
Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:61168' (ECDSA) to the list of known hosts.
2022/09/21 01:38:49 fuzzer started
2022/09/21 01:38:50 dialing manager at localhost:34957
syzkaller login: [   35.950116] cgroup: Unknown subsys name 'net'
[   36.062691] cgroup: Unknown subsys name 'rlimit'
2022/09/21 01:39:04 syscalls: 2215
2022/09/21 01:39:04 code coverage: enabled
2022/09/21 01:39:04 comparison tracing: enabled
2022/09/21 01:39:04 extra coverage: enabled
2022/09/21 01:39:04 setuid sandbox: enabled
2022/09/21 01:39:04 namespace sandbox: enabled
2022/09/21 01:39:04 Android sandbox: enabled
2022/09/21 01:39:04 fault injection: enabled
2022/09/21 01:39:04 leak checking: enabled
2022/09/21 01:39:04 net packet injection: enabled
2022/09/21 01:39:04 net device setup: enabled
2022/09/21 01:39:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/21 01:39:04 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/21 01:39:04 USB emulation: enabled
2022/09/21 01:39:04 hci packet injection: enabled
2022/09/21 01:39:04 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220920                                          )
2022/09/21 01:39:04 802.15.4 emulation: enabled
2022/09/21 01:39:04 fetching corpus: 50, signal 20747/22578 (executing program)
2022/09/21 01:39:04 fetching corpus: 100, signal 39757/43104 (executing program)
2022/09/21 01:39:04 fetching corpus: 150, signal 53872/58522 (executing program)
2022/09/21 01:39:04 fetching corpus: 200, signal 62469/68367 (executing program)
2022/09/21 01:39:04 fetching corpus: 250, signal 67950/75125 (executing program)
2022/09/21 01:39:04 fetching corpus: 300, signal 74394/82676 (executing program)
2022/09/21 01:39:05 fetching corpus: 350, signal 80529/89855 (executing program)
2022/09/21 01:39:05 fetching corpus: 400, signal 86665/96930 (executing program)
2022/09/21 01:39:05 fetching corpus: 450, signal 89691/101006 (executing program)
2022/09/21 01:39:05 fetching corpus: 500, signal 92664/104997 (executing program)
2022/09/21 01:39:05 fetching corpus: 550, signal 95727/109044 (executing program)
2022/09/21 01:39:05 fetching corpus: 600, signal 97368/111690 (executing program)
2022/09/21 01:39:05 fetching corpus: 650, signal 100011/115212 (executing program)
2022/09/21 01:39:05 fetching corpus: 700, signal 103081/119079 (executing program)
2022/09/21 01:39:06 fetching corpus: 750, signal 106310/123085 (executing program)
2022/09/21 01:39:06 fetching corpus: 800, signal 110048/127431 (executing program)
2022/09/21 01:39:06 fetching corpus: 850, signal 111451/129701 (executing program)
2022/09/21 01:39:06 fetching corpus: 900, signal 113411/132446 (executing program)
2022/09/21 01:39:06 fetching corpus: 950, signal 114774/134655 (executing program)
2022/09/21 01:39:06 fetching corpus: 1000, signal 116984/137582 (executing program)
2022/09/21 01:39:06 fetching corpus: 1050, signal 119279/140583 (executing program)
2022/09/21 01:39:06 fetching corpus: 1100, signal 121924/143785 (executing program)
2022/09/21 01:39:07 fetching corpus: 1150, signal 124283/146643 (executing program)
2022/09/21 01:39:07 fetching corpus: 1200, signal 125860/148900 (executing program)
2022/09/21 01:39:07 fetching corpus: 1250, signal 128906/152249 (executing program)
2022/09/21 01:39:07 fetching corpus: 1300, signal 130463/154359 (executing program)
2022/09/21 01:39:07 fetching corpus: 1350, signal 132024/156464 (executing program)
2022/09/21 01:39:07 fetching corpus: 1400, signal 133123/158224 (executing program)
2022/09/21 01:39:07 fetching corpus: 1450, signal 135955/161256 (executing program)
2022/09/21 01:39:07 fetching corpus: 1500, signal 137027/163021 (executing program)
2022/09/21 01:39:08 fetching corpus: 1550, signal 138427/164915 (executing program)
2022/09/21 01:39:08 fetching corpus: 1600, signal 140795/167540 (executing program)
2022/09/21 01:39:08 fetching corpus: 1650, signal 142407/169546 (executing program)
2022/09/21 01:39:08 fetching corpus: 1700, signal 143548/171177 (executing program)
2022/09/21 01:39:08 fetching corpus: 1750, signal 144646/172795 (executing program)
2022/09/21 01:39:08 fetching corpus: 1800, signal 146383/174800 (executing program)
2022/09/21 01:39:08 fetching corpus: 1850, signal 147924/176645 (executing program)
2022/09/21 01:39:08 fetching corpus: 1900, signal 149482/178505 (executing program)
2022/09/21 01:39:09 fetching corpus: 1950, signal 151229/180472 (executing program)
2022/09/21 01:39:09 fetching corpus: 2000, signal 153233/182601 (executing program)
2022/09/21 01:39:09 fetching corpus: 2050, signal 154213/183944 (executing program)
2022/09/21 01:39:09 fetching corpus: 2100, signal 155230/185343 (executing program)
2022/09/21 01:39:09 fetching corpus: 2150, signal 157147/187319 (executing program)
2022/09/21 01:39:09 fetching corpus: 2200, signal 159355/189395 (executing program)
2022/09/21 01:39:09 fetching corpus: 2250, signal 160463/190764 (executing program)
2022/09/21 01:39:09 fetching corpus: 2300, signal 161319/191975 (executing program)
2022/09/21 01:39:09 fetching corpus: 2350, signal 162789/193616 (executing program)
2022/09/21 01:39:10 fetching corpus: 2400, signal 164266/195177 (executing program)
2022/09/21 01:39:10 fetching corpus: 2450, signal 165534/196578 (executing program)
2022/09/21 01:39:10 fetching corpus: 2500, signal 166287/197655 (executing program)
2022/09/21 01:39:10 fetching corpus: 2550, signal 167087/198726 (executing program)
2022/09/21 01:39:10 fetching corpus: 2600, signal 167876/199772 (executing program)
2022/09/21 01:39:10 fetching corpus: 2650, signal 169077/201063 (executing program)
2022/09/21 01:39:10 fetching corpus: 2700, signal 170058/202238 (executing program)
2022/09/21 01:39:10 fetching corpus: 2750, signal 171067/203375 (executing program)
2022/09/21 01:39:11 fetching corpus: 2800, signal 172228/204554 (executing program)
2022/09/21 01:39:11 fetching corpus: 2850, signal 172954/205508 (executing program)
2022/09/21 01:39:11 fetching corpus: 2900, signal 174025/206641 (executing program)
2022/09/21 01:39:11 fetching corpus: 2950, signal 175325/207883 (executing program)
2022/09/21 01:39:11 fetching corpus: 3000, signal 177219/209377 (executing program)
2022/09/21 01:39:11 fetching corpus: 3050, signal 178169/210402 (executing program)
2022/09/21 01:39:11 fetching corpus: 3100, signal 179107/211402 (executing program)
2022/09/21 01:39:11 fetching corpus: 3150, signal 180019/212369 (executing program)
2022/09/21 01:39:12 fetching corpus: 3200, signal 181471/213532 (executing program)
2022/09/21 01:39:12 fetching corpus: 3250, signal 183247/214971 (executing program)
2022/09/21 01:39:12 fetching corpus: 3300, signal 184517/216042 (executing program)
2022/09/21 01:39:12 fetching corpus: 3350, signal 185342/216943 (executing program)
2022/09/21 01:39:12 fetching corpus: 3400, signal 186125/217789 (executing program)
2022/09/21 01:39:12 fetching corpus: 3450, signal 186818/218547 (executing program)
2022/09/21 01:39:13 fetching corpus: 3500, signal 188054/219474 (executing program)
2022/09/21 01:39:13 fetching corpus: 3550, signal 188804/220241 (executing program)
2022/09/21 01:39:13 fetching corpus: 3600, signal 189426/220911 (executing program)
2022/09/21 01:39:13 fetching corpus: 3650, signal 190057/221565 (executing program)
2022/09/21 01:39:13 fetching corpus: 3700, signal 191127/222432 (executing program)
2022/09/21 01:39:13 fetching corpus: 3750, signal 192425/223395 (executing program)
2022/09/21 01:39:13 fetching corpus: 3800, signal 192971/224037 (executing program)
2022/09/21 01:39:13 fetching corpus: 3850, signal 194079/224839 (executing program)
2022/09/21 01:39:13 fetching corpus: 3900, signal 194546/225384 (executing program)
2022/09/21 01:39:14 fetching corpus: 3950, signal 195311/226071 (executing program)
2022/09/21 01:39:14 fetching corpus: 4000, signal 196004/226685 (executing program)
2022/09/21 01:39:14 fetching corpus: 4050, signal 196851/227325 (executing program)
2022/09/21 01:39:14 fetching corpus: 4100, signal 197604/227947 (executing program)
2022/09/21 01:39:14 fetching corpus: 4150, signal 198360/228566 (executing program)
2022/09/21 01:39:14 fetching corpus: 4200, signal 199230/229198 (executing program)
2022/09/21 01:39:14 fetching corpus: 4250, signal 200493/229890 (executing program)
2022/09/21 01:39:15 fetching corpus: 4300, signal 201169/230408 (executing program)
2022/09/21 01:39:15 fetching corpus: 4350, signal 202160/231039 (executing program)
2022/09/21 01:39:15 fetching corpus: 4400, signal 202892/231578 (executing program)
2022/09/21 01:39:15 fetching corpus: 4450, signal 203473/232068 (executing program)
2022/09/21 01:39:15 fetching corpus: 4500, signal 204115/232570 (executing program)
2022/09/21 01:39:15 fetching corpus: 4550, signal 204718/233036 (executing program)
2022/09/21 01:39:15 fetching corpus: 4600, signal 205241/233468 (executing program)
2022/09/21 01:39:15 fetching corpus: 4650, signal 206054/233991 (executing program)
2022/09/21 01:39:16 fetching corpus: 4700, signal 206608/234403 (executing program)
2022/09/21 01:39:16 fetching corpus: 4750, signal 207272/234895 (executing program)
2022/09/21 01:39:16 fetching corpus: 4800, signal 207615/235277 (executing program)
2022/09/21 01:39:16 fetching corpus: 4850, signal 208044/235626 (executing program)
2022/09/21 01:39:16 fetching corpus: 4900, signal 208548/235981 (executing program)
2022/09/21 01:39:16 fetching corpus: 4950, signal 208887/236304 (executing program)
2022/09/21 01:39:16 fetching corpus: 5000, signal 209569/236707 (executing program)
2022/09/21 01:39:16 fetching corpus: 5050, signal 210158/237034 (executing program)
2022/09/21 01:39:16 fetching corpus: 5100, signal 210846/237386 (executing program)
2022/09/21 01:39:17 fetching corpus: 5150, signal 211187/237681 (executing program)
2022/09/21 01:39:17 fetching corpus: 5200, signal 211886/238039 (executing program)
2022/09/21 01:39:17 fetching corpus: 5250, signal 212563/238393 (executing program)
2022/09/21 01:39:17 fetching corpus: 5300, signal 213109/238693 (executing program)
2022/09/21 01:39:17 fetching corpus: 5350, signal 213776/239036 (executing program)
2022/09/21 01:39:17 fetching corpus: 5400, signal 214207/239341 (executing program)
2022/09/21 01:39:17 fetching corpus: 5450, signal 214654/239613 (executing program)
2022/09/21 01:39:17 fetching corpus: 5500, signal 215374/239927 (executing program)
2022/09/21 01:39:18 fetching corpus: 5550, signal 215667/240163 (executing program)
2022/09/21 01:39:18 fetching corpus: 5600, signal 216347/240420 (executing program)
2022/09/21 01:39:18 fetching corpus: 5650, signal 217159/240674 (executing program)
2022/09/21 01:39:18 fetching corpus: 5700, signal 217685/240952 (executing program)
2022/09/21 01:39:18 fetching corpus: 5750, signal 217958/241176 (executing program)
2022/09/21 01:39:18 fetching corpus: 5800, signal 219025/241404 (executing program)
2022/09/21 01:39:18 fetching corpus: 5850, signal 219346/241637 (executing program)
2022/09/21 01:39:18 fetching corpus: 5900, signal 219954/241859 (executing program)
2022/09/21 01:39:19 fetching corpus: 5950, signal 220526/242054 (executing program)
2022/09/21 01:39:19 fetching corpus: 6000, signal 221089/242086 (executing program)
2022/09/21 01:39:19 fetching corpus: 6050, signal 222010/242159 (executing program)
2022/09/21 01:39:19 fetching corpus: 6100, signal 222580/242161 (executing program)
2022/09/21 01:39:19 fetching corpus: 6150, signal 223151/242178 (executing program)
2022/09/21 01:39:19 fetching corpus: 6200, signal 223893/242190 (executing program)
2022/09/21 01:39:19 fetching corpus: 6250, signal 224348/242194 (executing program)
2022/09/21 01:39:20 fetching corpus: 6300, signal 225058/242196 (executing program)
2022/09/21 01:39:20 fetching corpus: 6350, signal 225933/242196 (executing program)
2022/09/21 01:39:20 fetching corpus: 6400, signal 226362/242259 (executing program)
2022/09/21 01:39:20 fetching corpus: 6436, signal 226989/242259 (executing program)
2022/09/21 01:39:20 fetching corpus: 6436, signal 226989/242259 (executing program)
2022/09/21 01:39:22 starting 8 fuzzer processes
01:39:22 executing program 0:
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000041}, 0x24)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1008012}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x100}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1146}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x8040)
r2 = fcntl$dupfd(r0, 0x406, r0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0xc4)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
poll(&(0x7f0000000380)=[{r0, 0x42}, {r2, 0x2000}, {r3, 0x80a0}, {r4}, {r0, 0x10}, {r5, 0x1}], 0x6, 0x9)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x48040)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), r2)
getpeername$packet(r0, &(0x7f0000000700)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'veth1_to_hsr\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000008c0)={'ip_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', <r11=>0x0, 0x7, 0xc53b5f976906e079, 0x3ff, 0x5, {{0x36, 0x4, 0x1, 0x8, 0xd8, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x93, [@multicast2, @empty, @multicast1]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xe3, 0x0, 0x9, [0x2]}, @timestamp_prespec={0x44, 0x24, 0xcd, 0x3, 0x4, [{@multicast2, 0xc9a0}, {@multicast1, 0x6}, {@remote, 0x7fffffff}, {@rand_addr=0x64010102, 0x80000000}]}, @ssrr={0x89, 0x23, 0x7, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @cipso={0x86, 0x17, 0x2, [{0x898f6410a6c9912c, 0x11, "4a91a39bfcae4c0605d1850978d001"}]}, @cipso={0x86, 0x3f, 0x0, [{0x2, 0x7, "f2cbb47555"}, {0x7, 0x7, 'fnXY:'}, {0x0, 0x12, "b71180ac1a1cd65f42844f72e4344f2b"}, {0x5, 0x9, "9bc0f1ae30b1fb"}, {0x7, 0x2}, {0x7, 0xe, "b5b70d31c2a7e24e8559d90e"}]}]}}}}})
getsockname$packet(r0, &(0x7f0000000900)={0x11, 0x0, <r12=>0x0}, &(0x7f0000000940)=0x14)
getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000980)={@empty, @loopback, <r13=>0x0}, &(0x7f00000009c0)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000011c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000a00)={0x780, r8, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x20c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x5f, 0x9, 0x80}, {0x0, 0x4, 0x81, 0xfffffffa}, {0x100, 0xaa, 0x8, 0x1f}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r12}, {0x188, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x9, 0x2, 0x7e}, {0x1ff, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x51, 0x7fffffff}, {0x9, 0x1f, 0x7f}, {0x8, 0xfe, 0x8, 0x2}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x804}, 0x800)

