Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:13374' (ECDSA) to the list of known hosts. 2022/10/03 00:56:09 fuzzer started 2022/10/03 00:56:09 dialing manager at localhost:35095 syzkaller login: [ 36.123278] cgroup: Unknown subsys name 'net' [ 36.220419] cgroup: Unknown subsys name 'rlimit' 2022/10/03 00:56:24 syscalls: 2215 2022/10/03 00:56:24 code coverage: enabled 2022/10/03 00:56:24 comparison tracing: enabled 2022/10/03 00:56:24 extra coverage: enabled 2022/10/03 00:56:24 setuid sandbox: enabled 2022/10/03 00:56:24 namespace sandbox: enabled 2022/10/03 00:56:24 Android sandbox: enabled 2022/10/03 00:56:24 fault injection: enabled 2022/10/03 00:56:24 leak checking: enabled 2022/10/03 00:56:24 net packet injection: enabled 2022/10/03 00:56:24 net device setup: enabled 2022/10/03 00:56:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 00:56:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 00:56:24 USB emulation: enabled 2022/10/03 00:56:24 hci packet injection: enabled 2022/10/03 00:56:24 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 00:56:24 802.15.4 emulation: enabled 2022/10/03 00:56:24 fetching corpus: 50, signal 19492/21371 (executing program) 2022/10/03 00:56:24 fetching corpus: 100, signal 28793/32429 (executing program) 2022/10/03 00:56:25 fetching corpus: 150, signal 38830/44062 (executing program) 2022/10/03 00:56:25 fetching corpus: 200, signal 48820/55499 (executing program) 2022/10/03 00:56:25 fetching corpus: 250, signal 55638/63753 (executing program) 2022/10/03 00:56:25 fetching corpus: 300, signal 60892/70423 (executing program) 2022/10/03 00:56:25 fetching corpus: 350, signal 64506/75483 (executing program) 2022/10/03 00:56:25 fetching corpus: 400, signal 70429/82622 (executing program) 2022/10/03 00:56:25 fetching corpus: 450, signal 72259/85863 (executing program) 2022/10/03 00:56:25 fetching corpus: 500, signal 74002/89021 (executing program) 2022/10/03 00:56:26 fetching corpus: 550, signal 77713/93957 (executing program) 2022/10/03 00:56:26 fetching corpus: 600, signal 80581/98067 (executing program) 2022/10/03 00:56:26 fetching corpus: 650, signal 84235/102842 (executing program) 2022/10/03 00:56:26 fetching corpus: 700, signal 86426/106249 (executing program) 2022/10/03 00:56:26 fetching corpus: 750, signal 87934/109009 (executing program) 2022/10/03 00:56:26 fetching corpus: 800, signal 91392/113472 (executing program) 2022/10/03 00:56:26 fetching corpus: 850, signal 93341/116565 (executing program) 2022/10/03 00:56:26 fetching corpus: 900, signal 95471/119797 (executing program) 2022/10/03 00:56:26 fetching corpus: 950, signal 97432/122842 (executing program) 2022/10/03 00:56:26 fetching corpus: 1000, signal 100583/126881 (executing program) 2022/10/03 00:56:27 fetching corpus: 1050, signal 103904/131000 (executing program) 2022/10/03 00:56:27 fetching corpus: 1100, signal 108170/135881 (executing program) 2022/10/03 00:56:27 fetching corpus: 1150, signal 111549/139960 (executing program) 2022/10/03 00:56:27 fetching corpus: 1200, signal 112604/142128 (executing program) 2022/10/03 00:56:27 fetching corpus: 1250, signal 113891/144443 (executing program) 2022/10/03 00:56:27 fetching corpus: 1300, signal 115429/146893 (executing program) 2022/10/03 00:56:27 fetching corpus: 1350, signal 117360/149713 (executing program) 2022/10/03 00:56:28 fetching corpus: 1400, signal 119896/152952 (executing program) 2022/10/03 00:56:28 fetching corpus: 1450, signal 120802/154886 (executing program) 2022/10/03 00:56:28 fetching corpus: 1500, signal 121867/156913 (executing program) 2022/10/03 00:56:28 fetching corpus: 1550, signal 124119/159820 (executing program) 2022/10/03 00:56:28 fetching corpus: 1600, signal 125120/161744 (executing program) 2022/10/03 00:56:28 fetching corpus: 1650, signal 125996/163517 (executing program) 2022/10/03 00:56:28 fetching corpus: 1700, signal 127181/165553 (executing program) 2022/10/03 00:56:28 fetching corpus: 1750, signal 128955/168034 (executing program) 2022/10/03 00:56:28 fetching corpus: 1800, signal 130764/170492 (executing program) 2022/10/03 00:56:28 fetching corpus: 1850, signal 132212/172666 (executing program) 2022/10/03 00:56:29 fetching corpus: 1900, signal 135073/175925 (executing program) 2022/10/03 00:56:29 fetching corpus: 1950, signal 136146/177767 (executing program) 2022/10/03 00:56:29 fetching corpus: 2000, signal 137316/179673 (executing program) 2022/10/03 00:56:29 fetching corpus: 2050, signal 138193/181330 (executing program) 2022/10/03 00:56:29 fetching corpus: 2100, signal 138961/182959 (executing program) 2022/10/03 00:56:29 fetching corpus: 2150, signal 139920/184687 (executing program) 2022/10/03 00:56:29 fetching corpus: 2200, signal 141567/186855 (executing program) 2022/10/03 00:56:29 fetching corpus: 2250, signal 143560/189258 (executing program) 2022/10/03 00:56:30 fetching corpus: 2300, signal 145667/191723 (executing program) 2022/10/03 00:56:30 fetching corpus: 2350, signal 146916/193569 (executing program) 2022/10/03 00:56:30 fetching corpus: 2400, signal 147901/195227 (executing program) 2022/10/03 00:56:30 fetching corpus: 2450, signal 149816/197440 (executing program) 2022/10/03 00:56:30 fetching corpus: 2500, signal 150177/198732 (executing program) 2022/10/03 00:56:30 fetching corpus: 2550, signal 151495/200488 (executing program) 2022/10/03 00:56:30 fetching corpus: 2600, signal 152054/201887 (executing program) 2022/10/03 00:56:30 fetching corpus: 2650, signal 152962/203460 (executing program) 2022/10/03 00:56:30 fetching corpus: 2700, signal 153647/204905 (executing program) 2022/10/03 00:56:31 fetching corpus: 2750, signal 154659/206612 (executing program) 2022/10/03 00:56:31 fetching corpus: 2800, signal 155398/208058 (executing program) 2022/10/03 00:56:31 fetching corpus: 2850, signal 155991/209319 (executing program) 2022/10/03 00:56:31 fetching corpus: 2900, signal 157407/211086 (executing program) 2022/10/03 00:56:31 fetching corpus: 2950, signal 158352/212553 (executing program) 2022/10/03 00:56:31 fetching corpus: 3000, signal 159333/214086 (executing program) 2022/10/03 00:56:31 fetching corpus: 3050, signal 160708/215884 (executing program) 2022/10/03 00:56:32 fetching corpus: 3100, signal 161485/217214 (executing program) 2022/10/03 00:56:32 fetching corpus: 3150, signal 162703/218815 (executing program) 2022/10/03 00:56:32 fetching corpus: 3200, signal 163846/220306 (executing program) 2022/10/03 00:56:32 fetching corpus: 3250, signal 164863/221729 (executing program) 2022/10/03 00:56:32 fetching corpus: 3300, signal 166012/223227 (executing program) 2022/10/03 00:56:32 fetching corpus: 3350, signal 167160/224719 (executing program) 2022/10/03 00:56:32 fetching corpus: 3400, signal 167610/225805 (executing program) 2022/10/03 00:56:32 fetching corpus: 3450, signal 169123/227407 (executing program) 2022/10/03 00:56:33 fetching corpus: 3500, signal 170425/228889 (executing program) 2022/10/03 00:56:33 fetching corpus: 3550, signal 171283/230186 (executing program) 2022/10/03 00:56:33 fetching corpus: 3600, signal 172051/231350 (executing program) 2022/10/03 00:56:33 fetching corpus: 3650, signal 173457/232910 (executing program) 2022/10/03 00:56:33 fetching corpus: 3700, signal 174228/234144 (executing program) 2022/10/03 00:56:33 fetching corpus: 3750, signal 175476/235580 (executing program) 2022/10/03 00:56:33 fetching corpus: 3800, signal 176067/236628 (executing program) 2022/10/03 00:56:33 fetching corpus: 3850, signal 177030/237900 (executing program) 2022/10/03 00:56:34 fetching corpus: 3900, signal 178041/239146 (executing program) 2022/10/03 00:56:34 fetching corpus: 3950, signal 178666/240235 (executing program) 2022/10/03 00:56:34 fetching corpus: 4000, signal 179478/241350 (executing program) 2022/10/03 00:56:34 