Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:14926' (ECDSA) to the list of known hosts. 2022/10/04 01:14:49 fuzzer started 2022/10/04 01:14:49 dialing manager at localhost:35095 syzkaller login: [ 37.328353] cgroup: Unknown subsys name 'net' [ 37.434221] cgroup: Unknown subsys name 'rlimit' 2022/10/04 01:15:03 syscalls: 2215 2022/10/04 01:15:03 code coverage: enabled 2022/10/04 01:15:03 comparison tracing: enabled 2022/10/04 01:15:03 extra coverage: enabled 2022/10/04 01:15:03 setuid sandbox: enabled 2022/10/04 01:15:03 namespace sandbox: enabled 2022/10/04 01:15:03 Android sandbox: enabled 2022/10/04 01:15:03 fault injection: enabled 2022/10/04 01:15:03 leak checking: enabled 2022/10/04 01:15:03 net packet injection: enabled 2022/10/04 01:15:03 net device setup: enabled 2022/10/04 01:15:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/04 01:15:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/04 01:15:03 USB emulation: enabled 2022/10/04 01:15:03 hci packet injection: enabled 2022/10/04 01:15:03 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/04 01:15:03 802.15.4 emulation: enabled 2022/10/04 01:15:03 fetching corpus: 50, signal 19133/20999 (executing program) 2022/10/04 01:15:03 fetching corpus: 100, signal 32487/36061 (executing program) 2022/10/04 01:15:03 fetching corpus: 150, signal 43831/48959 (executing program) 2022/10/04 01:15:04 fetching corpus: 200, signal 48748/55479 (executing program) 2022/10/04 01:15:04 fetching corpus: 250, signal 56142/64329 (executing program) 2022/10/04 01:15:04 fetching corpus: 300, signal 61240/70884 (executing program) 2022/10/04 01:15:04 fetching corpus: 350, signal 66354/77378 (executing program) 2022/10/04 01:15:04 fetching corpus: 400, signal 69868/82314 (executing program) 2022/10/04 01:15:04 fetching corpus: 450, signal 76799/90433 (executing program) 2022/10/04 01:15:04 fetching corpus: 500, signal 82828/97567 (executing program) 2022/10/04 01:15:05 fetching corpus: 550, signal 87375/103263 (executing program) 2022/10/04 01:15:05 fetching corpus: 600, signal 90019/107152 (executing program) 2022/10/04 01:15:05 fetching corpus: 650, signal 92389/110742 (executing program) 2022/10/04 01:15:05 fetching corpus: 700, signal 95623/115083 (executing program) 2022/10/04 01:15:05 fetching corpus: 750, signal 97734/118394 (executing program) 2022/10/04 01:15:05 fetching corpus: 800, signal 99629/121462 (executing program) 2022/10/04 01:15:05 fetching corpus: 850, signal 102624/125501 (executing program) 2022/10/04 01:15:05 fetching corpus: 900, signal 105201/129122 (executing program) 2022/10/04 01:15:05 fetching corpus: 950, signal 107170/132181 (executing program) 2022/10/04 01:15:05 fetching corpus: 1000, signal 108694/134826 (executing program) 2022/10/04 01:15:06 fetching corpus: 1050, signal 110183/137420 (executing program) 2022/10/04 01:15:06 fetching corpus: 1100, signal 112319/140566 (executing program) 2022/10/04 01:15:06 fetching corpus: 1150, signal 114751/143891 (executing program) 2022/10/04 01:15:06 fetching corpus: 1200, signal 116250/146374 (executing program) 2022/10/04 01:15:06 fetching corpus: 1250, signal 117554/148741 (executing program) 2022/10/04 01:15:06 fetching corpus: 1300, signal 119441/151578 (executing program) 2022/10/04 01:15:06 fetching corpus: 1350, signal 121570/154536 (executing program) 2022/10/04 01:15:06 fetching corpus: 1400, signal 122956/156882 (executing program) 2022/10/04 01:15:06 fetching corpus: 1450, signal 124350/159231 (executing program) 2022/10/04 01:15:07 fetching corpus: 1500, signal 125815/161600 (executing program) 2022/10/04 01:15:07 fetching corpus: 1550, signal 127248/163963 (executing program) 2022/10/04 01:15:07 fetching corpus: 1600, signal 128621/166242 (executing program) 2022/10/04 01:15:07 fetching corpus: 1650, signal 129335/167981 (executing program) 2022/10/04 01:15:07 fetching corpus: 1700, signal 131063/170524 (executing program) 2022/10/04 01:15:07 fetching corpus: 1750, signal 131835/172296 (executing program) 2022/10/04 01:15:07 fetching corpus: 1800, signal 132732/174128 (executing program) 2022/10/04 01:15:07 fetching corpus: 1850, signal 133919/176238 (executing program) 2022/10/04 01:15:07 fetching corpus: 1900, signal 135593/178670 (executing program) 2022/10/04 01:15:08 fetching corpus: 1950, signal 137683/181347 (executing program) 2022/10/04 01:15:08 fetching corpus: 2000, signal 140413/184509 (executing program) 2022/10/04 01:15:08 fetching corpus: 2050, signal 142774/187352 (executing program) 2022/10/04 01:15:08 fetching corpus: 2100, signal 143706/189127 (executing program) 2022/10/04 01:15:08 fetching corpus: 2150, signal 144469/190741 (executing program) 2022/10/04 01:15:08 fetching corpus: 2200, signal 145128/192304 (executing program) 2022/10/04 01:15:08 fetching corpus: 2250, signal 146143/194159 (executing program) 2022/10/04 01:15:08 fetching corpus: 2300, signal 147616/196295 (executing program) 2022/10/04 01:15:09 fetching corpus: 2350, signal 148708/198107 (executing program) 2022/10/04 01:15:09 fetching corpus: 2400, signal 149387/199647 (executing program) 2022/10/04 01:15:09 fetching corpus: 2450, signal 150650/201545 (executing program) 2022/10/04 01:15:09 fetching corpus: 2500, signal 151699/203303 (executing program) 2022/10/04 01:15:09 fetching corpus: 2550, signal 152376/204787 (executing program) 2022/10/04 01:15:09 fetching corpus: 2600, signal 153047/206265 (executing program) 2022/10/04 01:15:09 fetching corpus: 2650, signal 154042/207928 (executing program) 2022/10/04 01:15:09 fetching corpus: 2700, signal 155946/210220 (executing program) 2022/10/04 01:15:10 fetching corpus: 2750, signal 156588/211575 (executing program) 2022/10/04 01:15:10 fetching corpus: 2800, signal 158189/213605 (executing program) 2022/10/04 01:15:10 fetching corpus: 2850, signal 158878/215036 (executing program) 2022/10/04 01:15:10 fetching corpus: 2900, signal 159662/216514 (executing program) 2022/10/04 01:15:10 fetching corpus: 2950, signal 160524/218062 (executing program) 2022/10/04 01:15:10 fetching corpus: 3000, signal 160966/219308 (executing program) 2022/10/04 01:15:10 fetching corpus: 3050, signal 161754/220780 (executing program) 2022/10/04 01:15:10 fetching corpus: 3100, signal 162687/222302 (executing program) 2022/10/04 01:15:11 fetching corpus: 3150, signal 163582/223824 (executing program) 2022/10/04 01:15:11 fetching corpus: 3200, signal 165997/226213 (executing program) 2022/10/04 01:15:11 fetching corpus: 3250, signal 166972/227735 (executing program) 2022/10/04 01:15:11 fetching corpus: 3300, signal 167932/229219 (executing program) 2022/10/04 01:15:11 fetching corpus: 3350, signal 168899/230724 (executing program) 2022/10/04 01:15:11 fetching corpus: 3400, signal 169793/232181 (executing program) 2022/10/04 01:15:11 fetching corpus: 3450, signal 170620/233521 (executing program) 2022/10/04 01:15:11 fetching corpus: 3500, signal 171037/234667 (executing program) 2022/10/04 01:15:12 fetching corpus: 3550, signal 171528/235895 (executing program) 2022/10/04 01:15:12 fetching corpus: 3600, signal 172252/237273 (executing program) 2022/10/04 01:15:12 fetching corpus: 3650, signal 172906/238545 (executing program) 2022/10/04 01:15:12 fetching corpus: 3700, signal 173716/239957 (executing program) 2022/10/04 01:15:12 fetching corpus: 3750, signal 174244/241097 (executing program) 2022/10/04 01:15:12 fetching corpus: 3800, signal 174800/242281 (executing program) 2022/10/04 01:15:12 fetching corpus: 3850, signal 175843/243725 (executing program) 2022/10/04 01:15:12 fetching corpus: 3900, signal 176665/245024 (executing program) 2022/10/04 01:15:12 fetching corpus: 3950, signal 177470/246290 (executing program) 2022/10/04 01:15:12 fetching corpus: 4000, signal 178691/247834 (executing program) 2022/10/04 01:15:13 fetching corpus: 4050, signal 179664/249121 (executing program) 2022/10/04 01:15:13 fetching corpus: 4100, signal 180384/250358 (executing program) 2022/10/04 01:15:13 fetching corpus: 4150, signal 181324/251661 (executing program) 2022/10/04 01:15:13 fetching corpus: 4200, signal 181761/252727 (executing program) 2022/10/04 01:15:13 fetching corpus: 4250, signal 182887/254096 (executing program) 2022/10/04 01:15:13 fetching corpus: 4300, signal 183625/255268 (executing program) 2022/10/04 01:15:13 fetching corpus: 4350, signal 184855/256601 (executing program) 2022/10/04 01:15:13 fetching corpus: 4400, signal 185946/257903 (executing program) 2022/10/04 01:15:13 fetching corpus: 4450, signal 186667/259049 (executing program) 2022/10/04 01:15:14 fetching corpus: 4500, signal 187060/260029 (executing program) 2022/10/04 01:15:14 fetching corpus: 4550, signal 187862/261181 (executing program) 2022/10/04 01:15:14 fetching corpus: 4600, signal 188797/262345 (executing program) 2022/10/04 01:15:14 fetching corpus: 4650, signal 189936/263630 (executing program) 2022/10/04 01:15:14 fetching