01:39:22 executing program 1:
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c814)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x9, 0x5}}, './file0\x00'})
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4850}, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x280702, 0x1)
mount_setattr(r1, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)={0x0, 0x80, 0xc0000, {r0}}, 0x20)
getresgid(&(0x7f0000000a00), &(0x7f0000000a40)=<r2=>0x0, &(0x7f0000000a80))
r3 = getuid()
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000ac0)=<r4=>0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x9, 0x8, &(0x7f0000000940)=[{&(0x7f00000003c0)="c9e6ddb23d54a96d25e8847a1949f2b774833fb5", 0x14, 0x7}, {&(0x7f0000000400)="790075c56f89eb8a727d4735beac5034695605623fd3a633fca6e9fb10f793", 0x1f, 0x3}, {&(0x7f0000000440)="21899c10dd20f88e698dd34bbe25b311af0518f8abf276e9c229b2502253935f44cb853298cd06d3941cc55778930f24feb374bc220dcc83bd967c6b0346aa343404f86e", 0x44, 0x3f7}, {&(0x7f00000004c0)="f502f57f70288a9843a430794e024e04cbcd14588a035344c3a4bb0991044ec61e7f021b06bb190d7cd02a046f1d564e44e9c65eb3f007871bbfac51ef2706dc45eaa25834ec97f624d206bcf73336fd686953d274473ea8a3ae2c67ed710d93094167afe9145ff69042e6037623b3911f07073d5c00399d60ea3ed681b87fc0529af4b60b66b0c01b2acf2306d78b55a2e0fda87965f4bcf945478a8287f86748315a083798aacad7f4382afa46629c128bd67e533066cf2c373c8d9434da38f3364a586f9380f5f335b44dd3f42f236afc1977e3c057ad3d2056a9c3872bdad3b7b89851cab9", 0xe7, 0x800}, {&(0x7f00000005c0)="c5729b9a75086ca267bd29a5188f4ded8ea892779bcfb665caaace15e1be2ad5fa08701e3e4b1e1f0491bef974f35f2094d3d980d17e690262c85e6271e13da7a5c2e04a16b46d2a9a7799de9ccf31dea35913c99e31ef37febe8c78b445d63e11a189a4cfa2dfbe1375b55f08181da40e86da722a6e8ea3af8cef0cb147f394fd2777ed76c293ad6f3a86a0678d276b84b1d3438e96d1322b52ff7b465abf79f5b08dc0ad5048eef77d8b42e2967c087210c62e19bc895cb6aad029a96d921f0d2dcb446e85f9085c16deabbcfcaaf1ebb045bd10ab78b99ca456f085070fee01d913fc95c33ded1adbb92e661ce6e797ed3ccee542a29b79d43fcfaa394c", 0xff, 0x1c}, {&(0x7f00000006c0)="05098fc7ccf728d26ca597415f037d99fa14ed2588aa2132af322e8878f0aff43338a2609fe4dde6a90d8816ea3d9409c6ba704a9747f37fd89f5fb2694b6fd5f7e424baea754dcba476540639c23aae580d154aa016dc12d75d0c38083e3c595adf961e7f2ccb410720facc593a236343", 0x71, 0x40}, {&(0x7f0000000740)="65767eb252486a968011ff0d1113ff427ea98fcf0f7d993ef5bebddc6c554b108633951eedf1d7a4eea24d3605639809c2ad44476cc0fe3a83761893e572c6e33b7658642c0be312be9bb6009c6075dcb458ce7c8a4a421a54ce708ec9f8f2eea2be4a49d8a4da7ad7a905c76289f6901f6346845917e9ffc006f27188c79495b534dafe9ce0c15ec256a2a095cbbdc779c3c063d76daa2f04d62a6809b3a9eaf9c7a72e2fb4d687a921ffc19e587c07a2c2086de3e5a8810b9690c34edaff20f0486d977bb55f707ef775711aab3870f1296c2d0045fb68abb9a2e93bbf67", 0xdf, 0x9}, {&(0x7f0000000840)="d8fd25a5978da484a54ff8dbee6d09e7286fc154485426d3b1255e45eb793fb4213c63f7c177b1bd4ba2b0e3df81151aa7cd08624fa7b3d4f44a593316ba69871778dbc5f09c7fc56915aeb723cc1cac7e505834788c48a6ed3cd8648c025ae1765d429b93bda16c4c380daa04fb13b9faf0c3058e4bfec3d8635276ec7bebc4d0e381e2f6db127acb357c398f7d742ba455c131687ebd1317b73d70ab357cd7a32ce15683fbe4998ec3af71bd37b546b1ea082fe9c2adc2960235ffbdc8bfee4b55ec00801b53baf966fba54061cad40bc60db031eec2786c799d65fff688bf9ed6e8287d775b3c16ce0632eb09114ff52e1bb7440fd5", 0xf7, 0x3}], 0x10, &(0x7f0000000b00)={[{@nonumtail}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@fat=@gid={'gid', 0x3d, r2}}, {@shortname_win95}, {@shortname_winnt}, {@shortname_winnt}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@measure}, {@euid_gt={'euid>', r4}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]})
r5 = syz_mount_image$ext4(&(0x7f0000000c00)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x6, 0x1, &(0x7f0000000d80)=[{&(0x7f0000000c80)="9c73574a485092f55069c1942dc27cdccdae5723754db7f65f26768c146ed76043cd50c6e709329fb0659ed179bf9ab87d2fc44bb2ae8c5d56437e507a01c3139f5efe06570ce246fcf98502c6a23fbf62315e8a516912577c6e4ccf92f70e686ee1551dd96482b717f57a1127a2f9e9686daa7cc93907d6ea4298596f85be308523239f4b5b047b47130208a0245c8f491446a89c2446ee1905a54ee27012779478b8088bdce4ea580e72be5edcda9a053eefd1cc03e13187ead3aeb785be57d9db939f682647ed0053493552605be0ba7e66925fc626", 0xd7, 0x7}], 0x101c80, &(0x7f0000000dc0)={[{@nodiscard}, {@data_writeback}, {@block_validity}, {@errors_remount}], [{@subj_user={'subj_user', 0x3d, 'shortname=winnt'}}, {@permit_directio}, {@euid_lt={'euid<', r4}}, {@subj_type={'subj_type', 0x3d, '::\x95'}}, {@obj_role={'obj_role', 0x3d, 'gid'}}, {@permit_directio}, {@fowner_gt={'fowner>', r3}}]})
r6 = syz_open_dev$vcsn(&(0x7f0000000ec0), 0x4, 0x404000)
renameat2(r6, &(0x7f0000000f00)='./file0\x00', r5, &(0x7f0000000f40)='./file0\x00', 0x0)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000fc0), r0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, r7, 0x300, 0x70bd29, 0x1f, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x108, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cada514}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2847d0d8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d6ef035}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d1063a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f6f027}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33dc758}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x599d9f73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16c7d450}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cf657ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bc613b2}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2349a2a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b6a8072}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x4a080)
r9 = geteuid()
sendmsg$nl_netfilter(r0, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x1e4, 0xb, 0x5, 0x5, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x7}, [@nested={0x1d0, 0x8e, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}, @generic="026ac32cafcbe67701e491d4bc05718b00571900e6ee60b71c022124440631b44d94dc4c4f27bb75afdeb771b9c789ebec371aa481a40374883a7116a05a1e4b3d0361b92d5c401dbba7c44ec5997bba949c76502b9dfe0da60b2b8cfe4f97084580587f473da0af2d8038594936089480c1ddb685ef6bf643e9a698556537e5c4a75c5a1256185ab5051bf6101d9678ce361d576e83e3221722cdf11dc43983b3cb03d10144586aa71e9dd972ec9acf8c891d793866ebcddc25a6c443fe0943a56e09140b76a2bd29225334d43e8071", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@local}, @generic="1eee65716ade3ae5cb70bdf728442956919c3f71f1c3820c92c8794a0f46e1104f133c332f2ebebb06bbf57ed79b3c9b6e87b10da19308c49f2a70950701a1d98aed30074e09da86867531c7ff88c377e7879949ca2a6ce5560da25f2b782bdfc7ad479f7a2f17ef1334793a5e1b8b1020573d2b15212e37f7b9e48565397664615283192a367bbd6aa0bddcc0d266444f9326090be7748df34201897cd23644b31c4a035a20863e9cdb7a16d7ca047a74d7e224a4cc9d1c812e7eb9bb05f25e6fb868d6e69b999f7b0fa036794b9cec44c728e3f775", @generic="5b8001c8fd21e3d9920b6d4905b38300beb118c6522d"]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r10 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x210100, 0x20)
openat2(r10, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x2000, 0x0, 0x1a}, 0x18)