fetching corpus: 4050, signal 180553/242616 (executing program) 2022/10/03 00:56:34 fetching corpus: 4100, signal 181366/243738 (executing program) 2022/10/03 00:56:34 fetching corpus: 4150, signal 181820/244741 (executing program) 2022/10/03 00:56:34 fetching corpus: 4200, signal 182751/245890 (executing program) 2022/10/03 00:56:34 fetching corpus: 4250, signal 183456/246975 (executing program) 2022/10/03 00:56:35 fetching corpus: 4300, signal 184131/248038 (executing program) 2022/10/03 00:56:35 fetching corpus: 4350, signal 184660/249023 (executing program) 2022/10/03 00:56:35 fetching corpus: 4400, signal 185457/250094 (executing program) 2022/10/03 00:56:35 fetching corpus: 4450, signal 186278/251141 (executing program) 2022/10/03 00:56:35 fetching corpus: 4500, signal 187277/252231 (executing program) 2022/10/03 00:56:35 fetching corpus: 4550, signal 187983/253267 (executing program) 2022/10/03 00:56:35 fetching corpus: 4600, signal 189486/254588 (executing program) 2022/10/03 00:56:35 fetching corpus: 4650, signal 190159/255512 (executing program) 2022/10/03 00:56:36 fetching corpus: 4700, signal 190678/256442 (executing program) 2022/10/03 00:56:36 fetching corpus: 4750, signal 191244/257331 (executing program) 2022/10/03 00:56:36 fetching corpus: 4800, signal 191724/258145 (executing program) 2022/10/03 00:56:36 fetching corpus: 4850, signal 192185/258994 (executing program) 2022/10/03 00:56:36 fetching corpus: 4900, signal 193133/260085 (executing program) 2022/10/03 00:56:36 fetching corpus: 4950, signal 193879/260946 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/261923 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/262596 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/263279 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/263932 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/264642 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/265343 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/266022 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/266669 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/267321 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/268017 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/268703 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/269413 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/270070 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/270705 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/271353 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/272022 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/272694 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/273344 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/274027 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/274675 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/275342 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/275998 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/276612 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/277260 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/277944 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/278617 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/279294 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/279958 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/280657 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/281318 (executing program) 2022/10/03 00:56:36 fetching corpus: 4997, signal 194783/281996 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/282617 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/283297 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/284005 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/284665 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/285307 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/285974 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/286653 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/287337 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/288005 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/288637 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/289314 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/289987 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/290649 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/291355 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/291458 (executing program) 2022/10/03 00:56:37 fetching corpus: 4997, signal 194783/291458 (executing program) 2022/10/03 00:56:39 starting 8 fuzzer processes 00:56:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}}, 0x44c40) r3 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x2100, 0x110, 0x1}, 0x18) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x68}}, 0x20000095) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4020}, 0x44) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x5d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8070}, 0x20044000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r8, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x19}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24044840) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r9, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20024091}, 0x4008802) pwritev(r3, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="39ee98835935d44dc169e42f3f7c261b2281c372d7fac943d27479f497e6d4efdcdad6bdbe3c461659d8265edc93a065cd27469776ac1e50d079b3f1e4386fbcdf88374ae2afe4885a3df87732969ed8bdc471f53993c0fcea3ecb179763546f9c3e000d9932206c48c7b85c31c6", 0x6e}, {&(0x7f0000000b40)="3bf29ee805fd15b44179b486fc8e22856d8ff8d2e559d07bba3039a216338f85e57f159c1a670d46573ef7c7ba88", 0x2e}, {&(0x7f0000000b80)="d8af37fd8003c6f33bc3cb804559a4c8269742d6d4e8420d83ddee87b027022374372ef7fcc25e", 0x27}, {&(0x7f0000000bc0)="dcd798957a3bc1f5ccbdbbb159fc13c95b9feb4cb2a46d0d2de11a2492315b21ffe0392bdc64d7237a06ad2c869d9ec2bdfd92757e6e9a85b817546d444b2376bca2671a863fcd4e754774ca2fa055", 0x4f}], 0x4, 0x1000, 0x6) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r9, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 00:56:39 executing program 1: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000000)={0x0, 0x81}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001000)={0x0, 0x8, 0x401, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001400)={0x1, 0x5, {0x7f, @struct={0x7ff, 0xfffffffe}, r0, 0x5, 0x7f, 0x3f, 0x9, 0x204, 0x2, @usage, 0x9, 0xfffffffb, [0x10001, 0x6, 0x8, 0x0, 0x10001, 0x8]}, {0x6, @usage=0x9, 0x0, 0x3, 0x4, 0x2, 0x6, 0x2, 0x400, @usage=0x1, 0x101, 0x40, [0x20, 0x2, 0x9, 0x371, 0x9, 0x8]}, {0x93ba, @struct={0x6, 0xcf}, 0x0, 0x7, 0xad6, 0x200, 0x8, 0x7ff, 0x865, @usage=0x99f, 0xfffff75f, 0x8, [0xffffffffffffff41, 0x931, 0x7, 0x5, 0x47a, 0x1]}, {0x1ff, 0x42552a66, 0x8ee}}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a80)={&(0x7f0000001840)={0x234, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xed}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x57d3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff617}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fdf7d35}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf3f2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff97db}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0xa393d7ef16ffde8e}, 0x20000010) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000001b00)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001b40), 0x18000, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000001c00), 0x3a24, 0x400000) mount$9p_fd(0x0, &(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0), 0x12, &(0x7f0000001c40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}, {@uname={'uname', 0x3d, 'udp\x00'}}, {}, {@cachetag={'cachetag', 