corpus: 4700, signal 190403/264599 (executing program) 2022/10/04 01:15:14 fetching corpus: 4750, signal 191015/265620 (executing program) 2022/10/04 01:15:14 fetching corpus: 4800, signal 191868/266748 (executing program) 2022/10/04 01:15:14 fetching corpus: 4850, signal 192653/267842 (executing program) 2022/10/04 01:15:15 fetching corpus: 4900, signal 193299/268870 (executing program) 2022/10/04 01:15:15 fetching corpus: 4950, signal 194203/269936 (executing program) 2022/10/04 01:15:15 fetching corpus: 5000, signal 194779/270968 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/271732 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/272484 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/273216 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/273985 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/274731 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/275479 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/276255 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/277001 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/277772 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/278491 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/279275 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/280038 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/280796 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/281532 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/282302 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/283053 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/283797 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/284612 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/285347 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/286071 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/286824 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/287584 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/288350 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/289122 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/289896 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/290637 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/291404 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/292157 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/292926 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/293709 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/294463 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/295219 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/295978 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/296747 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/297505 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/298285 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/299088 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/299832 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/300582 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/301337 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/302114 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/302875 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/303650 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/304446 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/305204 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/305962 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/306722 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/307484 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/308238 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/308967 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/309744 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/310495 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/311262 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/311985 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/312554 (executing program) 2022/10/04 01:15:15 fetching corpus: 5001, signal 194785/312554 (executing program) 2022/10/04 01:15:18 starting 8 fuzzer processes 01:15:18 executing program 0: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x0, @loopback}}) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x453, 0x100, 0x70bd28, 0x25dfdbff, "39547e9ea46fd62e1c63bb98f85a015d3cf14ec9991ac18785da8489151484cb4d673334929be31373768a5ccef20db0117d432af88188b49e6cdc4735282e795fbf19d329ae39d0a05b657ba1f9a4bd65bebc051278", [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x801) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000240)) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x5, 0x0, 0x2, 0x3, 0x7f]}, &(0x7f0000000300)=0x54) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40041118}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000000, 0x60}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x56, 0xac, "e8a2009417965c05d23e18948d3304113a594ac70c3a80edb44d15710cee5054e63551a00f3aa2d33f53b16c0107a66bdffc41305ba58eb5d92c53d47c21c0259437c610b2f1a71b82054ca1bda17e7ca9c4"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x144}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = socket$inet6(0xa, 0x0, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x4, 0xff, 0x40, 0xff, 0x4b, @loopback, @local, 0x80, 0x20, 0x9}}) readv(r3, &(0x7f0000000d00)=[{&(0x7f0000000600)=""/191, 0xbf}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f00000008c0)=""/186, 0xba}, {&(0x7f0000000980)=""/174, 0xae}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/184, 0xb8}, {&(0x7f0000000c00)=""/79, 0x4f}, {&(0x7f0000000c80)=""/5, 0x5}, {&(0x7f0000000cc0)}], 0xa) r4 = socket$inet(0x2, 0xa, 0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000dc0)={0x2, 'syzkaller0\x00', {0x80}, 0x9}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1c, 0x24, [{0xc, 0x1}, {0x48}, {0x16}, {0x1b, 0x1}, {0x4}, {0x2, 0x1}, {0x36, 0x1}, {0x4}, {0x12, 0x1}, {0x4}, {0x60, 0x1}, {0x48}, {0x30}, {0x24}, {0x36, 0x1}, {0x60, 0x1}, {0x4, 0x1}, {0xc, 0x1}, {0x48, 0x1}, {0x1b}, {0x1b}, {0x48, 0x1}, {0x6}, {0x4, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x4000844) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000f40)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f80)=@IORING_OP_MADVISE={0x19, 0x7, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb}, 0x3) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', 0x1000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) connect$unix(r1, &(0x7f0000001100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendfile(r1, r1, &(0x7f0000001180)=0x2, 0x1) 01:15:18 executing program 1: r0 = socket(0xa, 0x5, 0x5) pwrite64(r0, &(0x7f0000000000)="2fabd7c662f46451090965d9c28658cc906fc821062891de6856a6f72d9f5762b48c48de4ff81145e5b268cb815d19f564950aec4a4316e7c05d0820715e78aa3c8e23e8bc48738012b07b4d8139b0b806135c81bbda203179c8430f9ce93de96e3aa4534f5c6203978c2319b0c6a5c4c04ebda69a5aa2d68cb3ec3be3f03ed2b76dfb17c8f48c74c474ed9a0e0312d1e6d4705579bb663f0ae5cccf", 0x9c, 0x1ff) r1 = accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x800) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000100)={'veth0_vlan\x00', {0x2, 0x0, @remote}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xb50}}, './file0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000140), r2) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) getpeername(r4, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000300), &(0x7f0000000340)=0x40) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x80, 0x1, &(0x7f0000000480)=[{&(0x7f0000000400)="104ca2c26088500863296bcd62b4dc21bf02e81a7e3492ed2cc0247b71e1a102fc0243325379d53e4b8b4ab82a0d7fcb99b4a97a994e17da2faa98220fa002daa19d2a3af4fa8f59197eecedd9de2b40433325", 0x53, 0x3}], 0x1008000, &(0x7f00000004c0)={[{@uni_xlate}, {@uni_xlateno}, {@utf8}, {@nonumtail}, {@shortname_winnt}, {@rodir}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_role={'subj_role', 0x3d, '&[---,{@]&&+,^#\xf1'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'veth0_vlan\x00'}}, {@dont_measure}, {@uid_gt={'uid>', 0xee01}}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x5, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x80, 0x2, 0xc277}}) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000580)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f00000005c0)="4d185c03236bbca4e4cd82bc6fa9320fdeaadcc6ad93764b9520d716bd5d580c1903879e4f24a2eb6039d415c82b92a512e405adafba5ba957", 0x39}, {&(0x7f0000000600)="7a472ee1785d8fc1da0db461f1fca98c23af88e4c8b4bf5387b2ae071952d9db87d22e2e090e40a099516b6b9dfc8cba02fcab87d5a0ec32e3bc5acbd944fad503f73ff2a7349fcdbc16b1e50f5bb6fbe554d1219c7c6a5e4fd3d628e3afacf4473d9aea794ca4b8283a3c8678d023b2a331962ea023ea1ccb387a5e1c23b5d797c2245aa4688b4544da04c7768015af1c75fea72d296d98ee1228658016cdb9b982e9ff059f860ae8f15cd2a5ba413f6b82b8353969fd86f20f2e7dea986d79a6a315f51dc94206f3247fa8378d6d754bd9a9e74332e42c44276e21b09fea8f12b36d91421be4e8025403955a016c6ad48c", 0xf2}], 