01:39:22 executing program 2:
lseek(0xffffffffffffffff, 0x8, 0x4)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pwritev(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)="011336720a3a577901570be0c456e70c9d5618524be4271907a987022501ff85d880c3be0b9a1d85b3d0b113f2baf34d84e87b9e411457a679088d57781ff7a42a5831af60969a97e2bcd1f002e94b456dc15764a2b28ada1fd466d38cc03d887f", 0x61}, {&(0x7f00000000c0)="b951322c40d070175356c69773b45e1e7c6700ec76fbe715b3bfe832ecdcca77d8277b88c20b3260469966f3aa0b3f87c36a933c8fb0febe3963d2b2f2ce56f8373a504e7e11265adf70799349900678426880b8dc0a89ca06b1498262028d44d35017144e32b9182325693c573a1e63991885eba76a968878293908302eda62b8eed5d502039bd4c27d42e8daac10", 0x8f}], 0x3, 0x4, 0x3)
r2 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x224800, 0x18}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000004)
r4 = openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in6=@private2}}, &(0x7f00000005c0)=0xe8)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe4, 0x0, 0x578d16140300010d, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000780), 0x4)
mq_notify(r4, &(0x7f0000000900)={0x0, 0x26, 0x0, @thr={&(0x7f00000007c0)="35b1083d4ffc0b977fdaf9b3def989cbff607558b36219aec297a4e43ae4f0974732daede96ecbb2b46888f195c5e3d6a6c823379b643d473d02b680fdf527e41b569b0c5355e9d91a4cc764e0efb46359adad6ae6b4cb3a55fa36bcde5771e03a404a870bcb06c1a5470f9aabc328f0ddf97340ef5fb6e9cd6a8bde03e9c5905f607dd0", &(0x7f0000000880)="0a221bc10d5a34ea2b2e8b2f7dd0e8afd57a3a36e8a93f2ceaffe27594de5b4f95ed98bbac65beac9ab9bb2fa706b14094d5fdefd0eda1b3a0bdcfd3cc08b279df330bbe80d9b44a9897cad876c0d1c564e57cff6958d774d70f6c0a30515704e186561d4d6188ea091fa46d0171ad"}})
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x13, r4, 0x8000000)
syz_io_uring_submit(r7, 0x0, &(0x7f0000000940)=@IORING_OP_NOP={0x0, 0x4}, 0x3f4)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x70, 0x9, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfc000000}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = syz_mount_image$nfs4(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x4, 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c40)="b9701561d14dd34d405997225157d391433fc3ac9d82c5a24a776b7facb27e3243c05f7763dcd243abe07382d222998caaa31004645a1597e14a9e71ba5e4e0f7bb4a3e1f0035e91df140e2de0bd35952aa8139aefd02077c264ad2124a845a2b28a7b5c26e25aee354ebe165ea2ab50", 0x70, 0x7}, {&(0x7f0000000cc0)="a6eae710a361b40f8194aaccb27fa950f22e302bf59380ce7ca073bf50b86fd29bfba079415df9501b445ff0060194db46a36bfb6cdad962835c1c63b88a9e07ad4e", 0x42, 0x1}], 0x20, &(0x7f0000000d80)={[{'\x00'}, {'veth1_to_batadv\x00'}], [{@subj_user={'subj_user', 0x3d, 'vxcan1\x00'}}, {@euid_eq={'euid', 0x3d, r6}}]})
signalfd4(r1, &(0x7f0000000dc0), 0x8, 0x0)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x10010, r0, 0x10000000)
syz_io_uring_submit(r7, r9, &(0x7f0000000e00)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x7, 0x1, {0x0, r8}, 0xfffffff7, 0x1, 0x0, {0x0, 0x0, r0}}, 0xfffffffe)
syz_io_uring_submit(r7, 0x0, &(0x7f0000000fc0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000f80), 0x1, 0x1}, 0x3)

