloc_logged_file_extent+0x600/0x600 [ 775.498407][T22921] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 775.504453][T22921] __btrfs_cow_block+0x3b2/0x1690 [ 775.509534][T22921] ? update_ref_for_cow+0xaa0/0xaa0 [ 775.514773][T22921] ? btrfs_qgroup_add_swapped_blocks+0x980/0x980 [ 775.521160][T22921] ? down_write_nested+0x153/0x200 [ 775.526317][T22921] ? down_read_killable_nested+0x4f0/0x4f0 [ 775.532168][T22921] btrfs_cow_block+0x2fa/0x820 [ 775.536981][T22921] btrfs_search_slot+0x11c6/0x2da0 [ 775.542153][T22921] ? balance_level+0x1f20/0x1f20 [ 775.547145][T22921] ? start_transaction+0x2aa/0x14c0 [ 775.552395][T22921] drop_verity_items+0x2a6/0x410 [ 775.557366][T22921] ? btrfs_zoned_activate_one_bg+0x460/0x460 [ 775.563379][T22921] ? down_write+0x14f/0x200 [ 775.567914][T22921] ? down_write_killable_nested+0x250/0x250 [ 775.573846][T22921] btrfs_begin_enable_verity+0x111/0x230 [ 775.579512][T22921] enable_verity+0x636/0x9d0 [ 775.584141][T22921] ? __mnt_want_write+0x3f/0x2e0 [ 775.589117][T22921] ? build_merkle_tree+0xc50/0xc50 [ 775.594261][T22921] ? trace_lock_acquire+0x12d/0x180 [ 775.599525][T22921] ? __mnt_want_write+0x1fe/0x2e0 [ 775.604594][T22921] fsverity_ioctl_enable+0x404/0x560 [ 775.609920][T22921] ? enable_verity+0x9d0/0x9d0 [ 775.614738][T22921] ? __kmem_cache_free+0xaf/0x2d0 [ 775.619801][T22921] btrfs_ioctl+0x2e84/0x5b30 [ 775.624449][T22921] ? tomoyo_path_number_perm+0x166/0x570 [ 775.630114][T22921] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 775.635967][T22921] ? find_held_lock+0x2d/0x110 [ 775.640769][T22921] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 775.647233][T22921] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 775.653176][T22921] ? do_vfs_ioctl+0x132/0x1670 [ 775.657969][T22921] ? vfs_fileattr_set+0xc40/0xc40 [ 775.663039][T22921] ? trace_lock_acquire+0x12d/0x180 [ 775.668292][T22921] ? do_one_initcall+0x4e8/0x540 [ 775.673268][T22921] ? receive_fd+0x110/0x110 [ 775.677807][T22921] ? __fget_files+0x26a/0x480 [ 775.682520][T22921] ? bpf_lsm_file_ioctl+0x9/0x10 [ 775.687498][T22921] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 775.693954][T22921] __x64_sys_ioctl+0x197/0x210 [ 775.698745][T22921] do_syscall_64+0x39/0xb0 [ 775.703199][T22921] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 775.709134][T22921] RIP: 0033:0x7ffba488c169 [ 775.713572][T22921] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 775.733211][T22921] RSP: 002b:00007ffba55ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.741660][T22921] RAX: ffffffffffffffda RBX: 00007ffba49abf80 RCX: 00007ffba488c169 [ 775.749661][T22921] RDX: 0000000020000240 RSI: 0000000040806685 RDI: 0000000000000004 [ 775.757658][T22921] RBP: 00007ffba55ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 775.765653][T22921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.773651][T22921] R13: 00007ffebbcc4d0f R14: 00007ffba55ef300 R15: 0000000000022000 [ 775.781668][T22921] 13:01:27 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 8) 13:01:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c00400001080000000100b791504600ff0bb7957f956e69a000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000009c0)={'syz1', "6b75da39ecb39909e4083526545d3ea2b4cad2f5be9df55668da07e277c0712455518467e4e21022375433122f25c1c00a99c67d5cd7f1dcc9992b67f8d8ee7e00d0cd5e896451b1ed58763601be56bc065e228744ae8723b7bbbe5b40a5c176c2bb8f33a3ace7e73ca8fd189eb1cf2efeda98db9c70db712ae27b63861df3fcfc27f123ad76ee191f40f41ad42ccf46d1ab845c88266c5dfebd98c0b8df7b66b0d090442bef6596d6511c2be77851565464b89b07235ff8b66fe82b5406805e87b9575c0fcfe243dcf3f9e5a65683f1c417bf2b5e2f48f3ea8e5b5f9a17e5d2a310ad282ff077d9879977e8c838"}, 0xf2) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="48040000", @ANYRES64=r3, @ANYBLOB="01edff00e14f00"/18, @ANYBLOB="94e63a50c30f857c5fedd356bd434e28b32eb8376378e6ca2f98887dbfd2fdd057f200d5c31571a3a9fa02eb6519ed0d2735f2076c8c8e274ed08b9605d46a4aaed9236d0c7118a1383a64f8b19c036ca05c6019899c4a5c8b7cb9e0e72ffaa85a3e4408df61c47c0572837f5bb76f9c05db8a72367dc2cdd6e49460b7685ff8f2", @ANYRESDEC=r4], 0x448}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0xc8, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0xfffffff8, 0x49}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'hsr0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'erspan0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6575d75ce222f08af379f82ed598db1aabddebd6ec8abaac"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0b2a9d27d0c44a1140d4bc05efc8ec3507e029a81754287f"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x841}, 0x4000004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10000, 0x100]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xbf, 0x4, 0x401, 0x23184040, 0x101]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x80, 0x800, 0x34bd, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x68}}, 0x20008151) 13:01:27 executing program 5: setreuid(0x0, 0xee00) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1000) (async, rerun: 32) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff496cb34f591a9e34a83e00ac"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async) read$snddsp(r0, &(0x7f0000000040)=""/161, 0xa1) 13:01:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) (async, rerun: 32) ftruncate(r2, 0x7fff) (rerun: 32) io_getevents(r3, 0x1, 0x1, &(0x7f0000000240)=[{}], 0x0) (async, rerun: 64) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) (async, rerun: 64) io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2000, r1, &(0x7f0000000180)="c22dda0100ec40d4437830f472a433982254ac769da934f67484ee0eafcf3ef910e109cad6fcd10321c322f18c20fc9b5fd87f03c9647e69a1ba30230dda81f94ecd23734849d31b766f2c47e0485784e886eb899724414ff6f23751edd9e9fac422407e7bd368d44a675b9516e06c16584987d11b", 0x75, 0x3537d575, 0x0, 0x2, r1}, &(0x7f0000000080)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (rerun: 64) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000280)=0x10000) sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)=0x3ff) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="30000000690008002abd7000fddbdf25000000000000000008000100000000000800010002000000000000000000000025957938738a5de3fb47279188107a8baf59"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x40004) (async) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) (async, rerun: 32) sched_setaffinity(r4, 0x8, &(0x7f0000000c80)=0x9) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) [ 