0x2, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x628}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x86a3}}], 0x60}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000800)="36ca9d230e129d246cfebade00945af75b3333250ed03cdef9a34067a2727df41724d5a7842c399613281343e2b507bdefd6203f1db37210921ca456b93c1ab0fc4b7c93fba454904df6433fdd1dccc679f773c5863ea2dda37e3de640a9397202f6fae213812bc4b8b238604f9498621b9e5e59f1b5505e40ef60a8246b934aa117b4414bc8960d11425f16833bf245622d780696ec6b132fc0b2627f1735c2d888a6f0c310d974e72a8035ce05158ce35a0295eb6165ee0853c18c0a11cd840d17bf394a4a150910160d2180f33453109e", 0xd2}, {&(0x7f0000000900)="18f3d193803339e39adedf37e78c74bf54603660d4857ee5775f6e3f951e710673dc631b463e732db1f2fd257197b1138837b5de0088136c744c917fca40e9b82ee9b3e2ca57c6f8041cf94780d61e8548a452a62535e57986782ba3d2807ffe5e8a2c105b57f5bc4045c997fd8a82", 0x6f}], 0x2, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x48, 0x0, 0x7, {[@noop, @end, @timestamp_prespec={0x44, 0x34, 0xe3, 0x3, 0x2, [{@loopback, 0x100}, {@rand_addr=0x64010102, 0x3}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}, {@empty, 0xd}, {@private=0xa010100, 0x7}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x18}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xb8}}, {{&(0x7f0000000b40)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b80)="cbb558d903a5a173c420f63b905b8dc24b3bf18cb6424aa3a52c45362988b35437d06efaea413238d6d208954a72ea2ed2fe2506a4e3baa092f071af9f60c4001f07cc3838d4ad912b65d5f2f6ee8e29dbf3d4e10e4123", 0x57}, {&(0x7f0000000c00)="6df7da5dfd68e8eb7abe5f52d13d1608e9817a8bc281998eba675c9559a2e262f03d2144b29df44797893c15044787f4168737ab7d63440a9e707199abf93017507e5ccab7036b2677d44e7e217d27618ced506e291022a982471a65dc6cb40791d0493d89f2ef79b881a70e70ed7837d8", 0x71}], 0x2, &(0x7f0000000cc0)=[@ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x1, [@multicast2, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @timestamp={0x44, 0x8, 0x69, 0x0, 0x7, [0x2740]}, @ssrr={0x89, 0xb, 0xb7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0xc, 0x25, 0x3, 0x0, [{@loopback, 0x20}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xab4}}, @ip_retopts={{0x54, 0x0, 0x7, {[@cipso={0x86, 0x2d, 0x1, [{0x5, 0x10, "76ba54f107ea36058153b1647880"}, {0x7, 0xc, "91400d7209e9bacd8a80"}, {0x7, 0x6, "e1a60bd8"}, {0x7, 0x5, "c57208"}]}, @cipso={0x86, 0x10, 0x3, [{0x2, 0xa, "b06e0338732d5570"}]}, @noop, @generic={0x88, 0x5, "9deaa8"}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xd0}}], 0x3, 0x40010) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x40, 0x1) accept4$packet(r0, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001740)=0x14, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000ec0)="65f9d93b2cb6ea58c27725408a1b458015dce0db0d88c9186ace8aea674769c8440e251a27149f799a10725c2ccf58f15ead57e549889fd4494a59dfbb4a6ba26bc22576c9389ef6b49cf4b8f23f34a6f922f8a2c63b7c1195cb4f0344d0d386c3ac66f4be463778b44e2fcf55b44349d2a08edf84f852d73ca008e7f48f0ae44b25715d6656717b7e4d0cf9cb", 0x8d}, {&(0x7f0000000f80)="c8107b6cf42aec066053402e00aaead975e0cc117c8a806b8716767064d3cc80445994f23b4dcd3996286d40a75d", 0x2e}, {&(0x7f0000000fc0)="2029512163c714fa4eb66b5bfbe811f6373fadcb6a7b7e2e9f55850112235c5c07a8d597e78169b5dcc7f0a83c9105e831e159b8708841247607067b6b5e4c1d5ff1a88588bc053c7371ac62375727", 0x4f}, {&(0x7f0000001040)="ad89aad8687f24041291f84556a3bf5e28f5726536cc715f5a34a5d05cb7bdc7a7c236848cf2d2e98d95f9795c4e9765d89684266038444b82ee3d321212edbc5dfaaedcd5f83ac6f830afc2117bad11072ca2a54fb6a2083d3ad0fea8426b87e22e669932e1b2233c4d6a0e06261d3a5d", 0x71}, {&(0x7f00000010c0)="886972c77200e706dee40a8e14dc1abe2db7d58cd966aa76bb0b144e5eb270ebe97f20de77adfefe9f5f0fd6f63519b5bae2398c31c456dab7b649dae7a3a0c54d4b428ca1bdc95d7ce220d03e78f83ce8dbbdf03dbf348c281e6841286798f5fbb6c7558d85acb5050368df4e9b61dca76e76a139f82760e3cca234597861db4bda72267609b3df8ba28d71144c5d429a4fb0f40e970b45a3ece7f78957cac26fd483ab8b746cbcbe4310f9b04fbc46df0d7ff857399c99baa68739232bbcd2077d7116a96d7ed1ceaf86aa54e9a3918281664ab72111cb980cec28e9", 0xdd}, {&(0x7f00000011c0)="9e4d1e7b5113", 0x6}, {&(0x7f0000001200)="ed5c881e90f6ba0f1d418c7085a39843b76885aef6cde03442530f4f0ca55b6cb47d0284e6b8ca27d3c25182bc6b8972a00a80574d7a1172c9ab8e7f199b516fde04b6149a2f8180b4ce2323478184c14bc603953c6c926a091108e2e5079fad5745285ee0f57702ed53298130c8aea8a1547e3695e974bb35e7b6bc4dc66255399ad43553539f554ff7f655376f862be5cf795bd91bcc64bde4e6050dc5a7a53c609470a7469b727448b3ced49b152eacccdf927714713de8061c4f0a7f1c3bda2b94c2f4d248f10e2a09ac9d98c919c6ebe69197d125fb", 0xd8}], 0x7, &(0x7f0000001380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}], 0x18}}, {{&(0x7f00000013c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001400)="2ea12e2fdda6a8cef6f213adee7839c4257d9ab293ec4d85c351310d4a59ccd4984c857e91f52d87817d9bc116550050017e0f48e57b5ad2072be1a4488501aa03195599080d19036b1f443fc0ef7e9c5f5d677b0529500aad90a3be2fdbaccd1cef0ce3b73f7e3822bd0b5ef34629c72cd3a932fcd69e731c2c4e554cf30ec5ca92a34155be7ee074b4c5296937a693b32f685a5153172c90c2c01d67c3826e6987f887a63f3d1e762d6ea454360ee53abcc6af758fd6af9d4a15ab5be87c5dee174838106c93e6b401e971983117f74f7d0a578bb4fc4dfad943db8496a83aa41c54fb5be9ceffb964b78f5953", 0xee}, {&(0x7f0000001500)="a53a81f2737893725c0f67c7f5af6d2521e159537000d769a4fa8045f4576d7ca0b67b8c2040f87eeb01aab8341c25ab1c07f17d565b22096edca679061710e491fcd43ad8d53b0679d4d45db010a6d73ba23b04b882d7441dd54e231a54b130ae6d3f3d998f9a69b6d666518b888a8888467b600bc89d2829e1b73460b39a2aa5", 0x81}, {&(0x7f00000015c0)="724e9c79af2d90018c8ae12fb2819f00dc0be1c72c7c5afaa85fc343cd1689fa1fe652a3c6368295f2a9479e3387b6d563c6e1d71f42d9b8b83360731f9c92b628c0f1ed9a50b625d9f75aac3e51021b08f9e0c1a52cfab3fb95d3a31776282e876f813ade821a3946dab94cceb3a041006f3234b19590a1e6ebe1d57951a84ffa3f1df6afb9effedf7e849cfb01149dbfd7357859621c2c6e9aebceba91889fefe2751f1d72ce1b5b2204395b332d8ffe5d29fe9b3a0b2ad470f65140dffbc3c5476a4c131b7a3e4320ddfbcb2393a65fd49010751968a0ff32", 0xda}], 0x3, &(0x7f0000001780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @remote}}}], 0x38}}], 0x2, 0x8041) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0xbc, r9, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8000000}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfc01}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x14}, {0x6, 0x11, 0x6}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001c00)={'syztnl1\x00', &(0x7f0000001ac0)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x4ac, 0xfff, {{0x3b, 0x4, 0x1, 0x22, 0xec, 0x68, 0x0, 0x42, 0x2f, 0x0, @loopback, @empty, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x15, 0x3, [{0x7, 0x7, "aa6d829dde"}, {0x5, 0x8, "68ba39041f36"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x8f, 0x1, 0x1, [{@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0x8}, {@empty, 0xffffffa1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x2c71}, {@rand_addr=0x64010102, 0x5}, {@private=0xa010101, 0x10439395}, {@loopback, 0x80}]}, @cipso={0x86, 0x53, 0x1, [{0x7, 0x6, "6ac94fdc"}, {0x7, 0x2}, {0x4, 0x9, "00762abe4cf754"}, {0x6, 0x12, "d66df4396b01ce9d8daedecd12e2e8b6"}, {0x1, 0xf, "ac3a096b0d2de2d2a7a63bcdc5"}, {0x6, 0x11, "7f441306b5e46019ffade5bef1ecf0"}, {0x2, 0xa, "0ed11610cbdaf7a9"}]}, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x7, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102]}]}}}}}) 01:15:18 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x7fffffff, 0x0, 'client0\x00', 0x5, "31bfbc1b67a1bb6b", "f0b416bfda00201436e94f95f84fc1f75d16fd1537c19b96727656577a4af08e", 0x7fff, 0x81}) readahead(0xffffffffffffffff, 0x9, 0x80000000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}}, 0x8000) r0 = getpid() r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) kcmp(0x0, r0, 0x0, r1, 0xffffffffffffffff) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000002c0)=0x2) r2 = getpgrp(r0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) clone3(&(0x7f0000000640)={0x81008800, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x2f}, &(0x7f00000003c0)=""/159, 0x9f, &(0x7f0000000480)=""/221, &(0x7f0000000600)=[r0, r2, 0x0, r0, r3, r0, r4], 0x7}, 0x58) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0xee, 0x0, 0xda, 0x0, 0x0, 0x7bf, 0x30022, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000006c0), 0x1}, 0x2008, 0x101, 0x6, 0x3, 0x52e5, 0x1, 0x8, 0x0, 0x2, 0x0, 0x8}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000880)={@dev, @private, 0x0}, &(0x7f00000008c0)=0xc) r6 = openat2(r1, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x8280, 0xcc, 0xe}, 0x18) r7 = fsmount(r6, 0x0, 0x2) getsockopt$inet_mreqn(r6, 0x0, 0x4, &(0x7f0000000980)={@initdev, @loopback, 0x0}, &(0x7f00000009c0)=0xc) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000a00)={@private, @private, 0x0}, &(0x7f0000000a40)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000001500)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000c40)={0x878, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x4, 