01:39:22 executing program 4:
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x89, 0x2a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x240443, 0x0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x360, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x19}}}}, [@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @device_b, @broadcast}}, @dsss={0x3, 0x1, 0x24}]}, @NL80211_ATTR_IE={0x241, 0x2a, [@tim={0x5, 0x8a, {0x4, 0x14, 0x5, "cf9d3c69aef6880687139ea6e44b27ae6a4593d9f6d35e8820179e91d00ca7100a63090c4bec40977d51e3d019cf73d08a091ed208daa9d89511df4e970c3a9570b0b760aa12c55a559d7a0546115f1eb3e5c4d1ede61bb16283ccc8ec2a3bdfddea5629ac0d3a3a1b4a9ff8cd41e97a7e24bc43a031fc898b969669b992039f3d3bff289225a4"}}, @random={0x0, 0xde, "f374dab80cc0f61f7a0fe26b3e476721ebf96c41cfcffe429ef411186b5fdecae4d18e7d966b20d72a905875c1eb0093001690c100ec6e866b71b3027767ce12bb8b2111521df06236641486304b0096d46d657aad713f12ef9ae8d3af059bc5301a4c899986a6bf09493fb9d1d72ec104e54a39f5236d3882c654b9da1c27f5401b7f0c1f5bd7c8f0232960528fb2bb407ecd8d3e0d3a9490309f145ea53533ae7bd15dc4bcae0f28494c8aea2c0c66aedaebea908d80aaca634cd993d5c5f3049fbaee43cd4a2fe331e59e14d77eb1b507beffe4369a77d95879c6c5d7"}, @random_vendor={0xdd, 0xcf, "d0872d47aa4e0309539c22fbf30b12c7474f05dbd8e39e39f87722435373e5382d0cc3907d5e163f8abf53a1ede9db9bcc6f47d901f617d90d1a7844e74ebe44120bb4bdc104aaf13c6c88918f0e5ed86b98e60ffd15686ed07eb094ffc400d284e7e1663370f98286fc16f41c3ecd394eefd38252e44a2a194dec95a374472c9ad64a7f5ca53cc017dce8500529c3a49265c4478cfa497fe1722dc2a820534726358f4a047df85151d07fa9e3518f2f8732c2a98ad189f714745e14d408c8256ec101ae373b6d7a474ab9641ae53e"}]}, @NL80211_ATTR_IE={0x5c, 0x2a, [@ibss={0x6, 0x2, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x24, 0x5}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0xa3, 0x4, 0x96c, 0x4}}, @peer_mgmt={0x75, 0x16, {0x0, 0x8, @void, @val=0x10, @val="57df84b178b019460e2f7ee9e395f08e"}}, @prep={0x83, 0x25, @ext={{}, 0x80, 0x0, @broadcast, 0x1ff, @device_b, 0x1ff, 0x7, @device_b, 0x8d}}]}, @NL80211_ATTR_IE={0x7c, 0x2a, [@ibss={0x6, 0x2, 0x2}, @peer_mgmt={0x75, 0x4, {0x63a, 0x8, @void, @void, @void}}, @ibss={0x6, 0x2, 0x9}, @channel_switch={0x25, 0x3, {0x0, 0xb9, 0xf9}}, @link_id={0x65, 0x12, {@random="e51fb68aa1f4", @broadcast, @device_b}}, @preq={0x82, 0x3b, @not_ext={{0x0, 0x1, 0x1}, 0x8, 0xb8, 0x7, @broadcast, 0x9, "", 0x2, 0x7ab8, 0x3, [{{}, @broadcast, 0x7ff}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @device_a, 0x10000}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x9, 0x0, 0x2, 0xc2, 0x18}}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x4844}, 0x4001)
r1 = fsmount(r0, 0x0, 0x7e)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000001}, 0x14)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2b}}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x800)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xbc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb00000}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4811}, 0x2000c091)
r3 = creat(&(0x7f0000000980)='./file0\x00', 0x180)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), r0)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xc4, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x79}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff4c}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x8)
sendmsg$AUDIT_GET(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x10, 0x3e8, 0x400, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004084}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000d00)={0xdf0, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x34b, 0x73}}}}, [@NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xf4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x6}, {0x4, 0x8}, {0x6, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x5, 0xa}, {0x6}, {0x7, 0xa}, {0x2, 0x6}, {0x2, 0x6}, {0x4, 0x7}, {0x6, 0x2}, {}, {0x3, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x9}, {0x1}, {0x7, 0x7}, {0x7, 0x9}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x8}, {0x0, 0xa}, {0x5}, {0x5, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x6}, {0x0, 0x5}, {0x2}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x7, 0x5, 0x6, 0x69c, 0x2, 0x5fd]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x1b, 0x6c, 0x8]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x16, 0xb, 0x16, 0x5, 0x1b, 0x30, 0x6c, 0xc, 0x36, 0x3, 0x12, 0x48, 0x12, 0x24, 0x36, 0x1, 0x3, 0x6, 0x3, 0x8, 0x24, 0x2, 0x5e867a6866ef57e, 0xc, 0x24, 0x48, 0x12, 0x48, 0x4, 0x18, 0x60]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0xc, 0x4, 0x36, 0x48, 0x5, 0x6, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0xdb, 0xbe, 0x32b, 0x5, 0x7, 0x9e21]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x9}, {0x0, 0x17}, {0x1}, {0x3, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x7}, {0x4}, {0x7, 0x1}, {0x5, 0x3}, {0x4, 0x4}, {0x6}, {0x6, 0x6}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x2}, {0x1, 0x9}, {0x3, 0xa}, {0x0, 0x4}, {0x1}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x7, 0x6}, {0x3, 0x8}, {0x3, 0x3}, {0x5, 0x4}, {0x6, 0x8}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x4, 0x4}, {0x5, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x36, 0xb, 0x1b, 0x36, 0x4, 0x1, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xd6a896afdcc4ca0}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0xb, 0x36, 0x1b]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x2, 0x12, 0xc]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x48, 0x48, 0x36, 0x5, 0x9, 0x6, 0x6c, 0x1b, 0x30, 0x1, 0x9]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x6}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x7}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x3, 0x3}, {0x5, 0x2}, {0x0, 0x3}, {0x4}, {0x2, 0x5}, {0x6, 0x2}, {0x3, 0x5}]}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x8}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x4, 0x30, 0x3, 0x9, 0x12, 0x60, 0x1b, 0xb, 0x47, 0x12, 0xc, 0x3, 0x30, 0x16, 0x3, 0x24, 0x1, 0x1, 0x9, 0xc, 0x0, 0x60, 0xb, 0x2, 0x60, 0xc, 0x10]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x5, 0x6c, 0x49, 0x12, 0x1, 0x36, 0x6, 0x3, 0xc, 0x48]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x6, 0x4}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe9f5, 0x5, 0x0, 0x5, 0x6, 0x400, 0x1, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x44c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x2}, {0x2, 0x3}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0x6}, {0x6, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x0, 0x2}, {0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x1}, {0x3, 0x5}, {0x1, 0x6}, {0x4}, {0x0, 0xa}, {0x3, 0x6}, {0x6, 0x9}, {}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x4, 0x8}, {0x7}, {0x3, 0x5}, {}, {0x1, 0x7}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x5, 0x9}, {0x2, 0x5}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0x8}, {0x6, 0x3}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x4}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x5}, {0x2, 0x6}, {0x6, 0x9}, {0x1}, {0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x6}, {0x6, 0x1}, {0x3, 0x1}, {0x7, 0x9}, {0x2}, {0x3, 0x3}, {0x7, 0x3}, {0x3, 0x4}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4}, {0x7, 0x7}, {0x5, 0xa}, {0x6, 0xa}, {0x1, 0x7}, {0x7, 0x6}, {0x5, 0x8}, {0x2, 0x6}, {0x3, 0x1}, {0x6, 0x3}, {0x6, 0x9}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x1}, {0x2, 0xa}, {}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0xa}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x8}, {0x6, 0x6}, {0x3, 0x4}, {0x5, 0x1}, {0x1}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x7, 0x1}, {0x3, 0xa}, {}, {0x0, 0x5}, {0x4, 0x5}, {0x3, 0xa}, {0x4, 0xa}, {0x4, 0x5}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x3, 0x2}, {0x5, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x4}, {0x0, 0x4}, {0x7, 0x1}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x2}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x1}, {0x5, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x7, 0x3f, 0x1f, 0x3ff, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x1f, 0x0, 0x2290, 0xff, 0x9]}}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x1}, {0x7, 0x5}, {0x5, 0x7}, {0x1, 0x7}, {0x6, 0x2}, {0x2, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x0, 0x2}, {0x5}, {0x4, 0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x7, 0x1}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x2, 0x2}, {0x2, 0xa}, {0x7, 0x5}, {0x7, 0x3}, {0x1, 0x4}, {}, {0x5, 0x4}, {0x6, 0x5}, {0x5, 0xa}, {0x6, 0x7}, {0x1, 0xa}, {0x4}, {0x7, 0x4}, {0x6, 0x5}, {}, {0x7}, {0x0, 0x5}, {0x6, 0x3}, {0x7, 0xa}, {0x5}, {0x2, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x7}, {0x2}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0x3}, {0x7, 0x3}, {0x7, 0xa}, {0x5, 0x3}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x6}, {0x7, 0x4}, {0x6, 0x6}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x5}, {0x5, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x2, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x6, 0x5}, {0x7, 0xa}, {0x1, 0xa}, {0x7, 0x9}, {0x7, 0x8}, {0x1}, {0x0, 0x8}, {0x1, 0x5}, {0x4}, {0x5, 0x7}, {0x1, 0x8}, {0x3, 0x3}, {0x3, 0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x7}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0x3}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x4, 0x2}, {0x4, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x9}, {0x7, 0xa}, {0x5, 0x4}, {0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x400, 0x1, 0x1ff, 0x3023, 0x1, 0x7ff, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x400, 0x7ff, 0x1000, 0x2, 0x11f2, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x1, 0x6c, 0x37, 0x1b, 0x3, 0x24, 0x16, 0x1, 0x1, 0x30, 0x12, 0x6c, 0x12, 0xb, 0x4, 0x60, 0xc, 0x1b, 0x6, 0x4, 0x0, 0x5, 0x36, 0x67]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x100, 0xec0c, 0x7ec5, 0x100, 0x2, 0x4, 0x3]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x4, 0xc, 0x3, 0x15, 0x36, 0x5, 0x24, 0x9, 0x1, 0x24, 0x0, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x24, 0x4, 0x9, 0x1]}]}, @NL80211_BAND_5GHZ={0xf0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x4, 0x0, 0x1d, 0x12, 0x1, 0x30, 0x2, 0x30, 0xd, 0x24, 0xb, 0x1, 0x48, 0x6, 0x6c, 0x16, 0x18, 0x3]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0x2}, {0x2, 0x8}, {0x2, 0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x7, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x6}, {0x0, 0x1d}, {0x7, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x4, 0x1}, {0x7, 0x7}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x5, 0x9, 0x100, 0x6, 0x8000, 0x6]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x32, 0xc, 0x1, 0x5, 0xb, 0x36, 0x16, 0x5, 0x4, 0x0, 0x12, 0x1, 0x36]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x6c, 0x6c, 0x30, 0x1b, 0x36, 0x24, 0xc, 0x16, 0x5, 0x1b, 0x48, 0x36, 0x5, 0x60, 0x6c, 0x6c, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x68ee, 0x8, 0x9, 0x4, 0xfffd, 0x9e5, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x3}, {0x2, 0x9}, {0x5, 0xa}, {0x4, 0x9}, {0x6, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x2, 0x2}, {0x4}, {0x6, 0x5}, {0x0, 0xa}, {0x2}, {0x7, 0xa}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x9}, {0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x2}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x2}, {0x3, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x7}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0x8}, {0x3}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x2, 0x4}, {0x3, 0x5}, {0x1}, {0x6, 0x2}, {0x2, 0x5}, {0x3, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x3, 0x18, 0x30, 0x36, 0x1, 0x24, 0x48, 0x60, 0x24, 0x1, 0xc, 0x18, 0x2, 0x16, 0x48, 0x33, 0x73, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xfe52, 0x0, 0x4, 0xbe90, 0x81, 0x3fa]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x6}, {0x3, 0x7}, {0x3, 0x5}, {0x0, 0xa}, {0x7, 0x5}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x3}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x2}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x2, 0xa}, {0x4, 0x9}, {0x1, 0x7}, {0x3, 0x7}, {0x1, 0xa}, {0x3, 0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0xa}, {0x3, 0x2}, {0x3, 0x4}, {0x5, 0x4}, {0x7, 0x6}, {0x6, 0x3}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0x8}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0xa}, {0x4, 0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x3, 0x1}, {0x6, 0x7}, {0x6, 0x4}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x5, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x7, 0x8}, {0x5, 0x2}, {0x2, 0x1}, {0x4, 0xa}, {0x3, 0x9}, {0x5, 0x4}, {0x4, 0x9}, {0x1, 0x1}, {0x3, 0x6}, {0x7, 0x8}, {0x1, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x3}, {0x1, 0x6}, {0x4, 0x4}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x7}, {0x6, 0x6}, {0x3, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x7}, {0x2, 0x9}, {0x7, 0x8}, {0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x3, 0x1}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x1}, {0x6, 0xa}, {0x4, 0x3}, {0x6, 0x6}, {0x4, 0x4}, {0x1, 0xa}, {0x2, 0x1}, {0x3}, {0x7, 0x3}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0xa}, {0x4}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x5}, {0x0, 0x9}, {0x5, 0x5}, {0x5, 0x5}, {0x6}, {0x6, 0xa}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x7}, {0x6, 0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x9}, {0x2, 0xa}, {0x0, 0x4}, {0x6, 0x4}, {0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0xa}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x5, 0x5}, {0x5}, {0x2, 0xa}, {0x5, 0x9}, {0x7, 0x3}, {0x2, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x1}, {0x0, 0x6}, {0x2}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x16, 0x5, 0x48, 0x3, 0x5, 0x9, 0x4, 0x9, 0x2, 0x36, 0x18, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x9, 0x1ff, 0xfff, 0x400, 0x4, 0x458b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xc586, 0x5, 0x8, 0x5, 0x80, 0x2, 0xd3d]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x6}, {0x7}, {0x7, 0xa}, {0x0, 0x9}, {0x7, 0x7}, {0x2, 0x2}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x6, 0x1}, {0x6, 0x1}, {0x3, 0x7}, {0x2, 0x1}, {0x3}, {0x4, 0x2}, {0x6, 0x2}, {0x4, 0x9}, {0x2, 0x7}, {0x5, 0x3}, {0x5}, {0x2, 0x4}, {0x4, 0x4}, {0x7, 0x1}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x2}, {0x3, 0x6}, {0x6, 0x8}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfff7, 0x3370, 0x2, 0x9, 0x2, 0xfffe, 0x715]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x60]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x1, 0x6, 0x2, 0x1, 0x190f, 0x200, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x3, 0x6, 0x10, 0x1f, 0x6c]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x36, 0xc, 0x48, 0x16, 0xc, 0x6c, 0x2, 0xb, 0x6, 0x24, 0x6, 0x15, 0x36, 0x6c, 0x5, 0x30, 0x3, 0x0, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x101, 0x8, 0x7d5, 0x80, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x7, 0x3, 0x7ff, 0x7, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x1b, 0x1, 0xc, 0xb, 0x4, 0x16, 0x24, 0x48, 0x48, 0x3, 0x30, 0x30, 0xb, 0x30, 0x30, 0x2, 0x2, 0xc, 0x6c, 0x24, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf8b3, 0x9, 0x3ff, 0x0, 0xfff, 0x3, 0x2, 0xa35c]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0xc, 0xb, 0x48, 0x48, 0x18, 0x2, 