775.806811][T22921] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) 13:01:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000001c0)=0xfffffffe, 0x4) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64) r7 = dup3(r1, r1, 0x80000) (rerun: 64) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x4f300714d6b5753b, 0x10000}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000a, 0x4010, r8, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r8, 0xc0585609, &(0x7f0000000080)={0xfffeffff, 0x5, 0x4, 0x20, 0xffffffff, {0x0, 0xea60}, {0x1, 0x2, 0x20, 0xfc, 0x7f, 0x8, "35fb99f3"}, 0x6, 0x4, {0xffffffffffffffff}, 0x1}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r10, @ANYBLOB="0200000032003000000000000e997c93"]) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000130000000000000008000020070002009160413f778698a9a588cb4fe2c5a9076d03b0e0fb9f87a2798f5aad5a9ace614750e8c199bc40df574da83048bc7c66cdc7b9917c3fe8b7f0e3eb7a1aca9daa964dd16341ed3c155d14f0a1038ac629edc45e3d2058cc282aa53be8b2184d", @ANYRES32=r11, @ANYRES32=r9, @ANYRES8], 0x44}}, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x2, 0xcb, {{0x13, 0x4, 0x1, 0x3, 0x4c, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@generic={0x83, 0x10, "a104ec0a1382be5495620f1bdd9e"}, @cipso={0x86, 0x26, 0x2, [{0x6, 0x4, "ea01"}, {0x1, 0x10, "910a4dfa9a798e4bbe2c8c8cc700"}, {0x7, 0x2}, {0x5, 0xa, "00f59782b0f300bb"}]}]}}}}}) (async, rerun: 64) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r17 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r17, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r16, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r14], 0x44}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x234, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x234}}, 0x0) (async, rerun: 32) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:27 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) socket(0x11, 0x800000003, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000100)='mm_vmscan_kswapd_sleep\x00'}, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x14e) dup2(r1, r1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000480)={'\x00', 0x6, 0x7fff, 0x67, 0x0, 0x6}) unshare(0x6c060000) (async) unshare(0x6c060000) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000400)={@private0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x2, 0x2, 0xa, 0x7, 0x200}, 0x20) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) (async) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(r2, 0x8200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x18}}, 0x4048800) close(r3) (async) close(r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000008c0)=0x8001, 0x3b) write$cgroup_type(r2, &(0x7f0000000200), 0x175d900f) (async) write$cgroup_type(r2, &(0x7f0000000200), 0x175d900f) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) unshare(0x20000000) mmap(&(0x7f000013a000/0x2000)=nil, 0x2000, 0x3000008, 0x110, 0xffffffffffffffff, 0x36208000) 13:01:27 executing program 5: setreuid(0x0, 0xee00) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x101941, 0x42) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r3, &(0x7f0000000240)=""/180, 0xb4) 13:01:28 executing program 5: setreuid(0x0, 0xee00) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x101941, 0x42) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r3, &(0x7f0000000240)=""/180, 0xb4) [ 776.171940][ T27] audit: type=1804 audit(1685278888.070:425): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/584/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 13:01:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) socket(0x0, 0x0, 0x0) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c00400001080000000100b791504600ff0bb7957f956e69a000000000030900020073797a32"], 0x2c}}, 0x4008004) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) socket(0x2c, 0x3, 0x0) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000009c0)={'syz1', "6b75da39ecb39909e4083526545d3ea2b4cad2f5be9df55668da07e277c0712455518467e4e21022375433122f25c1c00a99c67d5cd7f1dcc9992b67f8d8ee7e00d0cd5e896451b1ed58763601be56bc065e228744ae8723b7bbbe5b40a5c176c2bb8f33a3ace7e73ca8fd189eb1cf2efeda98db9c70db712ae27b63861df3fcfc27f123ad76ee191f40f41ad42ccf46d1ab845c88266c5dfebd98c0b8df7b66b0d090442bef6596d6511c2be77851565464b89b07235ff8b66fe82b5406805e87b9575c0fcfe243dcf3f9e5a65683f1c417bf2b5e2f48f3ea8e5b5f9a17e5d2a310ad282ff077d9879977e8c838"}, 0xf2) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="48040000", @ANYRES64=r3, @ANYBLOB="01edff00e14f00"/18, @ANYBLOB="94e63a50c30f857c5fedd356bd434e28b32eb8376378e6ca2f98887dbfd2fdd057f200d5c31571a3a9fa02eb6519ed0d2735f2076c8c8e274ed08b9605d46a4aaed9236d0c7118a1383a64f8b19c036ca05c6019899c4a5c8b7cb9e0e72ffaa85a3e4408df61c47c0572837f5bb76f9c05db8a72367dc2cdd6e49460b7685ff8f2", @ANYRESDEC=r4], 0x448}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="48040000", @ANYRES64=r3, @ANYBLOB="01edff00e14f00"/18, @ANYBLOB="94e63a50c30f857c5fedd356bd434e28b32eb8376378e6ca2f98887dbfd2fdd057f200d5c31571a3a9fa02eb6519ed0d2735f2076c8c8e274ed08b9605d46a4aaed9236d0c7118a1383a64f8b19c036ca05c6019899c4a5c8b7cb9e0e72ffaa85a3e4408df61c47c0572837f5bb76f9c05db8a72367dc2cdd6e49460b7685ff8f2", @ANYRESDEC=r4], 0x448}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0xc8, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0xfffffff8, 0x49}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'hsr0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'erspan0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6575d75ce222f08af379f82ed598db1aabddebd6ec8abaac"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0b2a9d27d0c44a1140d4bc05efc8ec3507e029a81754287f"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x841}, 0x4000004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10000, 0x100]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xbf, 0x4, 0x401, 0x23184040, 0x101]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x80, 0x800, 0x34bd, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x68}}, 0x20008151) 13:01:28 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) socket(0x11, 0x800000003, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000100)='mm_vmscan_kswapd_sleep\x00'}, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x14e) dup2(r1, r1) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000480)={'\x00', 0x6, 0x7fff, 0x67, 0x0, 