0x6, 0x5}, {0x9, 0x5, 0x52, 0x4}, {0x100, 0x7, 0x20, 0xb6b}, {0x5, 0x8, 0x40, 0x3}, {0x8, 0x7, 0x7f, 0x7fff}, {0x9, 0x2, 0x3f, 0xfff}, {0x8, 0x40, 0x9, 0x9b}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x1000, 0x20, 0x81, 0x2}, {0x400, 0x8, 0x9, 0x7}, {0x7, 0x3f, 0x4}, {0x1, 0x7, 0x3e, 0xfff}, {0x4, 0x7f, 0x8, 0x96e}, {0x7e1e, 0xff, 0x1, 0x8}, {0x7f, 0x40, 0xc1, 0x54}, {0x81, 0xff, 0x2, 0x8000}, {0x9, 0x4, 0x66, 0x7}, {0x1, 0x7, 0xfa, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r9}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x90}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x3, 0x4, 0xbdd}, {0x9, 0x7, 0x4, 0x7fffffff}, {0x401, 0x2, 0x7, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}}]}}, {{0x8, 0x1, r5}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x619}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r9}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x4}, 0x4044) [ 65.881655] audit: type=1400 audit(1664846118.657:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:15:18 executing program 4: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @remote}, 0x7, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000000)='ip6_vti0\x00', 0x100000000, 0x8, 0x6}) r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x116, 0x0, 0x0, 0x0, 0x77, &(0x7f00000000c0)='nr0\x00', 0x9, 0x7ff, 0x3}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, 0x41, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000180)='netdevsim0\x00', 0x3f, 0x74, 0xdd4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000002c0)={'ah\x00'}, &(0x7f0000000300)=0x1e) r2 = mq_open(&(0x7f0000000340)='netdevsim0\x00', 0x2, 0x62, &(0x7f0000000380)={0xfffffffffffffc01, 0x9, 0x7, 0x9a4}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000003c0)={{r2}, 0x0, 0x0, @unused=[0x0, 0xff, 0x1, 0x9], @devid}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000013c0), &(0x7f0000001400)='./file0\x00', 0x8, 0x1) r3 = fspick(r0, &(0x7f0000001440)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000001480)='\x00', &(0x7f00000014c0)='./file0\x00', r0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001500)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @remote}, {0x2, 0x4e21, @local}, 0x20, 0x0, 0x0, 0x0, 0x520a, 0x0, 0x1a, 0xffffffff, 0x2}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001580)={@empty, @dev={0xac, 0x14, 0x14, 0xe}, 0x0, 0x2, [@rand_addr=0x64010100, @multicast2]}, 0x18) fcntl$setlease(r0, 0x400, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000015c0), 0x480, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) dup2(r0, r4) r5 = fsopen(&(0x7f0000001600)='ubifs\x00', 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000001700)={{r2}, 0x0, 0x1a, @inherit={0x78, &(0x7f0000001680)={0x0, 0x6, 0x3, 0x6, {0x32, 0x2, 0x7f, 0x1000, 0x4}, [0x1f, 0xd4, 0x1, 0x7fffffff, 0x0, 0xfffffffffffffffe]}}, @devid}) 01:15:18 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4) pread64(r0, &(0x7f0000000140)=""/77, 0x4d, 0x2b2) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='/dev/zero\x00', 0x0, r0) tee(r0, r0, 0x7fff, 0xc) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0xd0, 0x4, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x8000, 0x6}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x8, 0x2, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x8, 0x1, 0x0, 0x10001}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2440001}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x234, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3947b8b408481c64}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000000}, 0x8d4) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000012c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000000840)={0xa40, r6, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x57}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x108, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1000, 0x6, 0x2, 0x9, 0x0, 0x1000, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xddcd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}]}]}, @NL80211_ATTR_TID_CONFIG={0x8e8, 0x11d, 0x0, 0x1, [{0x1a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x9, 0x39, 0x7, 0x9, 0x8, 0x6]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x3, 0x2}, {0x2, 0x6}, {0x5, 0x6}, {0x0, 0x6}, {0x7, 0x8}, {0x7, 0xa}, {0x1, 0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x7, 0x2}, {0x6}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x7, 0xa}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x3}, {0x6, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x2}, {0x4, 0x4}, {0x4}, {0x2}, {}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x80, 0x6, 0x7, 0x1, 0x2, 0x9c, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x4}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x8}, {0x5, 0x3}, {0x6, 0x9}, {0x7, 0x1}, {0x1}, {0x4, 0x3}, {0x7, 0x9}, {0x6, 0x8}, {0x6, 0x6}, {0x4, 0x4}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x3, 0x1}, {0x0, 0x9}, {0x5, 0x2}, {0x5, 0x4}, {0x6, 0x8}, {0x7, 0x7}, {0x1, 0x1}, {0x4, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0xa}, {0x6}, {0x6, 0x2}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x7}, {0x5, 0x6}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x8}, {0x6, 0x6}, {0x4, 0x1}, {0x2}, {0x6, 0x8}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x3}, {0x7, 0x3}, {0x4, 0x4}, {0x1, 0x2}, {0x6, 0x7}, {0x6, 0x8}, {0x6, 0x5}, {0x5, 0x4}, {0x5}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0xa}, {}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x9}, {0x4, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0x4}, {0x4, 0x4}, {0x0, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x6}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0xb, 0x6, 0x18, 0xbc4d113bb83a5f6c, 0x2, 0x1b, 0x0, 0x12, 0xc, 0x2, 0x36, 0x36, 0x3, 0x50, 0x1, 0x36, 0x18, 0x61, 0x18, 0xc, 0x1b, 0x18, 0xb, 0x36, 0x24, 0x24, 0x5, 0x16, 0x1b]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff, 0x7, 0x3, 0x3ff, 0x20cc, 0x5b9f, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb6f1, 0x1, 0x8, 0x1, 0x1, 0x100, 0x8001, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x27, 0x24, 0x36, 0x30, 0x60, 0x5, 0x6, 0x60, 0x30, 0x1b, 0x6, 0x3, 0x1, 0x52, 0x1b, 0x12, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x9, 0x9, 0xff, 0x8001, 0x6, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbd}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x30}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x29a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x94}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xee}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x63}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x554, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x60, 0x62, 0x2, 0x6c, 0x6, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xcbd, 0x9, 0x3bb7, 0xc6, 0xd2e, 0x4b3, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x10}, {0x7, 0x8}, {0x6, 0xa}, {0x3}, {0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x8}, {0x5}, {0x5, 0x9}, {0x3, 0x2}, {0x6, 0x8}, {0x7, 0x5}, {0x5, 0x3}, {0x1, 0x4}, {0x5, 0x2}, {0x7, 0x1}, {0x4}, {0x4, 0x7}, {0x2, 0x9}, {0x2, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x3, 0x7}]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0xa}, {0x3, 0x2}, {0x5, 0x9}, {0x5, 0x2}, {0x3}, {0x2, 0x9}, {0x4, 0x3}, {0x2, 0x2}, {0x6, 0x7}, {0x3, 0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x8}, {0x6}, {0x1, 0x1}, {0x3, 0x4}, {0x5, 0x1}, {0x7}, {0x2}, {0x7, 0x4}, {0x7, 0x3}, {0x7, 0x3}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x8}, {0x4, 0x8}, {0x6, 0xa}, {0x7, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x2, 0x9}, {0x7, 0x9}, {0x2, 0x8}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x5}, {0x5, 0x9}, {0x0, 0xa}, {0x3, 0x8}, {0x2}, {0x7, 0x5}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x4, 0x8}, {0x6, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x1]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x0, 0x5, 0x16, 0x30, 0x30, 0x4, 0xb, 0xb, 0x24, 0x9, 0xb, 0x12, 0x0, 0x1b, 0x9, 0x30, 0x9, 0x16]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x6}, {0x0, 0x4}, {}, {0x3, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x6, 0x7}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x7}, {0x5, 0x4}, {0x5, 0xa}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0x2}, {0x3, 0x6}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x5}, {0x2, 0x3}, {0x0, 0x4}, {0x5, 0x5}, {0x2, 0x4}, {0x4, 0x4}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0x1}, {0x6, 0x2}, {0x7}, {0x2, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x6, 0x5}, {0x4, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x7}, {0x5}, {0x3, 0x3}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x5, 