0x2]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x6, 0x26, 0x0, 0x5, 0x12, 0x16, 0x4, 0x3, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0x4}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x4}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0x6}, {0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x1, 0x5}, {0x3, 0x9}, {0x2, 0x5}, {0x4, 0x3}, {0x5, 0x7}, {0x6, 0x4}, {0x3, 0x1}, {0x0, 0x4}, {0x2, 0x2}, {0x7, 0x7}, {0x2, 0x7}, {0x6, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x2, 0x4}, {0x3, 0x7}, {0x6, 0x8}, {0x5, 0x2}, {0x2, 0x1}, {0x5, 0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x2e9, 0x1, 0x1ff, 0x1, 0x9, 0x1]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7c, 0x2, 0x0, 0x4, 0x3f3, 0x40, 0x1, 0x5]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x6, 0xb]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x7, 0x3}, {0x2, 0x9}, {0x0, 0x1}, {0x4, 0x4}, {0x4, 0x8}, {0x2, 0x6}, {0x6, 0x2}, {0x7, 0x7}, {0x7, 0x17}, {0x2, 0x1}, {0x6}, {0x1, 0x3}, {0x5, 0x4}, {0x0, 0x2}, {0x7}, {0x3, 0x8}, {0x0, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x9}, {0x4, 0x4}, {0x6, 0x4}, {0x5, 0x4}, {0x2, 0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x49f, 0x8000, 0xc2, 0x1b, 0x400, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0xc, 0x6, 0xc, 0x60, 0x18, 0x4, 0x9, 0x36, 0x5, 0x48, 0x36, 0x4, 0xb, 0x18, 0x24, 0x48, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0xf914, 0x8, 0x40, 0xb23f, 0x80, 0xfffd]}}]}, @NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x24, 0x401, 0x0, 0x1ff, 0xffff, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0xffff, 0xc72, 0x1f, 0x4f, 0x800, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x6, 0x1000, 0x9, 0x7, 0x800, 0x5]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x4}, {0x1, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x5, 0x8}, {0x3, 0x2}, {0x6, 0x1}, {0x4, 0x5}, {0x7, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x3, 0x1}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x2}, {0x5}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x5, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x2, 0x5}, {0x4}, {0x7, 0x1}, {0x3, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x5, 0x2}, {0x0, 0x8}, {0x6, 0x1}, {0x1, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x6}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x1}, {0x7, 0x4}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x5}, {0x6, 0x2}, {0x7, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x4}, {0x0, 0xa}, {0x4, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x6, 0x5}, {}, {0x3, 0x9}, {0x2, 0x7}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x1, 0x2}, {0x6, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x2}, {0x3, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x5, 0x7}, {0x5, 0x2}, {0x6, 0x2}, {0x2, 0x1}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0xa}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x6, 0x80, 0x3ff, 0x8, 0x5, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3}, {0x2, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xee, 0x200, 0xe050, 0x0, 0xd5ab, 0x8001, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x28, 0x6c, 0x60, 0x1, 0x60, 0x2, 0x30, 0x1b, 0x5, 0x60, 0x3, 0x6c, 0x18, 0x5, 0x12, 0x38, 0x1, 0x60, 0x5, 0x9, 0x2, 0x12, 0x1b, 0x24]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x3}, {0x5, 0x5}, {0x4, 0x6}, {0x6, 0x8}, {}, {0x0, 0xa}, {0x0, 0x7}, {0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x6}, {0x3, 0x3}, {0x4, 0x1}, {0x6, 0x5}, {0x4, 0x7}, {0x2, 0x9}, {0x7, 0x1}, {0x1}, {0x4, 0x8}, {0x3}, {0x4, 0x1}, {0x6}, {0x7, 0x8}, {0x0, 0x5}, {0x6, 0x8}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0xa}, {0x6, 0x5}, {0x0, 0x8}, {0x6}, {0x3, 0x5}, {0x4, 0x1}, {0x5, 0x5}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x3}, {}, {0x0, 0x6}, {0x5, 0x3}, {0x0, 0x5}, {}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x7}, {0x2}, {0x6, 0x3}, {0x3, 0x9}, {0x6, 0x4}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x4, 0x6}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9992, 0x9, 0xa1ff, 0x200, 0x4, 0x7, 0x3012]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0xa}, {0x0, 0x8}, {0x3, 0x7}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x8}, {0x6, 0x6}, {0x3}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x2, 0x8}, {0x6, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x9}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x2}, {0x4, 0x3}, {0x4, 0x6}, {0x4}, {0x3, 0x1}, {0x2, 0x7}, {0x4, 0x3}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x60, 0x6c, 0x5b, 0x3, 0x33, 0x36, 0x5, 0x4, 0xc, 0x16, 0x18, 0x12, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xc3066843f27c0737}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3c, 0x101, 0x6, 0x1, 0x40, 0x9f0, 0x7, 0x9]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x2}, {0x7, 0x4}, {0x6}, {0x5, 0xa}, {0x1, 0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x5, 0xa}, {0x5, 0xa}, {0x2, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x6, 0x7}, {0x2, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x2, 0x9}, {0x1, 0x3}, {0x7}, {0x3, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x3, 0x2}, {}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x3, 0xa}, {0x0, 0x1}, {0x4, 0x2}, {0x3, 0x8}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0x9}, {0x6}, {0x7, 0x8}, {0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x6, 0xa}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x6}, {0x6, 0x6}, {0x4, 0x7}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {0x3, 0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x5, 0x1}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0x1}, {0x2, 0x4}, {0x0, 0x3}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x9}, {0x2, 0x7}, {0x2, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x3, 0x6}, {0x5, 0x6}, {0x3}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {}, {0x0, 0x4}, {0x1}, {0x6, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0x4}, {0x5, 0x2}, {0x5}, {0x3, 0x9}, {0x5, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x7}, {}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x4}, {0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0x4}, {0x2, 0x3}, {0x4, 0x2}, {0x7, 0x1}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x4}, {0x0, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x6}, {0x0, 0x7}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x4}, {0x3, 0x2}, {0x6, 0x9}, {0x3, 0x1}, {0x2, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x6}, {0x5, 0xa}, {0x7, 0x3}, {0x2, 0x2}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x6}, {0x7}, {0x7, 0x1}, {0x6, 0x7}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x1}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0xa}, {0x3, 0x7}, {0x0, 0x1}, {0x3, 0x4}, {0x4, 0xa}, {0x1}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x8}, {0x7, 0x4}, {0x1, 0x9}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0x9}, {0x3, 0x3}, {0x2, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x2, 0x7}, {0x0, 0x4}, {0x7, 0x7}, {0x7, 0x3}, {0x2, 0x1}, {0x3, 0x8}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0x6}, {0x6, 0x3}, {0x4, 0x8}, {0x0, 0x6}, {0x6}, {0x2, 0x1}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x2}, {0x3}, {0x3, 0x8}, {0x7, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x6, 0x8}, {0x1, 0x10}, {0x7, 0x2}, {0x5, 0x8}, {0x7, 0x7}, {0x1, 0x6}, {0x5, 0x5}, {0x7, 0x3}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x5, 0x3}, {0x5, 0xa}, {0x5, 0x3}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x9}, {0x5, 0x9}, {0x2, 0x1}, {0x7, 0xa}, {0x3, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {}, {0x7, 0xc}, {0x4}, {0x1, 0x2}, {0x7}, {0x1, 0x3}, {0x6, 0x7}, {0x4, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x7}, {0x4, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x60, 0x36, 0x24, 0x0, 0x30, 0x1b, 0x18, 0x12, 0x3, 0x48, 0x6c, 0x9, 0x1b, 0x6, 0x6, 0x60, 0x9, 0x2, 0x3, 0x4, 0x6c, 0x4, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb2, 0x1, 0x3, 0x5, 0x0, 0x1, 0x4, 0x23cd]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x3, 0x9}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x0, 0x2}, {0x2, 0x7}, {0x1, 0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x1}, {0x0, 0xa}, {0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x4, 0x15}, {0x7, 0x1}, {0x5, 0x7}, {0x1, 0x9}, {0x7, 0x7}, {0x4, 0x1}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x1}, {0x0, 0x1}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x3, 0x2}, {0x4}, {0x2, 0x6}, {0x6, 0xa}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x8}, {0x3, 0xa}, {0x5, 0x7}, {0x2, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x274, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x12, 0x5, 0x6c, 0x6c, 0x6, 0x36, 0x6e, 0x9, 0x0, 0x6c, 0x1, 0x16, 0x18, 0x36, 0x0, 0x12, 0x0, 0x36, 0x2, 0x4, 0x18, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x4}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x4, 0x5}, {}, {0x7, 0x5}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0x7}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x1, 0x5}, {0x7, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x4}, {0x4}, {0x7, 0x9}, {0x3, 0x3}, {0x2, 0x7}, {0x2, 0x1}, {0x3, 0x8}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x5}, {0x1}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x8}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x6, 0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x6, 0x8}, {0x7, 0x1}, {0x1, 0x2}, {0x3, 0x6}, {0x3, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x4}, {0x7, 0x7}, {0x6, 0xa}, {0x5}, {0x4, 0xa}, {0x4, 0x8}, {0x4, 0x1c}, {0x1, 0x6}, {0x5, 0x3}, {0x5, 0x2}, {0x5, 0x4}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x4}, {0x6, 0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0x8}, {0x5, 0x8}, {0x6, 0x7}, {0x1, 0x4}, {0x4, 0x3}, {0x4, 0x4}, {0x1, 0x9}, {0x6, 0x2}, {0x2, 0x2}, {0x4, 0x2}, {0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x7}, {0x7, 0x7}, {0x7, 0x7}, {0x2, 0x5}, {0x1}, {0x1, 0x3}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x5}, {0x3, 0x9}, {0x5, 0x9}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x4}, {0x4, 0x7}, {0x6, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x9}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0x5}, {0x6, 0x1}, {0x6, 0xa}, {0x3, 0x6}, {0x2, 0x6}, {0x2, 0x3}, {0x2}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0x9}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0xa}, {0x6, 0x6}, {0x2, 0xa}, {0x7, 0x9}, {0x3, 0x6}, {0x6, 0x8}, {0x6, 0x4}, {0x4}, {0x4, 0x8}, {0x0, 0x4}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6, 0x5, 0x81, 0x7, 0x193d, 0x2, 0x8]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x65, 0x36, 0x60, 0x1b, 0x18, 0x1b, 0x9, 0x9, 0x1, 0x24, 0x6c, 0x6, 0x48, 0x12, 0x6, 0x30, 0x4, 0x4, 0x17, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0xea, 0x80, 0xfffc, 0xdf0e, 0x4, 0x63]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0x8d88, 0x0, 0x4, 0x401, 0x2, 0x65]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x2, 0x36, 0x5, 0x48, 0x60, 0x2, 0x9, 0x2, 0x12, 0x36, 0xc, 0x36, 0x2, 0xc, 0x16, 0x36, 0x24, 0x18, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x9}, {}, {0x2, 0x6}, {0x3}, {0x7, 0x2}, {0x5, 0x7}, {0x3, 0x5}, {0x7, 0x13}, {0x3, 0x1}, {0x2, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x2}, {0x7, 0x7}, {0x2, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x2}, {0x3, 0x4}, {0x7, 0x7}, {0x5, 0x3}, {0x1}, {0x0, 0x10}, {0x4, 0x2}, {0x7, 0x1}, {0x5, 0x2}, {0x7, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xab, 0x20, 0x0, 0x5, 0x9, 0x100, 0xe286, 0x5]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1, 0x77, 0x6, 0x2, 0x6c, 0x16]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x8f7ec349412fc101, 0x60, 0x9, 0x18, 0x60, 0x18, 0x3, 0xc, 0x24, 0xb, 0x1b, 0x12, 0x6c, 0x5, 0x60, 0x18, 0xa, 0x48, 0x18, 0x36, 0x18, 0x1b, 0x9, 0x12, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x36, 0x5, 0x16, 0xc, 0x6c, 0x194b66d059dcc082, 0x60, 0x9, 0x5, 0x18, 0x1f, 0x3, 0x2, 0x6c, 0x9, 0x36, 0x9, 0x5, 0x12, 0x18, 0x1b, 0xe72102e6c1df6eb5, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x40, 0x3ff, 0x2, 0x9, 0x8e3, 0xf7ad]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x24, 0x6, 0x1, 0xc, 0x36, 0x18, 0x60, 0x4, 0x36, 0x36, 0x24, 0x1]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x12]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x0, 0x9, 0x8, 0x7211, 0x4, 0x7, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x4}, {0x1}, {0x3, 0x1}, {0x3}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x6c, 0x2, 0x1b, 0x9, 0x2, 0xc, 0x12, 0x24]}]}]}]}, 0xdf0}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = pidfd_getfd(r3, r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r5, {0x4}}, './file1\x00'})
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40002}, 0x400c000)
r6 = syz_open_dev$loop(&(0x7f0000001dc0), 0x8, 0x80002)
pwritev2(r6, &(0x7f00000022c0)=[{&(0x7f0000001e00)="9f371bdd11f944be1ab869b28710344b36703fc3ccd3f15152157b0ba69dd00459bd65f509287283d0379e4f83bd8cd7607c22c651aa8b73b6291230b7dbeafb8f756ea4d923b7b2439d57b20b8caa877d722ca670b15dc4f5fe1a7ab8a34fce50282c7c00ef4f2043da01612a662c0d9c138daf", 0x74}, {&(0x7f0000001e80)="259479a771131cfffefd2e2537a84b09b319e35525a92bc4b7f0d8fdbe963acdb059c7e83bebce04c22ced40c7955a7a4116f74261d3e57a86a71d44081ecbfa6b8a3539f1afc62012de35a557d0abb489b03d034c020a00bb3e049984384538fb403a70de6215f38d4656e388a8d9a6197d1e3127756d141ab310f70058ad485f8706259a9b6f0213f8fb1982d8da5132b51d9bad422f5d25a293e7bcec914d128d38cc2c9e", 0xa6}, {&(0x7f0000001f40)="dd8cc61da01f0c123b8ba0e81bafaf26c161030a5a32e7b0780c1bd8bf9b185f3e9e69f4c7ac49e6190c41e62e3b02b5d53fb1dce00abfc6f1808179cbd3add52e4b252fe89c87b9ab13140232248e147ac849201938907dc0a9c1c7b645713ad352ce50a30f02b1470c7fbfedbe55596ea144077e78293745303b545c94b681117bfbb7341845b4b4ac939c729ea57f520ad08c2c9ddcf0f76237169963980d76611927b050abc69627f8e770b9e2cae077ea6f022cd71a2fa931b368d5112549a664e16a182c97ebd71bb97d979a0d089771560e32c1679c508a9674504904e5", 0xe1}, {&(0x7f0000002040)="ea174481d1f5149392c9f3e06b91b4532b46611aec79cd24a7b3a9ebf7b8eb305eaeafb4e025fedb1864813f77239eeb2106b33c90fa77c9caf30bbea335c611152c6b376092fca022000a201109cf50", 0x50}, {&(0x7f00000020c0)="6102ed999eb3acb0a2edf01dc2d624c9da7e5a320989001fe3466d0ff203d9eedace271ebb9f0329e7d2e0bd53488bbb60b55ff84484431cd2b6f6181ffa2f82b9da5a3c369bd7bae5cedc461e2a352a6dd49de347e0061c34f33d216c6992dc3bb2cf274c40c16df6a87f86d07c7cbe1fcbf8c3627cc57034200411fb5257763f403e990c036fb7dff806af92bb0bdff1fd85cfdadf2c8d02fd4664fa1c37c9855ed31307888259c7fa495f06b18873d75fdeb25d7befd7f12129c1f71ce483ceb60ae6c459b2dcd21511e884fedfd01157f0c6d02ea7", 0xd7}, {&(0x7f00000021c0)="903c237596aaefee500461f00cf1c7955aac47c4c720305ac221ed36de0ebfcf9b361fbe5d8bf33e852d98102414031c2a8ca72b0bca8c7e9d9bdcce10d15236d5ad0954233756124a87d1aa45e2fd700d8baf120fec2a656e0f3a6a4e2aea48d5eb1786303c346dd037b8e09ca25b701feadfcc44159cc61b406a729d8d902480b92628eafb1bee5516af1a8ddc4b80196d0909f04b884ec7d15970cfd6e7bef29f9f080cfa7fc88cbf79a8ee004487ef54b50a5508be4bbffd86cb59c925813d0e2d0ae443252238d92b6f96ad9f7df9fe991261eb7d32f27085a52e02acd1cad58ba48d796b3996f44bc114fc4d52", 0xf0}], 0x6, 0x5, 0x8, 0xf)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x44}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000)
openat(0xffffffffffffffff, &(0x7f0000002440)='./file1\x00', 0x0, 0x2a)