0x6}) (async) unshare(0x6c060000) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000400)={@private0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x2}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x2, 0x2, 0xa, 0x7, 0x200}, 0x20) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(r2, 0x8200) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x18}}, 0x4048800) (async) close(r3) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000008c0)=0x8001, 0x3b) (async) write$cgroup_type(r2, &(0x7f0000000200), 0x175d900f) (async) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) (async) unshare(0x20000000) mmap(&(0x7f000013a000/0x2000)=nil, 0x2000, 0x3000008, 0x110, 0xffffffffffffffff, 0x36208000) 13:01:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) (async) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000300)='./bus\x00', 0x0) (async) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) ftruncate(r2, 0x7fff) io_getevents(r3, 0x1, 0x1, &(0x7f0000000240)=[{}], 0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) (async) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2000, r1, &(0x7f0000000180)="c22dda0100ec40d4437830f472a433982254ac769da934f67484ee0eafcf3ef910e109cad6fcd10321c322f18c20fc9b5fd87f03c9647e69a1ba30230dda81f94ecd23734849d31b766f2c47e0485784e886eb899724414ff6f23751edd9e9fac422407e7bd368d44a675b9516e06c16584987d11b", 0x75, 0x3537d575, 0x0, 0x2, r1}, &(0x7f0000000080)) (async) io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2000, r1, &(0x7f0000000180)="c22dda0100ec40d4437830f472a433982254ac769da934f67484ee0eafcf3ef910e109cad6fcd10321c322f18c20fc9b5fd87f03c9647e69a1ba30230dda81f94ecd23734849d31b766f2c47e0485784e886eb899724414ff6f23751edd9e9fac422407e7bd368d44a675b9516e06c16584987d11b", 0x75, 0x3537d575, 0x0, 0x2, r1}, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (async) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000280)=0x10000) (async) sched_setscheduler(r4, 0x0, &(0x7f0000000280)=0x10000) sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)=0x3ff) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)=0x3ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="30000000690008002abd7000fddbdf25000000000000000008000100000000000800010002000000000000000000000025957938738a5de3fb47279188107a8baf59"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x40004) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000c80)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 13:01:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) r1 = socket(0x11, 0x800000003, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000001c0)=0xfffffffe, 0x4) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = dup3(r1, r1, 0x80000) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x4f300714d6b5753b, 0x10000}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000a, 0x4010, r8, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r8, 0xc0585609, &(0x7f0000000080)={0xfffeffff, 0x5, 0x4, 0x20, 0xffffffff, {0x0, 0xea60}, {0x1, 0x2, 0x20, 0xfc, 0x7f, 0x8, "35fb99f3"}, 0x6, 0x4, {0xffffffffffffffff}, 0x1}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r10, @ANYBLOB="0200000032003000000000000e997c93"]) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000130000000000000008000020070002009160413f778698a9a588cb4fe2c5a9076d03b0e0fb9f87a2798f5aad5a9ace614750e8c199bc40df574da83048bc7c66cdc7b9917c3fe8b7f0e3eb7a1aca9daa964dd16341ed3c155d14f0a1038ac629edc45e3d2058cc282aa53be8b2184d", @ANYRES32=r11, @ANYRES32=r9, @ANYRES8], 0x44}}, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x2, 0xcb, {{0x13, 0x4, 0x1, 0x3, 0x4c, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@generic={0x83, 0x10, "a104ec0a1382be5495620f1bdd9e"}, @cipso={0x86, 0x26, 0x2, [{0x6, 0x4, "ea01"}, {0x1, 0x10, "910a4dfa9a798e4bbe2c8c8cc700"}, {0x7, 0x2}, {0x5, 0xa, "00f59782b0f300bb"}]}]}}}}}) (async, rerun: 32) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r17 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r17, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r16, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r14], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x234, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x234}}, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 777.138051][T22972] loop4: detected capacity change from 0 to 32768 [ 777.147373][T22972] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (22972) [ 777.167740][T22972] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 777.177806][T22972] BTRFS info (device loop4): turning on sync discard [ 777.188020][T22972] BTRFS info (device loop4): using free space tree [ 777.223356][T22972] BTRFS info (device loop4): enabling ssd optimizations [ 777.277561][T22972] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) 13:01:29 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 9) 13:01:29 executing program 5: setreuid(0x0, 0xee00) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x101941, 0x42) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r3, &(0x7f0000000240)=""/180, 0xb4) 13:01:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c00400001080000000100b791504600ff0bb7957f956e69a000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) (rerun: 32) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000009c0)={'syz1', "6b75da39ecb39909e4083526545d3ea2b4cad2f5be9df55668da07e277c0712455518467e4e21022375433122f25c1c00a99c67d5cd7f1dcc9992b67f8d8ee7e00d0cd5e896451b1ed58763601be56bc065e228744ae8723b7bbbe5b40a5c176c2bb8f33a3ace7e73ca8fd189eb1cf2efeda98db9c70db712ae27b63861df3fcfc27f123ad76ee191f40f41ad42ccf46d1ab845c88266c5dfebd98c0b8df7b66b0d090442bef6596d6511c2be77851565464b89b07235ff8b66fe82b5406805e87b9575c0fcfe243dcf3f9e5a65683f1c417bf2b5e2f48f3ea8e5b5f9a17e5d2a310ad282ff077d9879977e8c838"}, 0xf2) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="48040000", @ANYRES64=r3, @ANYBLOB="01edff00e14f00"/18, @ANYBLOB="94e63a50c30f857c5fedd356bd434e28b32eb8376378e6ca2f98887dbfd2fdd057f200d5c31571a3a9fa02eb6519ed0d2735f2076c8c8e274ed08b9605d46a4aaed9236d0c7118a1383a64f8b19c036ca05c6019899c4a5c8b7cb9e0e72ffaa85a3e4408df61c47c0572837f5bb76f9c05db8a72367dc2cdd6e49460b7685ff8f2", @ANYRESDEC=r4], 0x448}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0xc8, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0xfffffff8, 0x49}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'hsr0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'erspan0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6575d75ce222f08af379f82ed598db1aabddebd6ec8abaac"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0b2a9d27d0c44a1140d4bc05efc8ec3507e029a81754287f"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x841}, 