0x3d, '\x00'}}], [{@subj_user}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r1, {0x5}}, './file1\x00'}) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000001d40)=0x80000000) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000001d80)) r4 = fsopen(&(0x7f0000001dc0)='xfs\x00', 0x1) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000001e00)={{r4}, 0x1, 0x8001, 0x8}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001e40)={{0x1, 0x1, 0x18, r4, @out_args}, './file2\x00'}) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000002100)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000001ec0)={0x1d8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffc, @mcast1, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @local, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8fa, @remote, 0x9}}}}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7836}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4005}, 0x4000040) inotify_add_watch(r3, &(0x7f0000002140)='./file0\x00', 0x400) r6 = accept4(r5, 0x0, &(0x7f0000002180), 0x800) sendmsg$nl_netfilter(r6, &(0x7f0000002480)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002440)={&(0x7f0000002200)={0x208, 0x4, 0xb, 0x101, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x8}, [@generic="5dc0887907e96f2e5658a4f14eb1e6aa5edf6c8ac8832dc6472b42ce50f886b99c55bb1b3d81a787498eb12cc3ac7ae8cef83547b3eec572a95bd5e03574026c81c8abe606c7ef7f3a7bba2b047385ce652cd885e9b81bfaf5a3224fd8d515d276d5b6c240e15f6d44a0c6de865cbddd1ca355a3b2d73b77b734363653051de771d8ec01a6d24cb826b89c31649efffd1e37973e9cfafa492041d1fff2022d452c4ab7e37f8645a1c55bece6c9b814297362e6fcc4c3641fd8d49a0c929dbfa49376da7d6de8ebc57d4ddd9c7c92f61226", @nested={0x87, 0x8a, 0x0, 0x1, [@generic="d73e6ef63d5b683aa456a23ff5de7052d3ff0c8c41563d56af6d928df3b56b7d562815f7e348e5ad89edc68dfebfb7b01350de4cfe38fdaba186594b37945d8cebf703c671f6c80f7ba953c61b3c09ef2a36d29cf245259c721cc530b128bda54660ea229b564951be1ab1759871300ffe4b02383fde2d5f66424c5d36f0f3103316c8"]}, @generic="0d979ba94d4ae4d9439fdc3793e1b185278f7f7335afe1026f6afff467adb906f2f8149fa5720265c0c70a69017e16ec9a60085bacefcac4b7110dee1b4d0f1609d88bc3bc0d90a01ce211e03e1a64f15a802bc1063f178cb966285e065dbc920a11bf3af03f35325ff99dd9ea74eeb683f839c5b6505444cc090fb3da3583bb2527c7908d4c3ba9c46fbd6980f1cc09ad17c3f7773ee5db7f1978"]}, 0x208}, 0x1, 0x0, 0x0, 0x40040}, 0x8810) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000024c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x1) 00:56:39 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xa2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="4864212d8a02"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x48814}, 0x5) r2 = dup(r0) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x4a0041, 0xd1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$setflags(r4, 0x2, 0x0) r5 = socket(0x9, 0x800, 0xc65) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="fdbc87ed2ce9ae95ed9213e2c75bba8ca0e96ae00a579bd1d52e92be3245792cc57e83897caa20bde16fae34a2e58f36821537d04346a1a63f73135074d86de2a6239196d12a13a63cabb4d50589e101a02d737a89a2a54ce2378f1cc50419841abc23f7888c23fa10041a65ab925dedde057d016bd61693b8211bd65f7438bcfa6bc426035bb5afdd86c7b68d6aa3598a8a61546e07ffbcf4d066a707ae70617e54e5fb7b38c944", 0xa8}, {&(0x7f0000000300)="1d6cf581b415f8b6ea049cdcfb565741a0dcbd1d1ca7b0b769798085fad1c6e2747f8adaad93969de76c3f74a48a6645682cdcfc49a65124a2d0e0749318f6d1d5cdaeeb786f7a226f42af5d6e2f18b2b032961595e11951b9e64d8455fb5701ad59aba40d6bb02c51ca0403d7b354ee836349f811db1abd4e36ce07453af580cd48790635fba5b698c130c5bf3e161dd989cfed76998d769818d91e47368a7f127143ef4c4f909ba659da95051a7ed9d42af562517ba214bfb77de050176cdf34ad1858e8d4c9f8e7da805510df53672cdb3528969e5f6cebe3cc7636a184952873", 0xe2}, {&(0x7f0000000400)="fa7aa392f1f000541f0c6413dd90a3eab46b247138f7fba81eed2f2ee1b7b11898c5702d5f9c665346061b056f72f39cd21b3b5138f16f51ab0f481324aa53add83a16d83db9", 0x46}, {&(0x7f0000000480)="21aa1b1d312171c92ad8f67bd809c1fa910c5e98e6e469880b5d34cde00902666fc0a488f9defabd589930e8998bb02471fb849b977c", 0x36}, {&(0x7f00000004c0)="bf0cee27e0c385ed51aad6f7d2183d6c53090b06ff75f8666942aafcfa1dc524dbb0b15c6a11375b138c7462e806ad9563f20e2f0987c75f72", 0x39}, {&(0x7f0000000500)="6badfb73b1b421ce0b62cb4f", 0xc}], 0x6, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}}], 0x1, 0x40000) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000640)=""/4096) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000001640)={0x0, @aes128, 0x0, @desc1}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001680), 0x400200, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x38, 0x0, 0x8, 0x3bbe, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) write(r6, &(0x7f00000017c0)="7f47fd7a95fd916139130c094863be6e07d86c9624b1a2498c2c9a09aef3f274439ecdc495e1076511d841", 0x2b) openat(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x4002, 0x8) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001880)={0x13c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x61, 0x659e, 0xd33]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xbf39}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xfffffff8, 0x6, 0x3]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x68b9}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x26}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x688}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ce}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x19}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1, 0x400000, 0x1, 0x5, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x5, 0x5, 0x10000, 0x3ff]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x42e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x80000) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000001a40)={0x86f2, 0x100, 0x7, 0x400, 0x1, 0x4}) writev(r4, &(0x7f0000001d00)=[{&(0x7f0000001a80)="cc2484e7c8005f48d12bd4efcc14648908d7f70091e9e27f29beceb0d45c17c256ac6b09408e031e990fcfce492d4fd30654fba870c565ce3cb4a48a2ab14ccaa17ff4", 0x43}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)="f4b8ceb3d50e2427bc743f63f1", 0xd}, {&(0x7f0000001b80)="29c0e58fe094f41056dcad855cfd213d16b087b3f955e41756d7e6020586b4a548a53b0b06da37d816a1c74db0cc06dadbceb0", 0x33}, {&(0x7f0000001bc0)="7ffceb646d49bf917429a582d836389c6c64f66709d58290796bac409a5551e0ad288fdd6500e83f21432723371e880556ac7dea5ddb3c926f6858fce78e4d3493b16c63a29c946da53142a848bc5091955aa3c860e0662c2f121e42803e62522a20052d17b0846555f0509cfaa5c4de21c144aec450fa181dc2407ea0657d831303596b80a82aff91570c2b488e523b1092f73019cc344aaa3b5811d8e41ce5571169613333ecce1a3f36c60ec76ce13b95966fc76691a58efcd71a195d151c0587f07b93d5680a1c7ad371470bc9160074a0f1f6d4ca7eb13eaf0ab4c86738672894d5df04a7ca", 0xe8}, {&(0x7f0000001cc0)="e548d9f59f71cbb3bd53e912d333", 0xe}], 0x6) getsockname$inet(r2, &(0x7f0000001d80)={0x2, 0x0, @loopback}, &(0x7f0000001dc0)=0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000001e40)={0xb1b, 0x1}) 00:56:39 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x7fff, 0x5, 0x2, 0x3}) r3 = fsopen(&(0x7f0000000340)='hostfs\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, @in_args={0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000400)) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0xa2080, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000480)) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000004c0)=0x1, &(0x7f0000000500)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x3, 0x2, 0x5, 0x1, 0x0, 0xa1c5, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x355f, 0xff}, 0x10121, 0x5, 0x1, 0x6, 0x10000, 0xadf, 0x80, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r8, 0x1) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000740)) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'trusted.', '/dev/bsg\x00'}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x4000, 