01:39:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff338a, 0x17}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0xb8, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x91b}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x747}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa35}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x35a}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x412}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2fd3}]}]}]}, 0x104}}, 0x0)
r3 = memfd_create(&(0x7f00000003c0)='\x00', 0x0)
fcntl$addseals(r3, 0x409, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000a00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000480)={0x514, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0x4b0, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x15c, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x114, 0xf, [@tim={0x5, 0xb9, {0x8, 0xd, 0x7, "2434d5b1f9d5df90206dae384d9ad9a3a8041083e2f137d44d4134a462128ef1c4f6aded5c07562c4dd5e7d28d7c8b14033010f7ee35146dcae82d2a4c02bad4ee633a51b0ad9494de74d3df3a885cf5d0c5968a01fb7dacfa3dddde6d7751c69f00659a0726389f209fc9ca5f68c83e1d2917f3f3177ff0239febc0b8f5a0202c3a7b138d85c4cff110d42b84a9537338c775eba0186c36e2d6d85c69ef18bb6e441f0184f030ef73778eb33903ef2788e0ab194819"}}, @random_vendor={0xdd, 0x1d, "9b47d7b1593a80f31de658db7a2385ecf9ce8ab0a6228a9955197c0c16"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3f, 0x0, 0xbe}}, @random_vendor={0xdd, 0x2a, "c8aab52556c512382c22ec6f01cfe3650b7ad6ad54ffb3a42c54533294253b9e1d53bd2b01929cc23813"}, @ibss={0x6, 0x2, 0x3}]}, @NL80211_ATTR_BEACON_TAIL={0x15, 0xf, [@sec_chan_ofs={0x3e, 0x1}, @chsw_timing={0x68, 0x4, {0xffc6, 0x800}}, @cf={0x4, 0x6, {0x7, 0x65, 0x800, 0x8}}]}, @NL80211_ATTR_BEACON_HEAD={0x221, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @from_mac=@broadcast, {0x2, 0x2}}, 0x81, @default, 0x4042, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xef, "843036a112fdded99c7b0566f431a04c18cfc89f4a25e809a94a80d893811a1efb5bf8e6604e56d224ac433660b9aadc49eac5fd3303570fc0337ef18faf6643a9339fae8aabcea66a9e24f8f5fef8f61f178551ad9f17d58d320b756482a4a6fc80281f9cc1c401c08fc3a8921695ce017670028663c432ad18906e889eaef57626acc31e1fe9ba559b8dc3e4bf67efb6c6302f13d14ebed78320af154d2759e20394393161da57ba08b7a1cb9f2c93b6ab274efd258baa20820ff8c283a172128f4cc84c52cd5fe609a5cdc3310187c06b88f8e20117877baad66c73f895f15f5fd460bcffeeffb3f00e2a2864cb"}, {0xdd, 0x35, "98ad99a676af37e8b8318f7a7550b25abe2ee42512175c56b1ad242fa4ed97255062db8e116b5e614af777c85d25f66b430066c010"}, {0xdd, 0xc7, "8063af6bdd840e1317672a7f50dac3549cb7aeef6ce3df38124ddede1da0294f7995bc2bf63df4036d1fa2a8912782e4c2a9e4eecc82a6c63a10ea02b894e1a382068e0d42cf73cc039230cfdfecf255f54a529e692983bb72eb034e0d7a5804dda3a7b4c19b6478f68f29299ac068aa9a40681014bb214aeb6bce31250bead815bd714e6094f6a0041f4efe0f7321108bdbab40d8686471aa6de5e9446d141b73c7853acd1fbd48b2f704c4f5d18d12f42485d1f65525cc4a8494a703bb170a52755b7f40bee1"}]}}]]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4f}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1c}]}, 0x514}, 0x1, 0x0, 0x0, 0x8015}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r2)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x72}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x52}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000c40)={[0x101]}, 0x8, 0x80000)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r4, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff4c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x28008840)
getpeername$inet6(r2, &(0x7f0000000d80)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000dc0)=0x1c)
fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x8, 0x2)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0)
read(r6, &(0x7f0000000e80)=""/221, 0xdd)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r7, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x4)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, r7, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2218cec3c6"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80000)