0x4000004) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (rerun: 32) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) (async, rerun: 32) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10000, 0x100]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xbf, 0x4, 0x401, 0x23184040, 0x101]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x80, 0x800, 0x34bd, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x68}}, 0x20008151) (rerun: 32) 13:01:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000001c0)=0x3, 0x12) write$binfmt_script(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000940) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="4b12db7d1c16e0e2faf90ead7bab528a70c05d1cc6bc52afa76cd9074a6ce347a2d8e80b0f7b2ac61bf908eab750fff8274e4fb78dda613f94e46c11b1d9c5c51323410c3a45daf0afbff5fdf4990c2b16e28b5042e0b0d9385b81eb0a937c81ed1ccb5c902dd2343e1236a8d76e020bbf580a5a381ab48a388aa673bdc229897c1f389b89ba2502ed2260d9a455b49fd51796adabc8") r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:29 executing program 5: setreuid(0x0, 0xee00) r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = getpgrp(0xffffffffffffffff) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, r1, 0xee01, 0x0, 0x20, 0x1}, 0x3e, 0x2, 0x4f70, 0xffffffff, r2, r3, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r4, &(0x7f0000000240)=""/180, 0xb4) 13:01:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000001c0)=0x3, 0x12) (async) write$binfmt_script(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000940) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="4b12db7d1c16e0e2faf90ead7bab528a70c05d1cc6bc52afa76cd9074a6ce347a2d8e80b0f7b2ac61bf908eab750fff8274e4fb78dda613f94e46c11b1d9c5c51323410c3a45daf0afbff5fdf4990c2b16e28b5042e0b0d9385b81eb0a937c81ed1ccb5c902dd2343e1236a8d76e020bbf580a5a381ab48a388aa673bdc229897c1f389b89ba2502ed2260d9a455b49fd51796adabc8") (async) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:29 executing program 5: setreuid(0x0, 0xee00) r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) (async) shmctl$IPC_RMID(r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r1) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = getpgrp(0xffffffffffffffff) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, r1, 0xee01, 0x0, 0x20, 0x1}, 0x3e, 0x2, 0x4f70, 0xffffffff, r2, r3, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r4, &(0x7f0000000240)=""/180, 0xb4) 13:01:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000080)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 778.724405][T23039] loop4: detected capacity change from 0 to 32768 [ 778.741001][T23039] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (23039) [ 778.764791][T23039] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 778.783912][T23039] BTRFS info (device loop4): turning on sync discard [ 778.790735][T23039] BTRFS info (device loop4): using free space tree [ 778.826584][T23039] BTRFS info (device loop4): enabling ssd optimizations [ 778.859387][T23039] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) 13:01:30 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 10) 13:01:30 executing program 5: setreuid(0x0, 0xee00) r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r1) (async) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) getpgrp(0xffffffffffffffff) (async) r3 = getpgrp(0xffffffffffffffff) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, r1, 0xee01, 0x0, 0x20, 0x1}, 0x3e, 0x2, 0x4f70, 0xffffffff, r2, r3, 0x1}) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, r1, 0xee01, 0x0, 0x20, 0x1}, 0x3e, 0x2, 0x4f70, 0xffffffff, r2, r3, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r4, &(0x7f0000000240)=""/180, 0xb4) 13:01:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="4b12db7d1c16e0e2faf90ead7bab528a70c05d1cc6bc52afa76cd9074a6ce347a2d8e80b0f7b2ac61bf908eab750fff8274e4fb78dda613f94e46c11b1d9c5c51323410c3a45daf0afbff5fdf4990c2b16e28b5042e0b0d9385b81eb0a937c81ed1ccb5c902dd2343e1236a8d76e020bbf580a5a381ab48a388aa673bdc229897c1f389b89ba2502ed2260d9a455b49fd51796adabc8") r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (rerun: 32) 13:01:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000001c0)=0x3, 0x12) write$binfmt_script(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000940) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f00000001c0)=0x3, 0x12) (async) write$binfmt_script(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000940) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) 13:01:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x11, 0x800000003, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) dup(r3) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000080)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES16=r1], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (async) 13:01:30 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) 13:01:31 executing program 5: setreuid(0x0, 0xee00) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) 13:01:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2c, 0x3, 0x0) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) (async) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:31 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) (async) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) 13:01:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000002080)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000280)=""/45, 0x2d}], 0x4, &(0x7f0000000300)=""/68, 0x44}, 0x5}, {{&(0x7f0000000440)=@l2tp6, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000005c0)=""/182, 0xb6}], 0x3, &(0x7f00000006c0)=""/127, 0x7f}, 0x6}, {{&(0x7f0000000740)=@caif=@util, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000880)=""/78, 0x4e}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/250, 0xfa}, {&(0x7f0000001a00)=""/76, 0x4c}, {&(0x7f0000001a80)=""/211, 0xd3}, {&(0x7f0000001b80)=""/159, 0x9f}, {&(0x7f0000001c40)=""/225, 0xe1}], 0x7}, 0x4}, {{&(0x7f0000001dc0)=@alg, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001e40)=""/136, 0x88}, {&(0x7f0000001f00)=""/66, 0x42}], 0x2}, 0x40}], 0x4, 0x80010140, &(0x7f00000020c0)={r4, r5+10000000}) r6 = socket(0x11, 