0x0) fcntl$F_SET_RW_HINT(r9, 0x40c, &(0x7f0000000840)=0x2) [ 66.274704] audit: type=1400 audit(1664758599.738:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:56:39 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvfrom$inet6(r1, &(0x7f0000000040)=""/254, 0xfe, 0x40000140, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0xe3, "81169abd74fbf8dc6c36e23a7d0c2caf55ace674c925ef0de52d47e20bb38b879249b91456e9b832590b28f857de3cde56e94030a6f4db30bc55298796724fe97b02e7afb7a15913453c84ca132abd216444ddb32ace71969c8c70419474502f39ab16e721ba1218f59d8c9100225a4119f13ca9f061d6b826b1c1ff795b6532cfaafe37933401862eb3c450b73c0dc657c812ea6e455bd1609a971195bac28a9deac026824b79c894e73ad7e9f11d2391f3364f0fb64fc30f9dd45f9830bef1bcd4a0c59bd7e099ac425f23f3d3f7df30e9a94ac79f8b3aaf4877c5b9954e5147e3b6"}, &(0x7f00000002c0)=0x107) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20008084) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r1) accept$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r3, 0x182, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_mount_image$nfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x9, 0x7, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="cc71b031975213aa732a51d84db0023fd1ed19c4b8e71f695767ded72580d4e98d9011bd3a87774b84b775b8462269a0af78f92389c09eed0d91bbba4d8ac1b65b48bd6926ebceec91b9304566b7906c209ac36b81ec947a9ade9f0fc87124b6a8bf1ccd0f8cd683a3d59a329b0417706137ce5b0f4d7cd094fa278ba92668be57b9a8be486b9728aa8a9f999258f19499066704790d064e4e0b7573510bc91fd6bb49978e6fe6c9e4dfaa58d474471b216da292d25771ce89c15e5ccb", 0xbd, 0xffffffff}, {&(0x7f0000000780)="78a7ecca16ddadceb2c33cd4fb71d4dba504421eed5c759d5a111bee5550d219229a60394619bfd9f07fc39c4b81f59f4a07d2a9bd1889bbf7af741570ac715ba4356f8349b687c0c59990c451e01a409cdb4afe650121c476bbd4203f60a76ee876d21bafa289d2cc3e0706ab70ace8d81f42c92a8c1873595d345fb7d85ee7405afad45cbc571c127af8f049851fe2", 0x90, 0x5}, {&(0x7f0000000840)="a925964893f004479b02d1e917cfa782756dc9c9eba7c68e78f61bcc8e5ef1bf5151a010310676c7551a741526bc5a2e8064e5973fc9facfc002587c84ba74ef816d5fa8afdb6d232a82f5e178a69fb5fb00fdb411801b59bb290332bc6f8676edf7420c2693afdefdf790c658155b3df3b3a4bc35884910949aa933401feb052e3dfb09dc092bc4f85b3fe219e388e401ffc52b79", 0x95, 0x4}, {&(0x7f0000000900)="c4702ecfdbd803e03b7d6649d4c634ad08c3ca510d52d441cd8d03ed85146dc51e7e531793c08cceaad11b9c", 0x2c, 0x8}, {&(0x7f0000000940)="4b9e25a1868808975cc083a8f557f44ebb1fa44b66f608146ba503331a4ab4112330b7afdc24fc71b6f97fe3090319bd5efdd9deeca821e0d7338c1aeef746321997e8f7846157a8ec67045939c7eff427565efb59daa8e14d05c47ad24247a41429f2001909548f37654227", 0x6c, 0x44}, {&(0x7f00000009c0), 0x0, 0x4}, {&(0x7f0000000a00)="11acca202c7fee8efa6c1b5c5ab7a51cd381876e10dab2a9bcd1df8fa7303eccd9ccef0a8a8d5d5879db82a3fc5bce8c8aeee3be82a5b20b5d65f4d1b4a7bd4534d2dab143f6c3d60171e08238cb47a94a578c3493ad20d6807411601e364426ced71c44a216f7f97083cd50bebba350f60b648f988b0b441607f6b194652c0138dcfb2b22ca57fd61ca1ba6f741b4807de5a34f", 0x94, 0x6}], 0x4000c, &(0x7f0000000b80)={[{'.'}, {'^&\x1b'}, {'\'+*\'!'}, {}], [{@euid_eq={'euid', 0x3d, 0xee00}}]}) r7 = openat2(r1, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x101400, 0x4d, 0x4}, 0x18) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r0, r7, r0, r0]}, 0x7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x4c, r8, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x45}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44080}, 0x8000) recvmsg$unix(r1, &(0x7f0000002240)={&(0x7f0000000e40)=@abs, 0x6e, &(0x7f0000002140)=[{&(0x7f0000000ec0)=""/235, 0xeb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/192, 0xc0}, {&(0x7f0000002080)=""/28, 0x1c}, {&(0x7f00000020c0)=""/69, 0x45}], 0x5, &(0x7f00000021c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x2000) r10 = syz_genetlink_get_family_id$team(&(0x7f00000022c0), r1) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000002780)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002300)={0x43c, r10, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x61}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x7, 0x80, 0x2}, {0xff, 0x3, 0x36, 0x9}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x845}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x43c}}, 0x41) syz_genetlink_get_family_id$batadv(&(0x7f00000027c0), r0) socket$nl_generic(0x10, 0x3, 0x10) 00:56:39 executing program 5: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000000)={{0x70, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x0, 'lblc\x00', 0x6, 0x1, 0x65}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2000, 0x98, 0x714, 0xd9c}}, 0x44) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000080)={0x1, 0xf2, "e63f58570cd6ed629124d8bd29f0431017ae22fc46df02aaba0fdea3de81b93460277ced68218510660713904c5b564182c99d5649fca2d63ff250ae45e12860efabdcc9e1b10c4f8657592224a3d1989058b6a7a999a564fee432e320cbe1142e6ce7dfede191e1b37f01873a0285d4de3a3f4f9d8c3ef685d5b5bfea40f9e0302891ab16fc456fbd62907ce6f484394ae0fa7e78a554fe4d758816f3c865e93eca7cc1ab87a8a894de1be7438189eae61ef94b559b67fb9de8758ccd27f6df91a4389d80f2d69fce13b1d505118489d50a1f12f377f5764fcb246ee6fc7e05ccd0ccd2a6db65250d0a49a0d0661dcbbea7"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/firmware/dmi', 0x2000, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000200)={0x2, 'batadv_slave_1\x00', {0x80000001}, 0x7}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000240)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/193, 0xc1}, {&(0x7f00000004c0)=""/103, 0x67}], 0x3, &(0x7f0000000580)=""/82, 0x52}, 0x40006003) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000dc0)={&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)=""/127, 0x7f}, {&(0x7f0000000780)=""/53, 0x35}, {&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000840)=""/169, 0xa9}, {&(0x7f0000000900)=""/250, 0xfa}, {&(0x7f0000000a00)=""/92, 0x5c}, {&(0x7f0000000a80)=""/112, 0x70}, {&(0x7f0000000b00)=""/105, 0x69}, {&(0x7f0000000b80)=""/108, 0x6c}], 0x9, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x40012160) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x20, 0x0, 0x7fff, 0x0, 0x1, {0x0, r5}}, 0x3) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/module/devres', 0x52000, 0x20) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000e80)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_setup(0x4262, &(0x7f0000000ec0)={0x0, 0x4831, 0x10, 0x3, 0x35d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000f40), &(0x7f0000000f80)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000fc0)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x1, 0x9, 0x0, 0x8, 0x0, 0x1, {0x0, r5}}, 0x1) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001000), 0x40, 0x0) openat(r8, &(0x7f0000001040)='./file0\x00', 0x200, 0x83) 00:56:39 executing program 7: sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x4f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8090, 0x40, 0x6, 0x659fca85, {{0x1e, 0x4, 0x2, 0x23, 0x78, 0x64, 0x0, 0x1f, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2d}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xc3, 0x1, 0x6, [{@empty, 0x1}, {@empty, 0x8}, {@multicast2, 0x4}]}, @rr={0x7, 0x7, 0xae, [@broadcast]}, @ssrr={0x89, 0x17, 0xac, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}, @loopback, @remote, @empty]}, @generic={0x83, 0x9, "3c2571d6772b8a"}, @timestamp={0x44, 0x18, 0x5e, 0x0, 0x2, [0x5, 0x7fff, 0x46, 0xfffffffa, 0xd87]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x257dee5aecfb5721}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000680)={'syztnl1\x00', r1, 0x20, 0x20, 0x6, 0x9, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x234, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x218, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x599da0d7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9e}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0xc090}, 