0x8}, {0x3, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x6}, {0x6, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8cb3, 0x3, 0xff, 0x1, 0x4, 0x20, 0x81]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x28, 0x30, 0x4, 0xc, 0xb, 0x18, 0x1b, 0x6, 0x4, 0xc, 0xb, 0x1b, 0x60, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xc0, 0x9, 0x4a, 0x0, 0x7f, 0x8000]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x7ff, 0x6, 0xcf, 0x81, 0x2, 0xffff, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x9}, {0x3, 0x1}, {0x2, 0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x6, 0x6}, {0x4, 0x3}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0x4}, {0x2, 0x5}, {0x4, 0xa}, {0x7, 0x9}, {0x1}, {0x7}, {0x1, 0x2}, {0x7, 0x6}, {0x4, 0x5}, {0x6}, {0x5, 0x9}, {0x1, 0x4}, {0x3, 0x6}, {0x4, 0x6}, {0x4, 0x5}, {}, {0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x6}, {0x5, 0x3}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x7, 0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0x9}, {0x7, 0x3}, {0x6, 0x6}, {0x4}, {0x5, 0x5}, {0x5, 0x8}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x2}, {0x4}, {0x5}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x3ff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x5, 0x6c, 0x60, 0x6, 0x24, 0x48, 0x1b, 0x36, 0x16, 0x12, 0x0, 0x3, 0x48, 0x9, 0x1, 0x6a, 0x1b, 0x36, 0x48, 0x30, 0x36]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x9, 0x1, 0x36, 0x48, 0x48, 0x2, 0x4, 0x6, 0x6, 0x2, 0x36, 0x2, 0x48, 0xb, 0x7e, 0x9, 0x18, 0x16, 0x9, 0x8]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x9, 0x78, 0x5, 0x5, 0x81, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x21}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x53}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x2}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x8}, {0x4, 0x1}, {0x1, 0x3}, {0x4, 0x2}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x3, 0x5}, {0x6, 0x7}, {0x1, 0x2}, {0x6, 0xa}, {0x4, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x3}, {0x6, 0xa}, {0x2}, {0x4, 0x6}, {0x0, 0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x9}, {0x7, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x24, 0x48, 0x5, 0xb, 0x9, 0x24, 0x1, 0x12, 0x24, 0x2, 0x12, 0xb, 0xb, 0x1, 0x5, 0x18, 0x48, 0x24, 0xc, 0x1b, 0x1b, 0x6c]}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0xb, 0x36, 0x9, 0x48, 0x4, 0x36, 0xb, 0x18, 0x5, 0x60, 0x1b, 0x30]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x12, 0x36, 0x36, 0x66, 0x18, 0x2, 0x2, 0x1, 0x12, 0x4, 0x6c, 0x36, 0x1, 0x30, 0x5, 0x30, 0x19, 0xb, 0x48, 0x60, 0x30, 0x60, 0x16]}, @NL80211_TXRATE_HT={0xa, 0x2, [{}, {0x3, 0x3}, {0x1, 0x1e}, {0x6, 0x8}, {0x3, 0x9}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e8, 0x2, 0x48, 0x0, 0x1ff, 0x8, 0x6363]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x9, 0xc, 0x24, 0xb, 0x1b, 0x24, 0x3, 0x5, 0x16, 0x60, 0x4, 0x3, 0x1b, 0x12, 0x60, 0x18, 0x36, 0x1b, 0x24, 0x3, 0x30, 0xb, 0x12, 0x6, 0x2d, 0x30, 0x1c]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0xa}, {0x5, 0x7}, {0x7, 0x4}, {0x2, 0x8}, {0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0x5}, {0x6, 0x6}, {}, {0x4, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x3, 0x8}, {0x0, 0x8}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2a, 0x9, 0x6, 0x1, 0x6fd0, 0x0, 0xa9c]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x2, 0xc, 0x5, 0x5, 0x36, 0xc, 0x6d, 0x6c, 0x6d, 0x2]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x4, 0xb, 0x6c, 0xc, 0x2, 0x2, 0x9, 0x6, 0x12, 0x60, 0x6c]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xec3e, 0xcb8, 0x8, 0xe3, 0xfffb, 0xfff, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x2}, {0x6, 0xa}, {0x3, 0x3}, {0x7, 0x3}, {0x7, 0x8}, {0x0, 0x2}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x5}, {0x3}, {0x2, 0xa}, {0x2, 0x8}, {0x7, 0x2}, {0x2, 0x8}, {0x2}, {0x5, 0xa}, {0x0, 0x2}, {0x5}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x2, 0x5}, {0x1}, {0x0, 0x7}, {0x2, 0x4}, {0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0xa}, {0x6, 0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x7}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0x7}, {0x3, 0x7}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0xa}, {0x5, 0x9}, {0x1, 0xa}, {0x4, 0xa}, {0x5, 0x6}, {0x1}, {0x5, 0x3}, {0x4, 0x9}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x7, 0x7}, {0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0xa}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0xa7, 0x4, 0xfff7, 0x4, 0x26b, 0x8000, 0x893]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x60, 0x1b, 0x12, 0x6, 0x37fe489f244a0f32, 0x18, 0x60, 0x6c, 0x1b, 0x17, 0x18, 0x30, 0x1b, 0x6, 0x4, 0x2, 0x1b]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x2}, {0x7, 0x8}, {0x1}, {0x0, 0x8}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x7}, {0x6}, {0x4, 0x4}, {0x2, 0x9}, {0x4}, {0x3, 0x5}, {0x3, 0x8}, {0x6, 0x5}, {0x1, 0x5}, {0x2, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x5, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x7}, {0x2, 0xa}, {0x2, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x3}, {0x6, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0x6}, {0x3, 0x5}]}]}, @NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x7}, {0x7, 0x5}, {0x4, 0x8}, {0x5, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x2, 0x5}, {0x4, 0xa}, {0x7, 0x7}, {0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x2, 0x7}, {0x4, 0x9}, {0x2, 0x3}, {0x0, 0xa}, {0x7, 0xa}, {0x5, 0xa}, {0x1, 0xa}, {0x6, 0x9}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x4, 0x9}, {0x3, 0xa}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x6, 0x7}, {0x5, 0x6}, {0x5}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0xc, 0xc, 0x2, 0x3, 0x12, 0x9, 0x5, 0x30, 0x36, 0x1, 0x18, 0xb, 0x30, 0x6c, 0x10, 0x5, 0x0, 0x36, 0x4, 0x16, 0xc, 0x36, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x1, 0xb5bf, 0x0, 0x7, 0x6, 0x3]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x4}, {0x0, 0x8}, {0x5, 0x3}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x8}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x2, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0x7}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {}, {0x1, 0x1}, {0x2, 0x3}, {0x5, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x1}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0xa}, {0x7, 0x9}, {0x5, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x2, 0x7}, {0x6, 0x3}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x7, 0x6}, {0x0, 0x9}, {0x4, 0x2}, {0x7, 0x4}, {0x5, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x6, 0x4}, {0x4, 0x1}, {0x4, 0xa}, {0x7}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0xa}, {0x0, 0xa}, {0x7, 0x8}, {0x3, 0x5}, {0x4, 0x8}, {0x1}, {0x4, 0x9}, {0x1, 0x2}, {0x3, 0x5}, {0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x48, 0xa, 0xb, 0x16, 0x48, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x9, 0x9, 0xbf, 0x401, 0x8, 0x6]}}]}]}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x50}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x1}, {0x1, 0xa}, {0x3, 0x6}, {0x7, 0x8}, {0x6, 0x3}, {0x2}, {0x6, 0x8}, {0x3}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x2}, {0x4, 0x1}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x9}, {0x6, 0x8}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x5, 0xa}, {0x3, 0xa}, {0x2, 0x3}, {0x4, 0x4}, {0x7, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x3}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x7}, {0x6}, {0x0, 0x7}, {0x3, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x6c, 0xc, 0x16, 0x36, 0x6c, 0x12, 0x9, 0x3d, 0x18, 0x18, 0x1b, 0x36, 0x2, 0x6, 0x2, 0x2, 0x1, 0x24, 0x2, 0x16, 0x36, 0x18, 0x2e, 0x4, 0x12, 0x48, 0x24]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x1}, {0x3, 0x7}, {0x2, 0x9}, {0x5, 0x7}, {0x4}, {0x3, 0x6}, {0x7, 0x1}, {0x5, 0x2}, {0x6}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0x7}, {0x6, 0x1}, {0x1}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x401, 0xb12, 0x1, 0x9, 0x7f, 0x49]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x1, 0x1f, 0x1, 0x5, 0x5, 0x51c, 0x7]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8001, 0x88af, 0x3062, 0x8, 0x6, 0x51c8, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x9}, {0x5, 0x7}, {0x6, 0x1}, {0x3}, {0x0, 0xa}, {0x6, 0x7}, {0x7, 0x2}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0xa}, {}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x7}, {0x6, 0x9}, {0x4, 0x7}, {0x2, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x7, 0x4}, {0x2, 0x3}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x5}, {0x4}, {0x1, 0x5}, {0x2}, {0x5, 0x7}, {0x6, 0x1}, {0x7, 0x3}, {0x4, 0x8}, {0x4, 0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x2}, {0x2}, {0x1, 0x1}, {0x7, 0x9}, {0x6, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x4}, {0x3}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x3, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0x4}, {0x6}, {0x1, 