0x800000003, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r7, &(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYRES16=r6], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xfffffffffffffd26, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 779.702127][ T5062] Bluetooth: hci0: command 0x0c3a tx timeout [ 779.708243][ T5046] Bluetooth: hci0: Opcode 0x c3a failed: -110 [ 779.933300][ T27] audit: type=1804 audit(1685278891.840:426): pid=23126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/590/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 780.252958][T23127] loop4: detected capacity change from 0 to 32768 [ 780.260828][T23127] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (23127) [ 780.278863][T23127] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 780.288801][T23127] BTRFS info (device loop4): turning on sync discard [ 780.295987][T23127] BTRFS info (device loop4): using free space tree [ 780.317934][T23127] BTRFS info (device loop4): enabling ssd optimizations [ 780.342442][T23127] FAULT_INJECTION: forcing a failure. [ 780.342442][T23127] name failslab, interval 1, probability 0, space 0, times 0 [ 780.381941][T23127] CPU: 0 PID: 23127 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 780.392443][T23127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 780.402554][T23127] Call Trace: [ 780.405887][T23127] [ 780.408863][T23127] dump_stack_lvl+0x136/0x150 [ 780.413630][T23127] should_fail_ex+0x4a3/0x5b0 [ 780.418400][T23127] should_failslab+0x9/0x20 [ 780.422975][T23127] kmem_cache_alloc+0x63/0x3b0 [ 780.427851][T23127] alloc_extent_state+0x23/0x2e0 [ 780.432869][T23127] __set_extent_bit+0x5ab/0x15f0 [ 780.437901][T23127] set_extent_bit+0x41/0x50 [ 780.442479][T23127] btrfs_alloc_tree_block+0xb50/0x1480 [ 780.448062][T23127] ? btrfs_alloc_logged_file_extent+0x600/0x600 [ 780.454410][T23127] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 780.460486][T23127] __btrfs_cow_block+0x3b2/0x1690 [ 780.465604][T23127] ? update_ref_for_cow+0xaa0/0xaa0 [ 780.470882][T23127] ? btrfs_qgroup_add_swapped_blocks+0x980/0x980 [ 780.477306][T23127] ? down_write_nested+0x153/0x200 [ 780.482489][T23127] ? down_read_killable_nested+0x4f0/0x4f0 [ 780.488381][T23127] btrfs_cow_block+0x2fa/0x820 [ 780.493236][T23127] btrfs_search_slot+0x11c6/0x2da0 [ 780.498441][T23127] ? balance_level+0x1f20/0x1f20 [ 780.503452][T23127] ? start_transaction+0x2aa/0x14c0 [ 780.508734][T23127] drop_verity_items+0x2a6/0x410 [ 780.513739][T23127] ? btrfs_zoned_activate_one_bg+0x460/0x460 [ 780.519786][T23127] ? down_write+0x14f/0x200 [ 780.524353][T23127] ? down_write_killable_nested+0x250/0x250 [ 780.530323][T23127] btrfs_begin_enable_verity+0x111/0x230 [ 780.536041][T23127] enable_verity+0x636/0x9d0 [ 780.540705][T23127] ? __mnt_want_write+0x3f/0x2e0 [ 780.545719][T23127] ? build_merkle_tree+0xc50/0xc50 [ 780.550900][T23127] ? trace_lock_acquire+0x12d/0x180 [ 780.556196][T23127] ? __mnt_want_write+0x1fe/0x2e0 [ 780.561298][T23127] fsverity_ioctl_enable+0x404/0x560 [ 780.566654][T23127] ? enable_verity+0x9d0/0x9d0 [ 780.571493][T23127] ? __kmem_cache_free+0xaf/0x2d0 [ 780.576546][T23127] btrfs_ioctl+0x2e84/0x5b30 [ 780.581209][T23127] ? tomoyo_path_number_perm+0x166/0x570 [ 780.586875][T23127] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 780.592702][T23127] ? find_held_lock+0x2d/0x110 [ 780.597488][T23127] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 780.603940][T23127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 780.609880][T23127] ? do_vfs_ioctl+0x132/0x1670 [ 780.614665][T23127] ? vfs_fileattr_set+0xc40/0xc40 [ 780.619719][T23127] ? trace_lock_acquire+0x12d/0x180 [ 780.624945][T23127] ? do_one_initcall+0x4e8/0x540 [ 780.629916][T23127] ? receive_fd+0x110/0x110 [ 780.634443][T23127] ? __fget_files+0x26a/0x480 [ 780.639149][T23127] ? bpf_lsm_file_ioctl+0x9/0x10 [ 780.644122][T23127] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 780.650575][T23127] __x64_sys_ioctl+0x197/0x210 [ 780.655364][T23127] do_syscall_64+0x39/0xb0 [ 780.659834][T23127] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 780.665766][T23127] RIP: 0033:0x7ffba488c169 [ 780.670200][T23127] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 780.690088][T23127] RSP: 002b:00007ffba55ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.698520][T23127] RAX: ffffffffffffffda RBX: 00007ffba49abf80 RCX: 00007ffba488c169 [ 780.706505][T23127] RDX: 0000000020000240 RSI: 0000000040806685 RDI: 0000000000000004 [ 780.714489][T23127] RBP: 00007ffba55ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 780.722482][T23127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:01:32 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 11) 13:01:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0xfffffdef) 13:01:32 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) dup(r0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7ff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}], &(0x7f0000000040)='GPL\x00', 0x3, 0x94, &(0x7f0000000080)=""/148, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0xf7, 0xa2}, 0x10}, 0x80) 13:01:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000002080)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000280)=""/45, 0x2d}], 0x4, &(0x7f0000000300)=""/68, 0x44}, 0x5}, {{&(0x7f0000000440)=@l2tp6, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000005c0)=""/182, 0xb6}], 0x3, &(0x7f00000006c0)=""/127, 0x7f}, 0x6}, {{&(0x7f0000000740)=@caif=@util, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000880)=""/78, 0x4e}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/250, 0xfa}, {&(0x7f0000001a00)=""/76, 0x4c}, {&(0x7f0000001a80)=""/211, 0xd3}, {&(0x7f0000001b80)=""/159, 0x9f}, {&(0x7f0000001c40)=""/225, 0xe1}], 0x7}, 0x4}, {{&(0x7f0000001dc0)=@alg, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001e40)=""/136, 0x88}, {&(0x7f0000001f00)=""/66, 0x42}], 0x2}, 0x40}], 0x4, 0x80010140, &(0x7f00000020c0)={r4, r5+10000000}) r6 = socket(0x11, 0x800000003, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r7, &(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYRES16=r6], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xfffffffffffffd26, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 780.730500][T23127] R13: 00007ffebbcc4d0f R14: 00007ffba55ef300 R15: 0000000000022000 [ 780.738522][T23127] [ 780.745211][T23127] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) 13:01:32 