0x8000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000009c0), 0x40, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', r1, 0x4, 0x0, 0x4, 0x0, 0x9, @remote, @remote, 0x8000, 0x40, 0xaa3b, 0xfffffffc}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000b00)={@empty, @local, 0x0}, &(0x7f0000000b40)=0xc) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000c80)={0x0, @xdp={0x2c, 0xa072923446253283, r3, 0x23}, @l2tp={0x2, 0x0, @private=0xa010101, 0x2}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x100}, 0x3ff, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000c40)='ip6gretap0\x00', 0x3, 0x368000, 0x3}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000f40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d00)={0x1f0, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r6}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe22}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x8080}, 0x20000041) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000fc0)={0x1b8, 0x13, 0x400, 0x70bd29, 0x25dfdbfe, {0x10, 0x2, 0x81, 0x7, {0x4e21, 0x4e20, [0xff, 0x2000000, 0xff4, 0x6], [0x5ed9, 0x9, 0x8, 0xffff], r5, [0x5, 0x3f]}, 0x6, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "67fdf253962577a0380f305e9c5312a1286d3e877b93d2edb006dfbbd151496db7f2847871097d05589cf0e15fa57e9e99c6477bf774da7d0a627d75d4f5ab1805e9dc6246476bec89c07485566d9a87a260e6fcdd074310c9cc11cedbb386f4b2c2b9d81d39f054230d57874d0ebc010aa059ce514bfad1ee79c9379e41b7c2c8b40ff6faff6f701a958ea35c74bf3de0d5f8e02d94122e989f9460f3b5efd867b0110881"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "e98ac2713df72c81e5674bb038bf4e2b68b4745b0cd0ae80305d2526ba38311c53e2e16f7c7acac74d621670c3fea2c7ffcb60ed798d7761544433cc7d3f726442cccfd52bee7595560256653d95ec2a20402b12"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "3c577b8f8aeaf899a040b682917917ee0e8ab44d017f56d537f846e54a62c85b1e3048df912bbd12492d5e5a741f1debfd0ab3e10a7623e1d82d3e420bbbff688419bfd96c9265f2b4d3885dd491049e7d43585af52dee3d952a3a705eee99e0be54"}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40044}, 0x4008811) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000001200)) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x54, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8100}, 0x801) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x109000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffffffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) socketpair(0xf, 0x3, 0x7f, &(0x7f0000001580)={0xffffffffffffffff}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r9, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x20, r2, 0x500, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x1a}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 00:56:39 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x428000, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={0xfffffffffffffffd, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd37}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000055) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth0\x00', {0x2, 0x0, @dev}}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5f}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x101}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10001}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44044) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x75, 0xcc, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x8, 0x80, 0x3f, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xe3, 0x28, @dev={0xfe, 0x80, '\x00', 0xe}, @remote, 0x1, 0x8046, 0x2, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x7800, 0x7, 0xb8, 0x5, {{0x14, 0x4, 0x2, 0x6, 0x50, 0x68, 0x0, 0x8, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@ssrr={0x89, 0x7, 0xb5, [@broadcast]}, @cipso={0x86, 0x15, 0x2, [{0x6, 0x4, "e671"}, {0x5, 0xb, "63b4f064a936cc89ce"}]}, @ssrr={0x89, 0xf, 0xb1, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1]}, @generic={0x44, 0x9, "a3cec18052d51f"}, @ssrr={0x89, 0x7, 0xf0, [@loopback]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x1, 0x200, 0x9, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x20, 0x1, 0x55}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f00000007c0)={'tunl0\x00', 0x0, 0x7800, 0x40, 0x8, 0xfff, {{0x7, 0x4, 0x2, 0x2, 0x1c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, {[@generic={0x88, 0x6, 'z?d\v'}]}}}}}) getpeername(r0, &(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000980)=0x80) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000011c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f00000009c0)={0x788, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x860}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x75}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x788}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r8 = accept4$unix(r0, &(0x7f0000001200), &(0x7f0000001280)=0x6e, 0x80000) ioctl$BTRFS_IOC_QGROUP_LIMIT(r8, 0x8030942b, &(0x7f00000012c0)={0x2, {0x10, 0x9, 0x0, 0x6, 0x5}}) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000001300), 0x8100, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000001340), 0x6, 0x12682) pidfd_getfd(r9, r10, 0x0) r11 = fsmount(r9, 0x1, 0x88) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000001800)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)={&(0x7f00000013c0)={0x3fc, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x75}}}}, [@NL80211_ATTR_MESH_SETUP={0x88, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_IE={0x4e, 0x3, "37b39d488a909dffcd8034c5a64f3563ee1bcb6a54c5675a3bb2bb22b543500e6751aeb7c7ec993bb811dfdd2fda2ad77278d28293380c208862ec14f5ab237e327e60a5d67ae378c3c2"}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x55}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffff8}, @NL80211_ATTR_TX_RATES={0x338, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0xc, 0xb, 0xc, 0xc, 0x60, 0x60, 0x24, 0x4, 0x6c, 0x9, 0x1b, 0x9, 0x3c, 0x60, 0x10, 0x60, 0xb, 0x24, 0x1, 0x4, 0x36, 0x33, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x200, 0x0, 0xf6b, 0xa2, 0x1f, 0x2]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0xa}, {0x6, 0x5}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x1}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x5}, {0x3}, {0x2, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x6}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x6}, {0x5, 0x1}, {0x5, 0x7}, {0x6, 0x1}, {0x6, 0x3}, {0x1, 0x8}, {0x7}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0x4}, {0x1}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x5, 0x9}, {0x3, 0x2}, {}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x1}, {0x6, 0x2}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x1}, {0x4, 0xa}, {0x7, 0x8}, {0x1, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x5}, {0x3, 0x3}, {0x3}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xadb, 0x7fff, 0xe3b, 0x7, 0x9, 0x6, 0x1, 0x4]}}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x2}, {0x1, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x6}, {0x0, 0x8}, {0x4, 0xa}, {0x2, 0x4}, {0x2, 0x1}, {0x5}, {0x7, 0x3}, {0x3, 0x3}, {0x5, 0x3}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x6}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x6}, {0x2}, {0x1, 0xa}, {0x7, 0x6}, {0x1, 0x9}, {0x0, 0x5}, {0x4, 0x7}, {0x3, 0x4}, {0x7, 0x5}, {0x1, 0x9}, {0x3, 0x2}, {0x1, 0x2}, {0x7, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3}, {0x4, 0x7}, {0x7, 0x8}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0x9}, {}, {0x2, 0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x2, 0x4}, {0x6, 0x4}, {0x2, 0x6}, {0x6, 0x8}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x5}, {0x3, 