0x1}, {0x7, 0x1}]}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}]}]}]}, 0xa40}, 0x1, 0x0, 0x0, 0x4044000}, 0x8040) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000001300)=@hopopts={0x5c, 0x1d, '\x00', [@generic={0x6, 0xc4, "3a09bfe1de7a89ba187d34ff86534cc71d00909a1533e8ffb188705787b0e3b1207d6da701add33cd86f697e8997124f692490b73f61da45920d1010c585004df5c04cd304601046b8bfd2dd157b94e8aa8df09e06c75341663ccf78497a40e92728243cc18c651cb9ee212cabd4ca7d99319a72b8d38aa404a95135eb366e3d5b10e55a83ed15430f8b5d8b25c6b4394eb9d136485390a9a3daef8ea7aeefb7c1036cf5c6c259c5b247a698387a25efafc1b2d091e0a01b90b2c1bc6025bbc6338266a4"}, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x0, [0x8000, 0x5, 0x3]}}]}, 0xf8) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001400)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r7, 0x50009402, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001440), 0x82902, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000001580)={'sit0\x00', &(0x7f0000001500)={'ip6gre0\x00', r4, 0x2f, 0x5, 0x20, 0xe59b, 0x35, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x10, 0x0, 0x1f}}) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/198, 0xc6}, {&(0x7f00000016c0)=""/68, 0x44}, {&(0x7f0000001740)=""/58, 0x3a}], 0x3, &(0x7f00000017c0)=""/99, 0x63}, 0x65}, {{&(0x7f0000001840)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000018c0)=""/128, 0x80}, {&(0x7f0000001940)=""/162, 0xa2}], 0x2}, 0xef0}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001a40)=""/105, 0x69}, {&(0x7f0000001ac0)=""/166, 0xa6}, {&(0x7f0000001b80)=""/68, 0x44}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/230, 0xe6}, {&(0x7f0000002d00)=""/254, 0xfe}, {&(0x7f0000002e00)=""/111, 0x6f}, {&(0x7f0000002e80)=""/175, 0xaf}], 0x8, &(0x7f0000002fc0)}, 0x7}, {{&(0x7f0000003000)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003080)=""/205, 0xcd}, {&(0x7f0000003180)=""/68, 0x44}, {&(0x7f0000003200)=""/199, 0xc7}, {&(0x7f0000003300)=""/16, 0x10}, {&(0x7f0000003340)=""/136, 0x88}, {&(0x7f0000003400)=""/142, 0x8e}], 0x6, &(0x7f0000003540)=""/204, 0xcc}, 0x6}], 0x4, 0x40000060, &(0x7f0000003740)) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000003c40)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003c00)={&(0x7f0000003a00)={0x1fc, 0x0, 0x110, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4040811}, 0x4) 01:15:18 executing program 5: sync_file_range(0xffffffffffffffff, 0x7e, 0x6, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000000)) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = inotify_init1(0x80800) fcntl$notify(r0, 0x402, 0x80000021) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000040)) sendfile(r0, r0, &(0x7f00000000c0)=0x1, 0x401) fadvise64(r0, 0x3, 0xfffffffffffff5fe, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7) r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x1, 0x80, 0x8, 0x0, 0x100, 0x2, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x4}, 0x19b04, 0xb7, 0x78, 0x0, 0x8, 0x1, 0x78, 0x0, 0x800, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0xc2, 0x1, 0x2, 0x0, 0x9, 0x20414, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x10, 0x9}, 0x400, 0x6, 0x0, 0x7, 0x9, 0xf029, 0x278a, 0x0, 0x8, 0x0, 0x800000000}, 0xffffffffffffffff, 0xa, r1, 0x8) r3 = syz_open_dev$vcsu(&(0x7f0000000200), 0x3f, 0x684080) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000240)={{0x7, 0x9}, {0xb, 0x3f}, 0x5, 0x2, 0x4}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)={0xffffffffffffff00, 0xffffffffffffff0e, 0x5, 0x0, 0x0, [{{r0}, 0x81}, {{r3}, 0x7}, {{r1}, 0x2}, {{r3}, 0x1}, {{r3}, 0xffffffffffffff00}]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000380)={0x1, 0x6}) fchdir(r0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x20, 0x5, 0x1f, 0x81, 0x0, 0x43, 0x814, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xae, 0x8}, 0x4000, 0x7fffffff, 0x7ff, 0x2, 0x4, 0x9, 0xd752, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0xa) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x0, 0x0) faccessat2(r4, &(0x7f0000000480)='./file0\x00', 0x4, 0x1100) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000500)={0x93e3, 0x7, 0x4, 0x8, 0x8}) 01:15:18 executing program 7: restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() 01:15:18 executing program 6: arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) [ 67.283009] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.286791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.288431] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.294281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.295639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.300988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.308721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.312777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.346176] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.348230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.349551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.351228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.353572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.361858] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.372499] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.406075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.412938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.416147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.418610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.420203] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.421806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.423081] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.426773] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.428313] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.429241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.430706] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.433077] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.434163] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.435553] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.436972] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.438264] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.442269] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.443475] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.443725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.444731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.445885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.448644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.449840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.452865] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.454736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.455925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.463344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.464485] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.464619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.468902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.474037] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.475751] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.479499] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.492814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.495125] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.497802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.500100] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.501214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.502537] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.510035] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.513950] Bluetooth: hci6: HCI_REQ-0x0c1a [ 69.428796] Bluetooth: hci1: command 0x0409 tx timeout [ 69.429562] Bluetooth: hci0: command 0x0409 tx timeout [ 69.492737] Bluetooth: hci4: command 0x0409 tx timeout [ 69.492769] Bluetooth: hci3: command 0x0409 tx timeout [ 69.493420] Bluetooth: hci5: command 0x0409 tx timeout [ 69.494094] Bluetooth: hci7: command 0x0409 tx timeout [ 69.556527] Bluetooth: hci2: command 0x0409 tx timeout [ 69.556563] Bluetooth: hci6: command 0x0409 tx timeout [ 71.476449] Bluetooth: hci1: command 0x041b tx timeout [ 71.476933] Bluetooth: hci0: command 0x041b tx timeout [ 71.540443] Bluetooth: hci7: command 0x041b tx timeout [ 71.541714] Bluetooth: hci5: command 0x041b tx timeout [ 71.542110] Bluetooth: hci3: command 0x041b tx timeout [ 71.542863] Bluetooth: hci4: command 0x041b tx timeout [ 71.604498] Bluetooth: hci2: command 0x041b tx timeout [ 71.605555] Bluetooth: hci6: command 0x041b tx timeout [ 73.524789] Bluetooth: hci0: command 0x040f tx timeout [ 73.525259] Bluetooth: hci1: command 0x040f tx timeout [ 73.588453] Bluetooth: hci4: command 0x040f tx timeout [ 73.588893] Bluetooth: hci3: command 0x040f tx