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) dup(r0) (async) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7ff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}], &(0x7f0000000040)='GPL\x00', 0x3, 0x94, &(0x7f0000000080)=""/148, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0xf7, 0xa2}, 0x10}, 0x80) 13:01:32 executing program 5: setreuid(0x0, 0xee00) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) dup(r0) (async, rerun: 64) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="7feb006f82b1ffc7db2a5300010000ffffffff185f8afb0000004f9eb7968c"], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7ff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}], &(0x7f0000000040)='GPL\x00', 0x3, 0x94, &(0x7f0000000080)=""/148, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0xf7, 0xa2}, 0x10}, 0x80) 13:01:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xfffffffffffffd26, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async, rerun: 64) r3 = socket(0x2c, 0x3, 0x0) (rerun: 64) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async, rerun: 32) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:33 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\'@-{\'.'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}], 0xa, "22fbf88b40a476625346749ad1fbe7358c5c7c0be540a6526f1bda9e07b8bbf5ca32a33af7eae71a5df090164ce3227e66f1fe07750f6cda2a19aacdca8ff459bef643f8f92faa8838e11fd93acefcc4417d349f482ebc04e40655b64f1b18f8ce3dc61546cc97e92b740b6cbb5b2fadf309f295d721d1c5d3a14f5ea4cbff44be80096fba7b87"}, 0xee) 13:01:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3a4ba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 781.507586][ T27] audit: type=1804 audit(1685278893.410:427): pid=23184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257151667/syzkaller.OiBioW/593/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 781.912242][T23194] loop4: detected capacity change from 0 to 32768 [ 781.920072][T23194] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (23194) [ 781.937304][T23194] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 781.946883][T23194] BTRFS info (device loop4): turning on sync discard [ 781.953705][T23194] BTRFS info (device loop4): using free space tree [ 781.978856][T23194] BTRFS info (device loop4): enabling ssd optimizations [ 782.005881][T23194] FAULT_INJECTION: forcing a failure. [ 782.005881][T23194] name failslab, interval 1, probability 0, space 0, times 0 [ 782.018832][T23194] CPU: 1 PID: 23194 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 782.028817][T23194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 782.038919][T23194] Call Trace: [ 782.042210][T23194] [ 782.045155][T23194] dump_stack_lvl+0x136/0x150 [ 782.049889][T23194] should_fail_ex+0x4a3/0x5b0 [ 782.054657][T23194] should_failslab+0x9/0x20 [ 782.059235][T23194] kmem_cache_alloc+0x63/0x3b0 [ 782.064094][T23194] btrfs_alloc_tree_block+0xbbb/0x1480 [ 782.069657][T23194] ? btrfs_alloc_logged_file_extent+0x600/0x600 [ 782.076018][T23194] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 782.082058][T23194] __btrfs_cow_block+0x3b2/0x1690 [ 782.087139][T23194] ? update_ref_for_cow+0xaa0/0xaa0 [ 782.092376][T23194] ? btrfs_qgroup_add_swapped_blocks+0x980/0x980 [ 782.098767][T23194] ? down_write_nested+0x153/0x200 [ 782.103918][T23194] ? down_read_killable_nested+0x4f0/0x4f0 [ 782.109771][T23194] btrfs_cow_block+0x2fa/0x820 [ 782.114584][T23194] btrfs_search_slot+0x11c6/0x2da0 [ 782.119752][T23194] ? balance_level+0x1f20/0x1f20 [ 782.124737][T23194] ? start_transaction+0x2aa/0x14c0 [ 782.130090][T23194] drop_verity_items+0x2a6/0x410 [ 782.135068][T23194] ? btrfs_zoned_activate_one_bg+0x460/0x460 [ 782.141092][T23194] ? down_write+0x14f/0x200 [ 782.145649][T23194] ? down_write_killable_nested+0x250/0x250 [ 782.151590][T23194] btrfs_begin_enable_verity+0x111/0x230 [ 782.157260][T23194] enable_verity+0x636/0x9d0 [ 782.161893][T23194] ? __mnt_want_write+0x3f/0x2e0 [ 782.166873][T23194] ? build_merkle_tree+0xc50/0xc50 [ 782.172034][T23194] ? trace_lock_acquire+0x12d/0x180 [ 782.177299][T23194] ? __mnt_want_write+0x1fe/0x2e0 [ 782.182375][T23194] fsverity_ioctl_enable+0x404/0x560 [ 782.187706][T23194] ? enable_verity+0x9d0/0x9d0 [ 782.192522][T23194] ? __kmem_cache_free+0xaf/0x2d0 [ 782.197576][T23194] btrfs_ioctl+0x2e84/0x5b30 [ 782.202211][T23194] ? tomoyo_path_number_perm+0x166/0x570 [ 782.207875][T23194] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 782.213714][T23194] ? find_held_lock+0x2d/0x110 [ 782.218514][T23194] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 782.224988][T23194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 782.230932][T23194] ? do_vfs_ioctl+0x132/0x1670 [ 782.235727][T23194] ? vfs_fileattr_set+0xc40/0xc40 [ 782.240801][T23194] ? trace_lock_acquire+0x12d/0x180 [ 782.246055][T23194] ? do_one_initcall+0x4e8/0x540 [ 782.251029][T23194] ? receive_fd+0x110/0x110 [ 782.255599][T23194] ? __fget_files+0x26a/0x480 [ 782.260331][T23194] ? bpf_lsm_file_ioctl+0x9/0x10 [ 782.265331][T23194] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 782.271814][T23194] __x64_sys_ioctl+0x197/0x210 [ 782.276641][T23194] do_syscall_64+0x39/0xb0 [ 782.281104][T23194] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 782.287045][T23194] RIP: 0033:0x7ffba488c169 [ 782.291485][T23194] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 782.311156][T23194] RSP: 002b:00007ffba55ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 782.319607][T23194] RAX: ffffffffffffffda RBX: 00007ffba49abf80 RCX: 00007ffba488c169 [ 782.327610][T23194] RDX: 0000000020000240 RSI: 0000000040806685 RDI: 0000000000000004 [ 782.335612][T23194] RBP: 00007ffba55ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 782.343659][T23194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 782.351650][T23194] R13: 00007ffebbcc4d0f R14: 00007ffba55ef300 R15: 0000000000022000 [ 782.359662][T23194] 13:01:34 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c0008a82a14418ffc43a9fd346f1fe0c7b977cf98b0dfc88a4b9517e8ae505c57e72a5f4fa252c84bc4046e39b9ef355ea5889d5d748aac8acde8eebe7e5f957dd1291aaf42b61e976d601f92a9f6b00fceafb260177050b5fcc4cb7f29ec97703dda9e6b2c47ab56e4938a58a533ad35b0975efaf21510afcfb69b3fe3725ce61f6070f7eeae6413c9b73641fb9dd0d02a6191121ec3ebadbe22267172243fd0b3b93eb62275c94fff18b91c867c0a49b8b8b845abeda479a54820b1951d7248fd1688764f98c65ec90bf95889b2c3dda57408e65053d5611a0cfbbbbbdca1807ef72f78c9500dfc36394f7bca"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 12) 13:01:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x138) 13:01:34 executing program 5: setreuid(0x0, 0xee00) (async, rerun: 32) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) (rerun: 32) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\'@-{\'.'