0x3}, {0x0, 0x6}, {0x7, 0x7}, {0x3, 0x3}, {0x5, 0x2}, {0x2}, {0x7, 0x7}, {0x4, 0x2}, {0x2, 0xa}, {0x2, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x0, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {0x2, 0x1}, {0x6}, {0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x8}, {0x7, 0x9}, {0x6, 0x4}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x5}, {0x6, 0x8}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x5}, {0x7, 0x5}, {0x2, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x7, 0x7}, {0x4, 0x1}, {0x6, 0x2}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x3}, {0x6}, {0x2, 0x1}, {0x2, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x5}, {0x0, 0x5}, {0x6, 0xa}, {}, {0x0, 0x1}, {0x7, 0x1}, {0x7, 0x3}, {0x6, 0x9}, {0x2, 0x7}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x16, 0x5, 0x6]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x6}, {0x6, 0x4}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x9}, {0x4, 0x6}, {0x6, 0x9}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0x9}, {0x3}, {0x1, 0x3}, {0x7}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x7}, {0x6, 0x2}, {0x6, 0x2}, {0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x1, 0x6}, {0x2, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x6, 0x9}, {0x5, 0x8}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0xa}, {0x4, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x6}, {0x7, 0x5}, {0x5, 0xa}, {0x4, 0x1}, {0x4}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x2}, {0x6, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfff, 0x5, 0x0, 0xc19, 0x4, 0x2f79, 0x94]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x200, 0xc0, 0x0, 0x8, 0x2, 0x9, 0x800]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x4}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x5, 0x5}, {0x3}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0x5}, {0x3, 0x17}, {0x6, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0x2}, {0x2}, {0x0, 0x2}, {0x2, 0x9}, {0x5, 0x5}, {0x0, 0x4}, {0x0, 0x9}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x7}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x0, 0x3}, {0x5, 0xa}, {0x4, 0x3}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x2}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfffb, 0x33, 0x6, 0x6, 0x3, 0x1ff, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x3, 0x0, 0x3, 0xf800, 0x2]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x7, 0xc, 0x3, 0x6c, 0x1b, 0xc, 0x4, 0x30, 0x12, 0x3, 0x12, 0x24, 0x6c, 0x60, 0x18, 0x7b, 0x12, 0x60, 0x1, 0x4, 0x12, 0x5, 0x48, 0x3, 0x30, 0x1b, 0x5]}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x18}, {0x6, 0x5}, {0x5}, {0x5, 0x6}, {0x4}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x9}, {0x1}, {0x7, 0x5}, {0x2, 0x4}, {0x7, 0x8}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f4d, 0xfff8, 0xffe1, 0x8000, 0x6, 0x40, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x6, 0x1, 0x1, 0xfffa, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x8000, 0x0, 0xcdb, 0x1, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2803, 0x4, 0x1, 0x9, 0x0, 0x9, 0x4b, 0xde5e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x7, 0x100, 0x1f, 0x7, 0x4014, 0x81, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x100, 0x8, 0x9, 0xbea, 0x2, 0xf82b, 0x100]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x80, 0x8, 0x3, 0x1889, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x8}, {0x4, 0x2}, {0x6, 0x1}, {0x5, 0xa}, {0x5}, {0x5, 0x2}, {0x4, 0x8}, {0x6, 0x7}, {0x0, 0x4}, {0x3, 0x8}, {0x5, 0x5}, {0x4, 0xa}, {0x4}, {0x7, 0x6}, {0x0, 0x3}, {0x5, 0xa}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x200, 0x0, 0x400, 0x893, 0x42, 0x101, 0xdb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x8000}, 0x200440d0) [ 67.723712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.757227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.760437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.763143] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.764598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.766520] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.768999] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.771046] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.780529] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.781821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.784387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.787573] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.789763] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.792091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.798031] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.801083] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.801342] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.805093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.805810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.808988] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.810364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.816039] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.833351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.856268] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.860910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.861232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.866278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.868790] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.869367] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.870655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.874108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.875633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.877562] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.880849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.883173] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.884514] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.886007] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.887791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.890727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.893223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.895468] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.896634] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.897646] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.900046] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.907213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.908659] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.909970] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.911363] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.913224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.917359] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.926925] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.970715] Bluetooth: hci4: HCI_REQ-0x0c1a [ 68.083567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.100526] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.114336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.135309] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.838396] Bluetooth: hci0: command 0x0409 tx timeout [ 69.838433] Bluetooth: hci3: command 0x0409 tx timeout [ 69.839561] Bluetooth: hci7: command 0x0409 tx timeout [ 69.966144] Bluetooth: hci1: command 0x0409 tx timeout [ 69.966200] Bluetooth: hci2: command 0x0409 tx timeout [ 69.966840] Bluetooth: hci6: command 0x0409 tx timeout [ 70.029951] Bluetooth: hci4: command 0x0409 tx timeout [ 70.157971] Bluetooth: hci5: command 0x0409 tx timeout [ 71.885979] Bluetooth: hci7: command 0x041b tx timeout [ 71.886982] Bluetooth: hci3: command 0x041b tx timeout [ 71.887397] Bluetooth: hci0: command 0x041b tx timeout [ 72.014033] Bluetooth: hci6: command 