timeout [ 73.589289] Bluetooth: hci5: command 0x040f tx timeout [ 73.589727] Bluetooth: hci7: command 0x040f tx timeout [ 73.653589] Bluetooth: hci6: command 0x040f tx timeout [ 73.654035] Bluetooth: hci2: command 0x040f tx timeout [ 75.572640] Bluetooth: hci1: command 0x0419 tx timeout [ 75.573650] Bluetooth: hci0: command 0x0419 tx timeout [ 75.636535] Bluetooth: hci7: command 0x0419 tx timeout [ 75.637433] Bluetooth: hci5: command 0x0419 tx timeout [ 75.638208] Bluetooth: hci3: command 0x0419 tx timeout [ 75.639057] Bluetooth: hci4: command 0x0419 tx timeout [ 75.700577] Bluetooth: hci2: command 0x0419 tx timeout [ 75.701465] Bluetooth: hci6: command 0x0419 tx timeout 01:16:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x40, 0x81) [ 124.923705] audit: type=1400 audit(1664846177.698:7): avc: denied { open } for pid=3829 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.926705] audit: type=1400 audit(1664846177.699:8): avc: denied { kernel } for pid=3829 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.958264] ------------[ cut here ]------------ [ 124.958294] [ 124.958299] ====================================================== [ 124.958304] WARNING: possible circular locking dependency detected [ 124.958310] 6.0.0-rc7-next-20220930 #1 Not tainted [ 124.958321] ------------------------------------------------------ [ 124.958326] syz-executor.3/3831 is trying to acquire lock: [ 124.958337] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 124.958404] [ 124.958404] but task is already holding lock: [ 124.958408] ffff88800e313020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.958452] [ 124.958452] which lock already depends on the new lock. [ 124.958452] [ 124.958456] [ 124.958456] the existing dependency chain (in reverse order) is: [ 124.958462] [ 124.958462] -> #3 (&ctx->lock){....}-{2:2}: [ 124.958485] _raw_spin_lock+0x2a/0x40 [ 124.958504] __perf_event_task_sched_out+0x53b/0x18d0 [ 124.958523] __schedule+0xedd/0x2470 [ 124.958546] schedule+0xda/0x1b0 [ 124.958569] futex_wait_queue+0xf5/0x1e0 [ 124.958588] futex_wait+0x28e/0x690 [ 124.958606] do_futex+0x2ff/0x380 [ 124.958622] __x64_sys_futex+0x1c6/0x4d0 [ 124.958639] do_syscall_64+0x3b/0x90 [ 124.958668] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.958689] [ 124.958689] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 124.958713] _raw_spin_lock_nested+0x30/0x40 [ 124.958731] raw_spin_rq_lock_nested+0x1e/0x30 [ 124.958752] task_fork_fair+0x63/0x4d0 [ 124.958790] sched_cgroup_fork+0x3d0/0x540 [ 124.958826] copy_process+0x4183/0x6e20 [ 124.958852] kernel_clone+0xe7/0x890 [ 124.958873] user_mode_thread+0xad/0xf0 [ 124.958890] rest_init+0x24/0x250 [ 124.958910] arch_call_rest_init+0xf/0x14 [ 124.958938] start_kernel+0x4c6/0x4eb [ 124.958964] secondary_startup_64_no_verify+0xe0/0xeb [ 124.958987] [ 124.958987] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 124.959011] _raw_spin_lock_irqsave+0x39/0x60 [ 124.959029] try_to_wake_up+0xab/0x1930 [ 124.959052] up+0x75/0xb0 [ 124.959076] __up_console_sem+0x6e/0x80 [ 124.959102] console_unlock+0x46a/0x590 [ 124.959129] vprintk_emit+0x1bd/0x560 [ 124.959156] vprintk+0x84/0xa0 [ 124.959183] _printk+0xba/0xf1 [ 124.959202] kauditd_hold_skb.cold+0x3f/0x4e [ 124.959230] kauditd_send_queue+0x233/0x290 [ 124.959255] kauditd_thread+0x5f9/0x9c0 [ 124.959278] kthread+0x2ed/0x3a0 [ 124.959302] ret_from_fork+0x22/0x30 [ 124.959323] [ 124.959323] -> #0 ((console_sem).lock){....}-{2:2}: [ 124.959346] __lock_acquire+0x2a02/0x5e70 [ 124.959384] lock_acquire+0x1a2/0x530 [ 124.959411] _raw_spin_lock_irqsave+0x39/0x60 [ 124.959429] down_trylock+0xe/0x70 [ 124.959454] __down_trylock_console_sem+0x3b/0xd0 [ 124.959482] vprintk_emit+0x16b/0x560 [ 124.959510] vprintk+0x84/0xa0 [ 124.959537] _printk+0xba/0xf1 [ 124.959554] report_bug.cold+0x72/0xab [ 124.959582] handle_bug+0x3c/0x70 [ 124.959610] exc_invalid_op+0x14/0x50 [ 124.959639] asm_exc_invalid_op+0x16/0x20 [ 124.959659] group_sched_out.part.0+0x2c7/0x460 [ 124.959689] ctx_sched_out+0x8f1/0xc10 [ 124.959717] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.959736] __schedule+0xedd/0x2470 [ 124.959760] schedule+0xda/0x1b0 [ 124.959792] futex_wait_queue+0xf5/0x1e0 [ 124.959816] futex_wait+0x28e/0x690 [ 124.959833] do_futex+0x2ff/0x380 [ 124.959849] __x64_sys_futex+0x1c6/0x4d0 [ 124.959866] do_syscall_64+0x3b/0x90 [ 124.959895] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.959917] [ 124.959917] other info that might help us debug this: [ 124.959917] [ 124.959921] Chain exists of: [ 124.959921] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 124.959921] [ 124.959947] Possible unsafe locking scenario: [ 124.959947] [ 124.959950] CPU0 CPU1 [ 124.959954] ---- ---- [ 124.959958] lock(&ctx->lock); [ 124.959967] lock(&rq->__lock); [ 124.959978] lock(&ctx->lock); [ 124.959988] lock((console_sem).lock); [ 124.959998] [ 124.959998] *** DEADLOCK *** [ 124.959998] [ 124.960001] 2 locks held by syz-executor.3/3831: [ 124.960013] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 124.960064] #1: ffff88800e313020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.960109] [ 124.960109] stack backtrace: [ 124.960113] CPU: 1 PID: 3831 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 124.960135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.960147] Call Trace: [ 124.960153] [ 124.960160] dump_stack_lvl+0x8b/0xb3 [ 124.960191] check_noncircular+0x263/0x2e0 [ 124.960219] ? format_decode+0x26c/0xb50 [ 124.960246] ? print_circular_bug+0x450/0x450 [ 124.960275] ? simple_strtoul+0x30/0x30 [ 124.960301] ? lock_chain_count+0x20/0x20 [ 124.960330] ? format_decode+0x26c/0xb50 [ 124.960360] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 124.960390] __lock_acquire+0x2a02/0x5e70 [ 124.960427] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 124.960466] lock_acquire+0x1a2/0x530 [ 124.960494] ? down_trylock+0xe/0x70 [ 124.960524] ? lock_release+0x750/0x750 [ 124.960559] ? vprintk+0x84/0xa0 [ 124.960589] _raw_spin_lock_irqsave+0x39/0x60 [ 124.960609] ? down_trylock+0xe/0x70 [ 124.960636] down_trylock+0xe/0x70 [ 124.960663] ? vprintk+0x84/0xa0 [ 124.960692] __down_trylock_console_sem+0x3b/0xd0 [ 124.960722] vprintk_emit+0x16b/0x560 [ 124.960754] vprintk+0x84/0xa0 [ 124.960796] _printk+0xba/0xf1 [ 124.960822] ? record_print_text.cold+0x16/0x16 [ 124.960849] ? report_bug.cold+0x66/0xab [ 124.960880] ? group_sched_out.part.0+0x2c7/0x460 [ 124.960912] report_bug.cold+0x72/0xab [ 124.960944] handle_bug+0x3c/0x70 [ 124.960974] exc_invalid_op+0x14/0x50 [ 124.961005] asm_exc_invalid_op+0x16/0x20 [ 124.961027] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.961062] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.961082] RSP: 0018:ffff888015ed78f8 EFLAGS: 00010006 [ 124.961097] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.961110] RDX: ffff8880184fd040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 124.961123] RBP: ffff88803de90000 R08: 0000000000000005 R09: 0000000000000001 [ 124.961136] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800e313000 [ 124.961148] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 124.961167] ? group_sched_out.part.0+0x2c7/0x460 [ 124.961202] ? group_sched_out.part.0+0x2c7/0x460 [ 124.961236] ctx_sched_out+0x8f1/0xc10 [ 124.961269] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.961294] ? lock_is_held_type+0xd7/0x130 [ 124.961317] ? __perf_cgroup_move+0x160/0x160 [ 124.961336] ? set_next_entity+0x304/0x550 [ 124.961369] ? lock_is_held_type+0xd7/0x130 [ 124.961394] __schedule+0xedd/0x2470 [ 124.961423] ? io_schedule_timeout+0x150/0x150 [ 124.961449] ? futex_wait_setup+0x166/0x230 [ 124.961475] schedule+0xda/0x1b0 [ 124.961500] futex_wait_queue+0xf5/0x1e0 [ 124.961522] futex_wait+0x28e/0x690 [ 124.961543] ? futex_wait_setup+0x230/0x230 [ 124.961566] ? wake_up_q+0x8b/0xf0 [ 124.961589] ? do_raw_spin_unlock+0x4f/0x220 [ 124.961622] ? futex_wake+0x158/0x490 [ 124.961650] ? fd_install+0x1f9/0x640 [ 124.961675] do_futex+0x2ff/0x380 [ 124.961695] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 124.961723] __x64_sys_futex+0x1c6/0x4d0 [ 124.961745] ? __x64_sys_futex_time32+0x480/0x480 [ 124.961770] ? syscall_enter_from_user_mode+0x1d/0x50 [ 124.961806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 124.961837] do_syscall_64+0x3b/0x90 [ 124.961867] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.961890] RIP: 0033:0x7f4298b0eb19 [ 124.961904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.961923] RSP: 002b:00007f4296084218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.961942] RAX: ffffffffffffffda RBX: 00007f4298c21f68 RCX: 00007f4298b0eb19 [ 124.961955] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4298c21f68 [ 124.961968] RBP: 00007f4298c21f60 R08: 0000000000000000 R09: 0000000000000000 [ 124.961980] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4298c21f6c [ 124.961992] R13: 00007ffe68d530bf R14: 