[   67.915550] audit: type=1400 audit(1663724362.437:6): avc:  denied  { execmem } for  pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:39:22 executing program 7:
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=0xff, 0x4)
r0 = pidfd_open(0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x6, 0x9})
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000080)=""/96, &(0x7f0000000100)=0x60)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000140)=0x9, 0x4)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x94cae68a76578515, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x24012, r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5c}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r6=>r0}, './file0\x00'})
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000380)={{r6}, 0x0, 0x100000000, 0x9})
bind$inet(r6, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400))
r7 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000440), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f0000000480))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8)

01:39:22 executing program 5:
ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x14)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x418042, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x4000080)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0xb0000000})
r1 = signalfd(r0, &(0x7f0000000180)={[0xbb01]}, 0x8)
recvmsg$unix(r1, &(0x7f0000001500)={&(0x7f00000001c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/133, 0x85}], 0x4, &(0x7f0000001440)=[@rights={{0x2c, 0x1, 0x1, [<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r6=>0x0, <r7=>0x0, <r8=>0x0}}}, @rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x2000)
r12 = openat$sr(0xffffffffffffff9c, &(0x7f0000001540), 0x84002, 0x0)
r13 = accept$unix(0xffffffffffffffff, &(0x7f0000001580), &(0x7f0000001600)=0x6e)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000001800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r14=>r7, r8}}, './file0\x00'})
r15 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0)
r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r17 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001880), 0x9a0c0, 0x0)
r18 = getegid()
pipe(&(0x7f00000018c0)={0xffffffffffffffff, <r19=>0xffffffffffffffff})
r20 = socket$nl_xfrm(0x10, 0x3, 0x6)
r21 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001900), 0x20200, 0x0)
sendmmsg$unix(r13, &(0x7f0000002240)=[{{&(0x7f0000001640)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000016c0)="29ee90802de41bf8b582a11881f0a7a4e739e1ea2bf881d8fae1758a4d2601f0e0ae52c2203425acde4a177ca203d0fac890abf94b299edf2f90d2ffc4f151f790e9237a8572251c5ffd226230679d456f5c6b0bd0bd44eff6cea0144ae6d83eba4b93d3e0bd72ba1163dbcc28dfc3f53d569a618989792ec7e3add78743e0dc8a4945d1f357f2b3e0286301cdef3e9e54bd398d329aaf64fd7dc25fd7b3b3dc83c3a0476c1cbce5af1b1a8e4fbdce0c69fe4065a597778fd77dcdc9bbcfdd7b572f3e8f5d", 0xc5}], 0x1, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, r8}}}, @rights={{0x38, 0x1, 0x1, [r10, r15, r16, r4, r4, r17, r5, r11, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r18}}}, @rights={{0x28, 0x1, 0x1, [r3, r19, r20, r9, r21, r9]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0xe0, 0x4090}}, {{&(0x7f0000001a40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001ac0)="50fdb43b2d1587761d92dc00cdd387f82eaa2db358ed5579eeef51c3cc3dd0d9d4c86e188af1a23b75fe56d58e99752d26", 0x31}, {&(0x7f0000001b00)="1242eeb4ef7d4dae97", 0x9}, {&(0x7f0000001b40)="aeaecad452ae0882e004e6a56ec9ed0ce023c3dac46a0e2795466fd05ea40635ff86baefa0a2f89d902c4186ee4b955f363b30d247205b44d6677cc54d8d227ab928630c21c30336e977a2a1b0b70ea878e092188c16cb8e2537040d1608b1d84564ddcbfcf0ec0710338235b6882a9328c6450d74c682d9e4ca9db0a83a016797e90df61e0214188dfcddc0f9529302b0111a3da8aae963be5268fe18326a5e9690fbcd9944fc84e3b0ff1b3b54d8625a869ad2864f6c4ee7bc3a6db7a432f0d8d0ed8493450551bb1a550d9f2cb2655ab3ff812a6cb4dc3357200f9b7d388475f10905660bcad83d8f36bee089227ff5ee", 0xf2}, {&(0x7f0000001c40)="59fd0b3ab663fb6d06284cabf316f4d9efbd46e32d0caa8567ba56d01259b89c7c561f6ac58051549288f9ffa51a56d2c11ad1f27739a383cb62bf009c8edd422b9a321dea64c7f0001f9b567283315dcc55e248b794e0cb3cdcbd38096e423c7bab04a5ae1917671307d4a195c5dff4c925a97295c7d4d4d1cc85bafd4d3c20de94316f3c6653bb7910d8484f64a27046279d393fed1ed0895cf507d808b2332bfcfb3901c978d7ed47d27c47ad896450963e7ca06fefd7f69658b11566eac9c0a6dd44f7336299f131862bc6f7905997a38cf24c3b", 0xd6}, {&(0x7f0000001d40)="ac4afe0afc9ea01be9dfb4f6a2828542dfa11d67f40c251dcf9b3961b10d8a0244286cf8a474c230a3e704780d17dc3080cd4c9e95e235e7ea1ee41ee48e0095fa4b62a7437a1d9f6192c9fe7546a90a980a54844d87cd24f273b247c54e24db8bb7a32c587343283a09c0443a05e153a536886fb519cee5670f3073bff361662d46e88e7c95744b80445f95662bc33a2f8a6b02ddc1f044fd8b088c5487e05420e8f86470894903f0baefe1662678da06cc0c74edeedf187c245eb1c2559f50d847147922acc3cb8bfe05b5043bacf204161d6be52a763661e572dba27a30e696c0b30e5f39a030dfbb7681ae86f8", 0xef}, {&(0x7f0000001e40)="bd8ee162dbb5c8b611c72ce9ebc385594c70d46c57dc71885790fde312915644330c001aa0b43376dc92b69cd4184590b238a49db70e808deea260c940f461dbb968c63eb8bfb587980393496bb493db54e6701c31a236d2db1f8c9b333385d31c502cd7c023f11dad1e0c14735b6ff2be530677f4810026cad25760cb5c6001a9ac31be7f0e007898f7031a8f04d29a25df2d8b73ccf0a1c5946f2cf989b2d839ff835584329164716c40ec937d90ff9cc5ba7a3d4663685088dda919694d1f8d12bb434a64d4e3322885e9f2da9a07699b512f19794b9a0ec379b3", 0xdc}], 0x6, 0x0, 0x0, 0x40090}}, {{&(0x7f0000001fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000002040)="07948bf2098e37ba375678ed5402c5d951513d558257c50f88d90acb01416fe738f2781ae862fb9ccea9b11344b37e79aac744aecd6c6e865e1c3c", 0x3b}, {&(0x7f0000002080)="9caf6d78a60b8d891cebc2d75fc108ee4e4dfd2e5e9238bfd64d12f01f528ffe5e9dfa7ecb652c3a9d3bbea14c77cab4d52f291f16f61c8be07d84dd19eeccf3a903a5134f", 0x45}, {&(0x7f0000002100)="52fd8d59b2602c95c31d3a887ce0e1631085cdfa4e20f4ef23f504f0a60fdf4b0fd21e38bbc163735eead5c0a9236fc2f4d514807c7aa0f5e6c45b63e6b2eaf62b88e584e94c889f30b915b016d60185a520f04ce585fe", 0x57}, {&(0x7f0000002180)="95276c2e663c971122771eb5201481897b0dceb6da198305d5be352d1fcaf95d0d691cc5590aa7121a3efd4d9d65a3ad4393e912d35dae1fb29cc6023757f380c833b764cd5d5e911cfcc6f9aa1abe9446eab5cdba393b42b047cb5ed6103e7d7f60cc7f5ac07085a4c9026635", 0x6d}], 0x4, 0x0, 0x0, 0x805}}], 0x3, 0x4040000)
ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x1)
syz_mount_image$vfat(&(0x7f0000002300), &(0x7f0000002340)='./file1\x00', 0x9882, 0x3, &(0x7f0000002500)=[{&(0x7f0000002380)="348e81271fdf38caeb75aa9ce2afc5fd50183a16510bdde84620d5c4eb3e35c08cd9b4a5aa8e0783ef7b94deeb2605a9d7f306a930c6f44c4556a347c7f264ac543ac3e603727a6ffb2645661e46398b61410a9f5684e80777a25ee6a6c99c7ea4040d6bfd068c2a87bd6b0e313601a4a928ec05234e0f7dfbb063cc5b3ed4418ab2525c5ece79aa0858d79ba7afdff9788be4c90cfdcc70922c3cabcdadc5570a4d9b2bd6b2f0b9a156a8f765fbb74ef612246658a30963692379256afc48f34ad7efbd123318f69df7e36fada53076230c57a6af16ad3c23af732e5733", 0xde}, {&(0x7f0000002480)="5c01d45f3c50d1168c156bd2c39d2c000727dc93174c8d8ea03943ba6b4d20", 0x1f, 0x7fffffff}, {&(0x7f00000024c0)="42ee50137a2a3194988643587492955eba0f86053e6688147f696f2005f723d7db5e874f8b38519f28596caf2a18cf9d8d727c748bc835d350dcea68d03720", 0x3f, 0x9}], 0x200804, &(0x7f0000002880)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8no}, {@shortname_lower}, {@numtail}, {@nonumtail}, {@utf8no}, {@utf8no}], [{@euid_lt}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, '(]-+'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/nvram\x00'}}, {@fowner_gt}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_eq}, {@obj_role={'obj_role', 0x3d, 'syz0\x00'}}]})