0x041b tx timeout [ 72.014914] Bluetooth: hci2: command 0x041b tx timeout [ 72.014927] Bluetooth: hci1: command 0x041b tx timeout [ 72.077975] Bluetooth: hci4: command 0x041b tx timeout [ 72.206049] Bluetooth: hci5: command 0x041b tx timeout [ 73.933963] Bluetooth: hci0: command 0x040f tx timeout [ 73.933999] Bluetooth: hci3: command 0x040f tx timeout [ 73.934399] Bluetooth: hci7: command 0x040f tx timeout [ 74.061950] Bluetooth: hci2: command 0x040f tx timeout [ 74.062006] Bluetooth: hci1: command 0x040f tx timeout [ 74.062702] Bluetooth: hci6: command 0x040f tx timeout [ 74.126046] Bluetooth: hci4: command 0x040f tx timeout [ 74.254038] Bluetooth: hci5: command 0x040f tx timeout [ 75.981979] Bluetooth: hci3: command 0x0419 tx timeout [ 75.982400] Bluetooth: hci7: command 0x0419 tx timeout [ 75.982803] Bluetooth: hci0: command 0x0419 tx timeout [ 76.109961] Bluetooth: hci6: command 0x0419 tx timeout [ 76.110437] Bluetooth: hci1: command 0x0419 tx timeout [ 76.110898] Bluetooth: hci2: command 0x0419 tx timeout [ 76.174898] Bluetooth: hci4: command 0x0419 tx timeout [ 76.301981] Bluetooth: hci5: command 0x0419 tx timeout [ 122.392389] audit: type=1400 audit(1664758655.856:7): avc: denied { open } for pid=3796 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.395333] audit: type=1400 audit(1664758655.856:8): avc: denied { kernel } for pid=3796 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 00:57:35 executing program 3: perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xc2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x8d, 0x4, 0x0, 0xe693}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x81, 0x1, 0x7, 0x0, 0xa6cb, 0x20514, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x80000000, 0x5}, 0xa48, 0x3, 0x2, 0x4, 0x52, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x6c}, 0x0, 0xe, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xaa48, 0x0, 0x80, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x1305100, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000400)=0x0, {0x6}, &(0x7f0000000440)=""/232, 0xe8, &(0x7f0000000540)=""/179, &(0x7f0000000600)=[0x0], 0x1}, 0x58) r1 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xff, 0x80, 0x0, 0x81, 0x0, 0x7ff, 0x1c820, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2800, 0x1, @perf_bp={&(0x7f0000000180), 0x4}, 0x2110, 0x1, 0x1ff, 0x3, 0x100000001, 0x0, 0xff7f, 0x0, 0x3, 0x0, 0xffff}, r0, 0xd, 0xffffffffffffffff, 0xa) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x0, 0x88b, 0x0, 0x0, 0x0, "425bb45816f822e6b8208f9a07eeec557d2e8f"}) r3 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000700)={0x1f, 0x6}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000001140)="11975a43dcd3ad912051513fc9654ddeea5893b8cfbba61a2ce44acba1", 0x1d}], 0x1) fsetxattr$security_capability(r4, &(0x7f0000000780), &(0x7f0000000840)=@v1={0x1000000, [{0x80000001, 0x80}]}, 0xc, 0x1) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_io_uring_complete(0x0) openat$cgroup_devices(r5, &(0x7f0000000740)='devices.deny\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x5, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, 0x1000}}) [ 122.576565] ------------[ cut here ]------------ [ 122.576598] [ 122.576603] ====================================================== [ 122.576609] WARNING: possible circular locking dependency detected [ 122.576615] 6.0.0-rc7-next-20220930 #1 Not tainted [ 122.576625] ------------------------------------------------------ [ 122.576630] syz-executor.3/3813 is trying to acquire lock: [ 122.576641] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 122.576701] [ 122.576701] but task is already holding lock: [ 122.576705] ffff88800de1f420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.576746] [ 122.576746] which lock already depends on the new lock. [ 122.576746] [ 122.576751] [ 122.576751] the existing dependency chain (in reverse order) is: [ 122.576756] [ 122.576756] -> #3 (&ctx->lock){....}-{2:2}: [ 122.576777] _raw_spin_lock+0x2a/0x40 [ 122.576794] __perf_event_task_sched_out+0x53b/0x18d0 [ 122.576812] __schedule+0xedd/0x2470 [ 122.576834] schedule+0xda/0x1b0 [ 122.576863] futex_wait_queue+0xf5/0x1e0 [ 122.576883] futex_wait+0x28e/0x690 [ 122.576899] do_futex+0x2ff/0x380 [ 122.576914] __x64_sys_futex+0x1c6/0x4d0 [ 122.576930] do_syscall_64+0x3b/0x90 [ 122.576956] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.576977] [ 122.576977] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 122.576998] _raw_spin_lock_nested+0x30/0x40 [ 122.577015] raw_spin_rq_lock_nested+0x1e/0x30 [ 122.577035] task_fork_fair+0x63/0x4d0 [ 122.577061] sched_cgroup_fork+0x3d0/0x540 [ 122.577083] copy_process+0x4183/0x6e20 [ 122.577100] kernel_clone+0xe7/0x890 [ 122.577115] user_mode_thread+0xad/0xf0 [ 122.577131] rest_init+0x24/0x250 [ 122.577149] arch_call_rest_init+0xf/0x14 [ 122.577176] start_kernel+0x4c6/0x4eb [ 122.577200] secondary_startup_64_no_verify+0xe0/0xeb [ 122.577222] [ 122.577222] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 122.577243] _raw_spin_lock_irqsave+0x39/0x60 [ 122.577260] try_to_wake_up+0xab/0x1930 [ 122.577280] up+0x75/0xb0 [ 122.577302] __up_console_sem+0x6e/0x80 [ 122.577327] console_unlock+0x46a/0x590 [ 122.577352] vt_ioctl+0x2822/0x2ca0 [ 122.577369] tty_ioctl+0x785/0x16b0 [ 122.577386] __x64_sys_ioctl+0x19a/0x210 [ 122.577407] do_syscall_64+0x3b/0x90 [ 122.577433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.577452] [ 122.577452] -> #0 ((console_sem).lock){....}-{2:2}: [ 122.577474] __lock_acquire+0x2a02/0x5e70 [ 122.577500] lock_acquire+0x1a2/0x530 [ 122.577525] _raw_spin_lock_irqsave+0x39/0x60 [ 122.577542] down_trylock+0xe/0x70 [ 122.577565] __down_trylock_console_sem+0x3b/0xd0 [ 122.577591] vprintk_emit+0x16b/0x560 [ 122.577638] vprintk+0x84/0xa0 [ 122.577663] _printk+0xba/0xf1 [ 122.577681] report_bug.cold+0x72/0xab [ 122.577706] handle_bug+0x3c/0x70 [ 122.577732] exc_invalid_op+0x14/0x50 [ 122.577758] asm_exc_invalid_op+0x16/0x20 [ 122.577777] group_sched_out.part.0+0x2c7/0x460 [ 122.577805] ctx_sched_out+0x8f1/0xc10 [ 122.577832] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.577849] __schedule+0xedd/0x2470 [ 122.577870] schedule+0xda/0x1b0 [ 122.577891] futex_wait_queue+0xf5/0x1e0 [ 122.577908] futex_wait+0x28e/0x690 [ 122.577924] do_futex+0x2ff/0x380 [ 122.577938] __x64_sys_futex+0x1c6/0x4d0 [ 122.577954] do_syscall_64+0x3b/0x90 [ 122.577980] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.578000] [ 122.578000] other info that might help us debug this: [ 122.578000] [ 122.578004] Chain exists of: [ 122.578004] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 122.578004] [ 122.578028] Possible unsafe locking scenario: [ 122.578028] [ 122.578032] CPU0 CPU1 [ 122.578035] ---- ---- [ 122.578039] lock(&ctx->lock); [ 122.578048] lock(&rq->__lock); [ 122.578058] lock(&ctx->lock); [ 122.578068] lock((console_sem).lock); [ 122.578077] [ 122.578077] *** DEADLOCK *** [ 122.578077] [ 122.578080] 2 locks held by syz-executor.3/3813: [ 122.578091] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 122.578137] #1: ffff88800de1f420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.578178] [ 122.578178] stack backtrace: [ 122.578182] CPU: 1 PID: 3813 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 122.578202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.578214] Call Trace: [ 122.578219] [ 122.578225] dump_stack_lvl+0x8b/0xb3 [ 122.578254] check_noncircular+0x263/0x2e0 [ 122.578281] ? format_decode+0x26c/0xb50 [ 122.578306] ? print_circular_bug+0x450/0x450 [ 122.578333] ? simple_strtoul+0x30/0x30 [ 122.578358] ? format_decode+0x26c/0xb50 [ 122.578385] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 122.578412] __lock_acquire+0x2a02/0x5e70 [ 122.578446] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 