00007f4296084300 R15: 0000000000022000 [ 124.962014] [ 125.062770] WARNING: CPU: 1 PID: 3831 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 125.063917] Modules linked in: [ 125.064306] CPU: 1 PID: 3831 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 125.065256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.066590] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.067249] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.069392] RSP: 0018:ffff888015ed78f8 EFLAGS: 00010006 [ 125.070036] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.070883] RDX: ffff8880184fd040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 125.071718] RBP: ffff88803de90000 R08: 0000000000000005 R09: 0000000000000001 [ 125.072563] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800e313000 [ 125.073384] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 125.074216] FS: 00007f4296084700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 125.075150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.075871] CR2: 00007ff706cd0310 CR3: 000000000d388000 CR4: 0000000000350ee0 [ 125.076693] Call Trace: [ 125.077037] [ 125.077312] ctx_sched_out+0x8f1/0xc10 [ 125.077798] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.078471] ? lock_is_held_type+0xd7/0x130 [ 125.079000] ? __perf_cgroup_move+0x160/0x160 [ 125.079547] ? set_next_entity+0x304/0x550 [ 125.080075] ? lock_is_held_type+0xd7/0x130 [ 125.080577] __schedule+0xedd/0x2470 [ 125.081058] ? io_schedule_timeout+0x150/0x150 [ 125.081602] ? futex_wait_setup+0x166/0x230 [ 125.082126] schedule+0xda/0x1b0 [ 125.082541] futex_wait_queue+0xf5/0x1e0 [ 125.083041] futex_wait+0x28e/0x690 [ 125.083494] ? futex_wait_setup+0x230/0x230 [ 125.084020] ? wake_up_q+0x8b/0xf0 [ 125.084446] ? do_raw_spin_unlock+0x4f/0x220 [ 125.085004] ? futex_wake+0x158/0x490 [ 125.085459] ? fd_install+0x1f9/0x640 [ 125.085935] do_futex+0x2ff/0x380 [ 125.086342] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 125.087024] __x64_sys_futex+0x1c6/0x4d0 [ 125.087514] ? __x64_sys_futex_time32+0x480/0x480 [ 125.088094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.088700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.089342] do_syscall_64+0x3b/0x90 [ 125.089797] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.090420] RIP: 0033:0x7f4298b0eb19 [ 125.090872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.093054] RSP: 002b:00007f4296084218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.093944] RAX: ffffffffffffffda RBX: 00007f4298c21f68 RCX: 00007f4298b0eb19 [ 125.094761] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4298c21f68 [ 125.095599] RBP: 00007f4298c21f60 R08: 0000000000000000 R09: 0000000000000000 [ 125.096417] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4298c21f6c [ 125.097252] R13: 00007ffe68d530bf R14: 00007f4296084300 R15: 0000000000022000 [ 125.098104] [ 125.098377] irq event stamp: 740 [ 125.098785] hardirqs last enabled at (739): [] syscall_enter_from_user_mode+0x1d/0x50 [ 125.099894] hardirqs last disabled at (740): [] __schedule+0x1225/0x2470 [ 125.100855] softirqs last enabled at (466): [] __irq_exit_rcu+0x11b/0x180 [ 125.101821] softirqs last disabled at (431): [] __irq_exit_rcu+0x11b/0x180 [ 125.102796] ---[ end trace 0000000000000000 ]--- [ 125.452438] audit: type=1400 audit(1664846178.227:9): avc: denied { write } for pid=3829 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 01:16:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x40, 0x81) 01:16:18 executing program 5: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffd, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000080)="a9be63234f5f187df6441408f3494344ae43989bf56795b1b0f382aabead7635c9a53b70db00854f95e6f2d33d15c691a26ebd3c651b69dada3bf31569201aaca9773ad17cdccc854d6789f1c269b4a12a7f028657e042ff77be5b1191cb3cbd051575e5bae89bdf8e1137013bcdf64a19c957", 0x73, 0xfff}, {&(0x7f0000000140)="0ee697a7ab3c99272353e6e88f97c06d026b5f97e4cde322e828855cf03e89380b8044b2200d467ac899181e08920023cf8ed94595f1b2afc2f8cf041fc0b82e0688f3f7a8256259ebf3ee821925665198e22bd2df69169f1c3279062c2c70f09f4b", 0x62, 0x1fffe000}, {&(0x7f00000001c0)="e8fc2771bcb7d359b669b827709b8e31d788d368fe60adb2", 0x18, 0x2}, {&(0x7f0000000300)="7c73a52d23af0b0fb964c9444534b28275b381270c8a647a954794e309fc9ec70c4202c14988a28c4449513b1837dc844c877b521ebd54046b9539a4acfff4a6477050ee309ff6dd3bbc269c5dd2097534", 0x51, 0xfffffffffffffff9}], 0xa800, &(0x7f0000000440)={[{@fat=@dmask={'dmask', 0x3d, 0x9}}, {@dots}, {@fat=@sys_immutable}, {@nodots}, {@dots}, {}, {@fat=@discard}, {@dots}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x8, 0x33, 0x65, 0x34, 0x62, 0x64, 0x34], 0x2d, [0x66, 0x39, 0x63, 0x31], 0x2d, [0x66, 0x35, 0x65, 0x38], 0x2d, [0x65, 0x32, 0x39], 0x2d, [0x66, 0x38, 0x39, 0x30, 0x37, 0x32, 0x61, 0x63]}}}, {@appraise}, {@hash}, {@uid_gt={'uid>', r0}}]}) r1 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x7fffdf003000, 0x0, 0x4002012, r1, 0x10000000) 01:16:18 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r3 = dup2(r1, r0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000100)={{r3}, "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"}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r5, 0x3, 0x6, @link_local}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r0, r0, 0x0) 01:16:18 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0xe1, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x81, 0x81, 0xef, 0x7, 0x0, 0x6, 0x12, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8ee, 0x6aeae925f990a1d6, @perf_config_ext={0x3, 0x2}, 0x4110, 0xffff, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x101}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002180)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x4}}, 0x2c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x10a) sendfile(r2, r3, 0x0, 0x10000027f) fcntl$getown(0xffffffffffffffff, 0x9) 01:16:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xa3000040) [ 126.007099] device syz_tun entered promiscuous mode [ 126.013737] device syz_tun left promiscuous mode [ 126.023954] device syz_tun entered promiscuous mode [ 126.036088] device syz_tun left promiscuous mode 01:16:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101843, 0xa) write(r2, &(0x7f0000000080)="01", 0x1) pwrite64(r0, &(0x7f0000000180)="af71", 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x40) pwrite64(r3, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"}) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80}) faccessat2(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x78, 0x1200) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"}) ioctl$EVIOCSABS2F(r5, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{0x0, 0x2710}, {r6, r7/1000+60000}}, 0x0) 01:16:18 executing program 7: pipe(&(0x7f0000000040)) r0 = socket(0x1a, 0x4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x87}, {0x6}]}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'veth0_to_bond\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x87}, {0x6}]}, 0x10) close_range(r1, r0, 0x2) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="b5f56b", 0x3}], 0x1, 0x6) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/4083, 0xc61) [ 130.676557] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 130.677849] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 130.740417] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 130.740422] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 130.742315] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 134.964554] Bluetooth: hci2: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 01:16:18 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3d5e0 RCX=0000000000000000 RDX=ffff88801bca3580 RSI=ffffffff813bbaa7 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff88801a6af958 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9e7abd R14=ffff88806cf3d5e8 R15=0000000000000001 RIP=ffffffff813bbaa9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555569d9400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4298c16d5c CR3=000000000d388000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f4298bf57c0 00007f4298bf57c8 YMM02=0000000000000000 0000000000000000 00007f4298bf57e0 00007f4298bf57c0 YMM03=0000000000000000 0000000000000000 00007f4298bf57c8 00007f4298bf57c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888015ed7340 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006c R11=0000000000000001 R12=000000000000006c R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4296084700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff706cd0310 CR3=000000000d388000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f4298bf57c0 00007f4298bf57c8 YMM02=0000000000000000 0000000000000000 00007f4298bf57e0 00007f4298bf57c0 YMM03=0000000000000000 0000000000000000 00007f4298bf57c8 00007f4298bf57c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000