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}], 0xa, "22fbf88b40a476625346749ad1fbe7358c5c7c0be540a6526f1bda9e07b8bbf5ca32a33af7eae71a5df090164ce3227e66f1fe07750f6cda2a19aacdca8ff459bef643f8f92faa8838e11fd93acefcc4417d349f482ebc04e40655b64f1b18f8ce3dc61546cc97e92b740b6cbb5b2fadf309f295d721d1c5d3a14f5ea4cbff44be80096fba7b87"}, 0xee) 13:01:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) clock_gettime(0x0, &(0x7f0000002080)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000280)=""/45, 0x2d}], 0x4, &(0x7f0000000300)=""/68, 0x44}, 0x5}, {{&(0x7f0000000440)=@l2tp6, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000005c0)=""/182, 0xb6}], 0x3, &(0x7f00000006c0)=""/127, 0x7f}, 0x6}, {{&(0x7f0000000740)=@caif=@util, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000880)=""/78, 0x4e}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/250, 0xfa}, {&(0x7f0000001a00)=""/76, 0x4c}, {&(0x7f0000001a80)=""/211, 0xd3}, {&(0x7f0000001b80)=""/159, 0x9f}, {&(0x7f0000001c40)=""/225, 0xe1}], 0x7}, 0x4}, {{&(0x7f0000001dc0)=@alg, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001e40)=""/136, 0x88}, {&(0x7f0000001f00)=""/66, 0x42}], 0x2}, 0x40}], 0x4, 0x80010140, &(0x7f00000020c0)={r4, r5+10000000}) (async) r6 = socket(0x11, 0x800000003, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r7, &(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYRES16=r6], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571) (async) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 13:01:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async, rerun: 32) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) (async) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3a4ba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async, rerun: 64) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 782.523327][ T5051] ------------[ cut here ]------------ [ 782.529610][ T5051] WARNING: CPU: 1 PID: 5051 at fs/btrfs/space-info.h:198 btrfs_block_rsv_release+0x671/0x810 [ 782.539976][ T5051] Modules linked in: [ 782.544040][ T5051] CPU: 1 PID: 5051 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 782.554006][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 782.564198][ T5051] RIP: 0010:btrfs_block_rsv_release+0x671/0x810 [ 782.570570][ T5051] Code: c1 ea 03 80 3c 02 00 0f 85 8f 01 00 00 4d 8b 6e 60 48 89 de 4c 89 ef e8 0d 73 fb fd 49 39 dd 0f 83 65 ff ff ff e8 3f 77 fb fd <0f> 0b 45 31 ed e9 5e ff ff ff e8 30 77 fb fd 49 8d 7e 18 be ff ff [ 782.591533][ T5051] RSP: 0018:ffffc900046bfb18 EFLAGS: 00010293 [ 782.598382][ T5051] RAX: 0000000000000000 RBX: 0000000000160000 RCX: 0000000000000000 [ 782.606930][ T5051] RDX: ffff8880286c5940 RSI: ffffffff8388ac71 RDI: 0000000000000006 [ 782.615437][ T5051] RBP: ffff888077174000 R08: 0000000000000006 R09: 000000000015f000 13:01:34 executing program 5: setreuid(0x0, 0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\'@-{\'.'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}], 0xa, "22fbf88b40a476625346749ad1fbe7358c5c7c0be540a6526f1bda9e07b8bbf5ca32a33af7eae71a5df090164ce3227e66f1fe07750f6cda2a19aacdca8ff459bef643f8f92faa8838e11fd93acefcc4417d349f482ebc04e40655b64f1b18f8ce3dc61546cc97e92b740b6cbb5b2fadf309f295d721d1c5d3a14f5ea4cbff44be80096fba7b87"}, 0xee) setreuid(0x0, 0xee00) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) (async) read$snddsp(r0, &(0x7f0000000240)=""/180, 0xb4) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\'@-{\'.'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}, {0x20, '/proc/keys\x00'}], 0xa, "22fbf88b40a476625346749ad1fbe7358c5c7c0be540a6526f1bda9e07b8bbf5ca32a33af7eae71a5df090164ce3227e66f1fe07750f6cda2a19aacdca8ff459bef643f8f92faa8838e11fd93acefcc4417d349f482ebc04e40655b64f1b18f8ce3dc61546cc97e92b740b6cbb5b2fadf309f295d721d1c5d3a14f5ea4cbff44be80096fba7b87"}, 0xee) (async) [ 782.623536][ T5051] R10: 0000000000160000 R11: 0000000000094001 R12: 0000000000160000 [ 782.631557][ T5051] R13: 000000000015f000 R14: ffff88809e344000 R15: 0000000000160000 [ 782.639691][ T5051] FS: 0000555557082400(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 782.648768][ T5051] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 782.655578][ T5051] CR2: 00007f7c42bfe718 CR3: 0000000087a46000 CR4: 00000000003526e0 [ 782.663942][ T5051] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 782.672049][ T5051] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 782.680073][ T5051] Call Trace: [ 782.684360][ T5051] [ 782.687348][ T5051] btrfs_release_global_block_rsv+0x26/0x2e0 [ 782.693712][ T5051] btrfs_free_block_groups+0xa0c/0x11d0 [ 782.699313][ T5051] ? free_root_pointers+0x6fe/0x980 [ 782.704721][ T5051] close_ctree+0x550/0xda0 [ 782.709201][ T5051] ? do_raw_spin_unlock+0x175/0x230 [ 782.714555][ T5051] ? btrfs_cleanup_transaction.isra.0+0x11a0/0x11a0 [ 782.721211][ T5051] ? collect_domain_accesses+0x910/0x910 [ 782.726987][ T5051] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 782.732879][ T5051] ? dispose_list+0x1e0/0x1e0 [ 782.737626][ T5051] ? btrfs_sync_fs+0x13a/0x730 [ 782.742519][ T5051] ? sync_blockdev+0x79/0x90 [ 782.747194][ T5051] ? fscrypt_destroy_keyring+0x1a/0x350 [ 782.752919][ T5051] ? btrfs_set_super+0x70/0x70 [ 782.757751][ T5051] generic_shutdown_super+0x158/0x480 [ 782.763305][ T5051] kill_anon_super+0x3a/0x60 [ 782.767966][ T5051] btrfs_kill_super+0x3c/0x50 [ 782.772759][ T5051] deactivate_locked_super+0x98/0x160 [ 782.778207][ T5051] deactivate_super+0xb1/0xd0 [ 782.783068][ T5051] cleanup_mnt+0x2ae/0x3d0 [ 782.788525][ T5051] task_work_run+0x16f/0x270 [ 782.793500][ T5051] ? task_work_cancel+0x30/0x30 [ 782.798401][ T5051] ? __x64_sys_umount+0x118/0x190 [ 782.803580][ T5051] exit_to_user_mode_prepare+0x210/0x240 [ 782.809276][ T5051] syscall_exit_to_user_mode+0x1d/0x50 [ 782.814923][ T5051] do_syscall_64+0x46/0xb0 [ 782.819418][ T5051] entry_SYSCALL_64_after_hwframe+0x63/0xcd 13:01:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xffffffff}, 0x10}, 0x80) (async) r1 = socket(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000001100)={&(0x7f0000003500)=ANY=[@ANYBLOB="2c000000130a01080000000100000000070000000c15000000000000000000030900020073797a32"], 0x2c}}, 0x4008004) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0xe0c}}, 