122.578482] lock_acquire+0x1a2/0x530 [ 122.578508] ? down_trylock+0xe/0x70 [ 122.578535] ? lock_release+0x750/0x750 [ 122.578567] ? vprintk+0x84/0xa0 [ 122.578596] _raw_spin_lock_irqsave+0x39/0x60 [ 122.578613] ? down_trylock+0xe/0x70 [ 122.578639] down_trylock+0xe/0x70 [ 122.578664] ? vprintk+0x84/0xa0 [ 122.578690] __down_trylock_console_sem+0x3b/0xd0 [ 122.578717] vprintk_emit+0x16b/0x560 [ 122.578747] vprintk+0x84/0xa0 [ 122.578774] _printk+0xba/0xf1 [ 122.578792] ? record_print_text.cold+0x16/0x16 [ 122.578817] ? report_bug.cold+0x66/0xab [ 122.578846] ? group_sched_out.part.0+0x2c7/0x460 [ 122.578875] report_bug.cold+0x72/0xab [ 122.578904] handle_bug+0x3c/0x70 [ 122.578932] exc_invalid_op+0x14/0x50 [ 122.578960] asm_exc_invalid_op+0x16/0x20 [ 122.578980] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.579013] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.579030] RSP: 0018:ffff88803efaf8f8 EFLAGS: 00010006 [ 122.579044] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.579057] RDX: ffff88800d96d040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 122.579069] RBP: ffff88801edb8000 R08: 0000000000000005 R09: 0000000000000001 [ 122.579080] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800de1f400 [ 122.579092] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 122.579110] ? group_sched_out.part.0+0x2c7/0x460 [ 122.579141] ? group_sched_out.part.0+0x2c7/0x460 [ 122.579173] ctx_sched_out+0x8f1/0xc10 [ 122.579203] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.579226] ? lock_is_held_type+0xd7/0x130 [ 122.579248] ? __perf_cgroup_move+0x160/0x160 [ 122.579265] ? set_next_entity+0x304/0x550 [ 122.579296] ? lock_is_held_type+0xd7/0x130 [ 122.579318] __schedule+0xedd/0x2470 [ 122.579345] ? io_schedule_timeout+0x150/0x150 [ 122.579369] ? futex_wait_setup+0x166/0x230 [ 122.579392] schedule+0xda/0x1b0 [ 122.579416] futex_wait_queue+0xf5/0x1e0 [ 122.579435] futex_wait+0x28e/0x690 [ 122.579455] ? futex_wait_setup+0x230/0x230 [ 122.579476] ? wake_up_q+0x8b/0xf0 [ 122.579497] ? do_raw_spin_unlock+0x4f/0x220 [ 122.579527] ? futex_wake+0x158/0x490 [ 122.579554] ? fd_install+0x1f9/0x640 [ 122.579577] do_futex+0x2ff/0x380 [ 122.579595] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 122.579620] __x64_sys_futex+0x1c6/0x4d0 [ 122.579641] ? __x64_sys_futex_time32+0x480/0x480 [ 122.579661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.579683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.579708] do_syscall_64+0x3b/0x90 [ 122.579736] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.579757] RIP: 0033:0x7ff234c96b19 [ 122.579769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.579786] RSP: 002b:00007ff23220c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.579803] RAX: ffffffffffffffda RBX: 00007ff234da9f68 RCX: 00007ff234c96b19 [ 122.579816] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff234da9f68 [ 122.579827] RBP: 00007ff234da9f60 R08: 0000000000000000 R09: 0000000000000000 [ 122.579838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff234da9f6c [ 122.579850] R13: 00007ffe55b14b0f R14: 00007ff23220c300 R15: 0000000000022000 [ 122.579870] [ 122.667605] WARNING: CPU: 1 PID: 3813 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 122.668596] Modules linked in: [ 122.668952] CPU: 1 PID: 3813 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 122.669824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.670998] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.671601] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.673501] RSP: 0018:ffff88803efaf8f8 EFLAGS: 00010006 [ 122.674076] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.674835] RDX: ffff88800d96d040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 122.675578] RBP: ffff88801edb8000 R08: 0000000000000005 R09: 0000000000000001 [ 122.676318] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800de1f400 [ 122.677077] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 122.677835] FS: 00007ff23220c700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 122.678701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.679318] CR2: 00007f09ff1ff4a1 CR3: 000000003de8a000 CR4: 0000000000350ee0 [ 122.680069] Call Trace: [ 122.680344] [ 122.680590] ctx_sched_out+0x8f1/0xc10 [ 122.681027] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.681588] ? lock_is_held_type+0xd7/0x130 [ 122.682067] ? __perf_cgroup_move+0x160/0x160 [ 122.682552] ? set_next_entity+0x304/0x550 [ 122.683016] ? lock_is_held_type+0xd7/0x130 [ 122.683483] __schedule+0xedd/0x2470 [ 122.683886] ? io_schedule_timeout+0x150/0x150 [ 122.684386] ? futex_wait_setup+0x166/0x230 [ 122.684852] schedule+0xda/0x1b0 [ 122.685224] futex_wait_queue+0xf5/0x1e0 [ 122.685673] futex_wait+0x28e/0x690 [ 122.686067] ? futex_wait_setup+0x230/0x230 [ 122.686528] ? wake_up_q+0x8b/0xf0 [ 122.686927] ? do_raw_spin_unlock+0x4f/0x220 [ 122.687421] ? futex_wake+0x158/0x490 [ 122.687845] ? fd_install+0x1f9/0x640 [ 122.688259] do_futex+0x2ff/0x380 [ 122.688641] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 122.689258] __x64_sys_futex+0x1c6/0x4d0 [ 122.689705] ? __x64_sys_futex_time32+0x480/0x480 [ 122.690220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.690758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.691313] do_syscall_64+0x3b/0x90 [ 122.691720] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.692267] RIP: 0033:0x7ff234c96b19 [ 122.692667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.694565] RSP: 002b:00007ff23220c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.695367] RAX: ffffffffffffffda RBX: 00007ff234da9f68 RCX: 00007ff234c96b19 [ 122.696121] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff234da9f68 [ 122.696860] RBP: 00007ff234da9f60 R08: 0000000000000000 R09: 0000000000000000 [ 122.697610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff234da9f6c [ 122.698351] R13: 00007ffe55b14b0f R14: 00007ff23220c300 R15: 0000000000022000 [ 122.699100] [ 122.699355] irq event stamp: 638 [ 122.699707] hardirqs last enabled at (637): [] syscall_enter_from_user_mode+0x1d/0x50 [ 122.700698] hardirqs last disabled at (638): [] __schedule+0x1225/0x2470 [ 122.701566] softirqs last enabled at (472): [] __irq_exit_rcu+0x11b/0x180 [ 122.702464] softirqs last disabled at (363): [] __irq_exit_rcu+0x11b/0x180 [ 122.703361] ---[ end trace 0000000000000000 ]--- [ 124.012970] loop4: detected capacity change from 0 to 264192 [ 124.036470] loop4: detected capacity change from 0 to 264192 VM DIAGNOSIS: 00:57:36 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3d5e0 RCX=0000000000000000 RDX=ffff88801ed8d040 RSI=ffffffff813bbaa7 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff8880183b7958 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9e7abd R14=ffff88806cf3d5e8 R15=0000000000000001 RIP=ffffffff813bbaa9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555eb2400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff234d9ed5c CR3=000000003de8a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff234d7d7c0 00007ff234d7d7c8 YMM02=0000000000000000 0000000000000000 00007ff234d7d7e0 00007ff234d7d7c0 YMM03=0000000000000000 0000000000000000 00007ff234d7d7c8 00007ff234d7d7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803efaf340 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006e R11=0000000000000001 R12=000000000000006e R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff23220c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f09ff1ff4a1 CR3=000000003de8a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff234d7d7c0 00007ff234d7d7c8 YMM02=0000000000000000 0000000000000000 00007ff234d7d7e0 00007ff234d7d7c0 YMM03=0000000000000000 0000000000000000 00007ff234d7d7c8 00007ff234d7d7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000