0x840) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3a4ba52ee4080211000001505050505050"], 0x448}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0xd51, 0x6}, 0x10}, 0x80) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 13:01:34 executing program 5: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000300)={0x0, 0x9, 0x5, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000700)={0x0, 0x4, {0x8, @usage=0x7d, r0, 0x80, 0x10001, 0x7, 0x9, 0x0, 0x420, @struct={0x5, 0x6482}, 0x80, 0xb4, [0x8000000000000001, 0x2, 0x1ff, 0x1ff, 0xfff, 0x8]}, {0x220b, @struct={0x7fff, 0x4}, 0x0, 0x609, 0x4, 0x7fff, 0x4, 0x6, 0x9, @usage=0x101, 0x2, 0x7, [0x967, 0x10, 0x1, 0x5, 0x7, 0x8]}, {0x5, @usage=0x9, 0x0, 0x6, 0x10000, 0x4e, 0x7fff, 0x2, 0x410, @struct={0x1, 0x8001}, 0x3f, 0x7, [0x2, 0xffffffffffffffff, 0x2, 0x1f, 0x7fffffff, 0xff80000000000]}, {0x10000, 0x3, 0x7fffffff}}) setreuid(0x0, 0xee00) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) read$snddsp(r1, &(0x7f0000000240)=""/180, 0xb4) [ 782.825489][ T5051] RIP: 0033:0x7ffba488d5d7 [ 782.829961][ T5051] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 782.849754][ T5051] RSP: 002b:00007ffebbcc3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 782.858480][ T5051] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ffba488d5d7 [ 782.866669][ T5051] RDX: 00007ffebbcc3f39 RSI: 000000000000000a RDI: 00007ffebbcc3f30 [ 782.874799][ T5051] RBP: 00007ffebbcc3f30 R08: 00000000ffffffff R09: 00007ffebbcc3d00 [ 782.882979][ T5051] R10: 0000555557083873 R11: 0000000000000246 R12: 00007ffba48e6cdc [ 782.892201][ T5051] R13: 00007ffebbcc4ff0 R14: 0000555557083810 R15: 00007ffebbcc5030 [ 782.900252][ T5051] [ 782.904067][ T5051] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 782.911384][ T5051] CPU: 1 PID: 5051 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 782.921245][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 782.931337][ T5051] Call Trace: [ 782.934650][ T5051] [ 782.937619][ T5051] dump_stack_lvl+0xd9/0x150 [ 782.942280][ T5051] panic+0x686/0x730 [ 782.946242][ T5051] ? panic_smp_self_stop+0xa0/0xa0 [ 782.951413][ T5051] ? show_trace_log_lvl+0x285/0x390 [ 782.956726][ T5051] ? btrfs_block_rsv_release+0x671/0x810 [ 782.962450][ T5051] check_panic_on_warn+0xb1/0xc0 [ 782.967459][ T5051] __warn+0xf2/0x390 [ 782.971423][ T5051] ? btrfs_block_rsv_release+0x671/0x810 [ 782.977119][ T5051] report_bug+0x2da/0x500 [ 782.981518][ T5051] handle_bug+0x3c/0x70 [ 782.985719][ T5051] exc_invalid_op+0x18/0x50 [ 782.990272][ T5051] asm_exc_invalid_op+0x1a/0x20 [ 782.995193][ T5051] RIP: 0010:btrfs_block_rsv_release+0x671/0x810 [ 783.001501][ T5051] Code: c1 ea 03 80 3c 02 00 0f 85 8f 01 00 00 4d 8b 6e 60 48 89 de 4c 89 ef e8 0d 73 fb fd 49 39 dd 0f 83 65 ff ff ff e8 3f 77 fb fd <0f> 0b 45 31 ed e9 5e ff ff ff e8 30 77 fb fd 49 8d 7e 18 be ff ff 13:01:34 executing program 5: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000300)={0x0, 0x9, 0x5, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000700)={0x0, 0x4, {0x8, @usage=0x7d, r0, 0x80, 0x10001, 0x7, 0x9, 0x0, 0x420, @struct={0x5, 0x6482}, 0x80, 0xb4, [0x8000000000000001, 0x2, 0x1ff, 0x1ff, 0xfff, 0x8]}, {0x220b, @struct={0x7fff, 0x4}, 0x0, 0x609, 0x4, 0x7fff, 0x4, 0x6, 0x9, @usage=0x101, 0x2, 0x7, [0x967, 0x10, 0x1, 0x5, 0x7, 0x8]}, {0x5, @usage=0x9, 0x0, 0x6, 0x10000, 0x4e, 0x7fff, 0x2, 0x410, @struct={0x1, 0x8001}, 0x3f, 0x7, [0x2, 0xffffffffffffffff, 0x2, 0x1f, 0x7fffffff, 0xff80000000000]}, {0x10000, 0x3, 0x7fffffff}}) setreuid(0x0, 0xee00) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) (async) read$snddsp(r1, &(0x7f0000000240)=""/180, 0xb4) [ 783.021153][ T5051] RSP: 0018:ffffc900046bfb18 EFLAGS: 00010293 [ 783.027259][ T5051] RAX: 0000000000000000 RBX: 0000000000160000 RCX: 0000000000000000 [ 783.035275][ T5051] RDX: ffff8880286c5940 RSI: ffffffff8388ac71 RDI: 0000000000000006 [ 783.043293][ T5051] RBP: ffff888077174000 R08: 0000000000000006 R09: 000000000015f000 [ 783.051303][ T5051] R10: 0000000000160000 R11: 0000000000094001 R12: 0000000000160000 [ 783.059309][ T5051] R13: 000000000015f000 R14: ffff88809e344000 R15: 0000000000160000 [ 783.067325][ T5051] ? btrfs_block_rsv_release+0x671/0x810 [ 783.073008][ T5051] ? btrfs_block_rsv_release+0x671/0x810 [ 783.078684][ T5051] btrfs_release_global_block_rsv+0x26/0x2e0 [ 783.084706][ T5051] btrfs_free_block_groups+0xa0c/0x11d0 [ 783.090288][ T5051] ? free_root_pointers+0x6fe/0x980 [ 783.095523][ T5051] close_ctree+0x550/0xda0 [ 783.099984][ T5051] ? do_raw_spin_unlock+0x175/0x230 [ 783.105231][ T5051] ? btrfs_cleanup_transaction.isra.0+0x11a0/0x11a0 [ 783.111866][ T5051] ? collect_domain_accesses+0x910/0x910 [ 783.117544][ T5051] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 783.123302][ T5051] ? dispose_list+0x1e0/0x1e0 [ 783.128020][ T5051] ? btrfs_sync_fs+0x13a/0x730 [ 783.132817][ T5051] ? sync_blockdev+0x79/0x90 [ 783.137445][ T5051] ? fscrypt_destroy_keyring+0x1a/0x350 [ 783.143015][ T5051] ? btrfs_set_super+0x70/0x70 [ 783.147808][ T5051] generic_shutdown_super+0x158/0x480 [ 783.153228][ T5051] kill_anon_super+0x3a/0x60 [ 783.157853][ T5051] btrfs_kill_super+0x3c/0x50 [ 783.162557][ T5051] deactivate_locked_super+0x98/0x160 [ 783.167964][ T5051] deactivate_super+0xb1/0xd0 [ 783.172679][ T5051] cleanup_mnt+0x2ae/0x3d0 [ 783.177133][ T5051] task_work_run+0x16f/0x270 [ 783.181751][ T5051] ? task_work_cancel+0x30/0x30 [ 783.186633][ T5051] ? __x64_sys_umount+0x118/0x190 [ 783.191702][ T5051] exit_to_user_mode_prepare+0x210/0x240 [ 783.197365][ T5051] syscall_exit_to_user_mode+0x1d/0x50 [ 783.202859][ T5051] do_syscall_64+0x46/0xb0 [ 783.207331][ T5051] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 783.213265][ T5051] RIP: 0033:0x7ffba488d5d7 [ 783.217706][ T5051] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 783.237338][ T5051] RSP: 002b:00007ffebbcc3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 783.245783][ T5051] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ffba488d5d7 [ 783.253779][ T5051] RDX: 00007ffebbcc3f39 RSI: 000000000000000a RDI: 00007ffebbcc3f30 [ 783.261771][ T5051] RBP: 00007ffebbcc3f30 R08: 00000000ffffffff R09: 00007ffebbcc3d00 [ 783.269771][ T5051] R10: 0000555557083873 R11: 0000000000000246 R12: 00007ffba48e6cdc [ 783.277776][ T5051] R13: 00007ffebbcc4ff0 R14: 0000555557083810 R15: 00007ffebbcc5030 [ 783.285789][ T5051] [ 783.289306][ T5051] Kernel Offset: disabled [ 783.293987][ T5051] Rebooting in 86400 seconds..