01:39:22 executing program 6:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x20, 0xff, 0x1f, 0x7, 0x0, 0x7ff, 0x10001, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x8, 0x9}, 0xa00, 0x7, 0x3ff, 0x4, 0x80000000, 0x81, 0x80, 0x0, 0x1e5, 0x0, 0x80000000}, r0, 0x3, 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x420180)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = geteuid()
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1903000, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'syz1\x00'}}, {@cache_fscache}, {@dfltgid}, {@cache_loose}, {@afid={'afid', 0x3d, 0x7}}, {@aname={'aname', 0x3d, 'syz1\x00'}}, {@loose}], [{@euid_lt={'euid<', r3}}, {@euid_lt={'euid<', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_user={'subj_user', 0x3d, 'syz1\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz1\x00'}}]}})
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x181102, 0x0)
setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x4)
lstat(&(0x7f0000000400)='.\x00', &(0x7f0000000440))
r6 = socket$inet(0x2, 0x5, 0x6)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e23, 0xff, @local, 0x1}}, 0x0, 0x0, 0x11, 0x0, "bcb52e9d8bd49abb7845815febd99f31eec47286d7f0500932424b2b5f329df4ea9248dc31005d3a92686db7280942b7ae7b1012fd814c8780e4fbc4a8285e484156034f18a165b15f3c869c4143f6ed"}, 0xd8)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
r9 = fsmount(r5, 0x1, 0x81)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e22, 0x3ae, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x0, 0x22, 0x0, "a5600ca751c06da285c0a8b1b8ef00efd2447eb5c9966bac93d518a9d26e95292e1b3be555c9eb42ef97c4ec27e429204e12890d609e95f265bddd5c3ae2b1156af86190aad27e628056b7f389de11f2"}, 0xd8)
write(r9, &(0x7f00000008c0)="4078a3388f10f2ee3caf3cb9955b40beba3b3151ba093c2572fc8198d12a37ace07d5e227252ce4580cd9d4ac9a67cb1774285b99a2971ec69f80db1850d83211c1f098139472703280f579cb6ee35fe90e6ebb2b9de73959a2495342ef99d0b4381ef745678f8a7e4bd1cf55b11903f67b8fa4db7de5858efb0358d26782eb1588ff735d74b58dc8c66e0190b73843ffbeb5e344ebc522dafc4c96c17f5683fc43cc36fec154e58bcd9a89f9e01094f232d315e74683394c72503eecacbcec6d2a7ac9e33ef5a89bffbc98837714dfb3c881e085b1003f396e7a27fd832787e4414fd9547047dd0", 0xe8)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000009c0)="cdf77c56cec556f107eff20a833178424412d546db2631bafb8aaa97a42351facefcadd1081e37cac6a9296d43393966a6e0118d35e4ea32eb58f88b253f71e68ea6e07289505946733bb7ce54e21f90d9c31db2171805fe07dbbd3d70b14b865494ecf5a2ff788cdf82c41eba59d2956b0813ef1c90b794764c76d11d667bf7e8256ec864716f4d79ca8f19ea5aa1ed0402640721ddc21aefdf153da58c0958d6ff1551b41440fb9262580499dffa9e3a6f82c880", 0xb5)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000a80)={0x1, 'syzkaller1\x00', {}, 0x401})
removexattr(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)=@known='system.advise\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000b40)={"a3191af6bd45bfa96e10fa89840265bb", r7, r8, {0x8, 0x5ade}, {0x6, 0x7}, 0x7ff, [0x2, 0x1, 0x101, 0x1, 0xffffffffffffff7f, 0x40, 0x1, 0x2, 0x100000000, 0x11f0, 0x3, 0xfffffffffffffff8, 0xfff, 0x4, 0x1, 0x200]})

[   69.122248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.124097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.125617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.131403] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.133504] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   69.135800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.140604] Bluetooth: hci0: HCI_REQ-0x0c1a
[   69.174761] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.185894] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.188650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.191288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.192959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.194523] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.197594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.199381] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   69.202183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.217095] Bluetooth: hci2: HCI_REQ-0x0c1a
[   69.259942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.262286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   69.264141] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   69.267794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   69.269732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.270803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   69.272398] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   69.277241] Bluetooth: hci1: HCI_REQ-0x0c1a
[   69.292824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   69.297416] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   69.300818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   69.302144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   69.305884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   69.308538] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   69.310072] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   69.311699] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   69.312840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   69.318301] Bluetooth: hci5: HCI_REQ-0x0c1a
[   69.325652] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   69.326821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   69.328040] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   69.335465] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   69.343480] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   69.344822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   69.348139] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   69.349665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   69.364759] Bluetooth: hci6: HCI_REQ-0x0c1a
[   69.366304] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   69.382251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   69.383237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   69.387108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   69.391598] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   69.398593] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   69.399791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   69.405642] Bluetooth: hci4: HCI_REQ-0x0c1a
[   69.417332] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   69.421682] Bluetooth: hci7: HCI_REQ-0x0c1a
[   69.431721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   69.483108] Bluetooth: hci3: HCI_REQ-0x0c1a
[   71.152420] Bluetooth: hci0: command 0x0409 tx timeout
[   71.279139] Bluetooth: hci2: command 0x0409 tx timeout
[   71.343052] Bluetooth: hci5: command 0x0409 tx timeout
[   71.343075] Bluetooth: hci1: command 0x0409 tx timeout
[   71.408045] Bluetooth: hci6: command 0x0409 tx timeout
[   71.472052] Bluetooth: hci7: command 0x0409 tx timeout
[   71.472074] Bluetooth: hci4: command 0x0409 tx timeout
[   71.535111] Bluetooth: hci3: command 0x0409 tx timeout
[   73.199480] Bluetooth: hci0: command 0x041b tx timeout
[   73.328083] Bluetooth: hci2: command 0x041b tx timeout
[   73.391042] Bluetooth: hci5: command 0x041b tx timeout
[   73.391596] Bluetooth: hci1: command 0x041b tx timeout
[   73.455040] Bluetooth: hci6: command 0x041b tx timeout
[   73.519137] Bluetooth: hci4: command 0x041b tx timeout
[   73.519540] Bluetooth: hci7: command 0x041b tx timeout
[   73.583073] Bluetooth: hci3: command 0x041b tx timeout
[   75.248032] Bluetooth: hci0: command 0x040f tx timeout
[   75.376021] Bluetooth: hci2: command 0x040f tx timeout
[   75.440126] Bluetooth: hci1: command 0x040f tx timeout
[   75.440517] Bluetooth: hci5: command 0x040f tx timeout
[   75.504023] Bluetooth: hci6: command 0x040f tx timeout
[   75.568042] Bluetooth: hci7: command 0x040f tx timeout
[   75.568451] Bluetooth: hci4: command 0x040f tx timeout
[   75.632065] Bluetooth: hci3: command 0x040f tx timeout
[   77.296038] Bluetooth: hci0: command 0x0419 tx timeout
[   77.424070] Bluetooth: hci2: command 0x0419 tx timeout
[   77.488057] Bluetooth: hci5: command 0x0419 tx timeout
[   77.488449] Bluetooth: hci1: command 0x0419 tx timeout
[   77.552062] Bluetooth: hci6: command 0x0419 tx timeout
[   77.616086] Bluetooth: hci4: command 0x0419 tx timeout
[   77.616525] Bluetooth: hci7: command 0x0419 tx timeout
[   77.680024] Bluetooth: hci3: command 0x0419 tx timeout
[  119.892348] audit: type=1400 audit(1663724414.413:7): avc:  denied  { open } for  pid=3850 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
01:40:14 executing program 6:
mkdir(&(0x7f0000003b80)='./file0\x00', 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r3, r2)
statx(r3, &(0x7f0000000200)='./file0\x00', 0x1800, 0x20, &(0x7f0000000100))
setuid(r1)

01:40:14 executing program 6:
mkdir(&(0x7f0000003b80)='./file0\x00', 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r3, r2)
statx(r3, &(0x7f0000000200)='./file0\x00', 0x1800, 0x20, &(0x7f0000000100))
setuid(r1)

01:40:15 executing program 6:
mkdir(&(0x7f0000003b80)='./file0\x00', 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r3, r2)
statx(r3, &(0x7f0000000200)='./file0\x00', 0x1800, 0x20, &(0x7f0000000100))
setuid(r1)

01:40:15 executing program 6:
mkdir(&(0x7f0000003b80)='./file0\x00', 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r3, r2)
statx(r3, &(0x7f0000000200)='./file0\x00', 0x1800, 0x20, &(0x7f0000000100))
setuid(r1)

01:40:15 executing program 6:
mkdir(&(0x7f0000003b80)='./file0\x00', 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r2, r1)
statx(r2, &(0x7f0000000200)='./file0\x00', 0x1800, 0x20, &(0x7f0000000100))

01:40:15 executing program 4:
mkdir(&(0x7f0000003b80)='./file0\x00', 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r3, r2)
statx(r3, &(0x7f0000000200)='./file0\x00', 0x1800, 0x20, &(0x7f0000000100))
setuid(r1)

01:40:15 executing program 6:
mkdir(&(0x7f0000003b80)='./file0\x00', 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r2, r1)

01:40:15 executing program 4:
mkdir(&(0x7f0000003b80)='./file0\x00', 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r3, r2)
statx(r3, &(0x7f0000000200)='./file0\x00', 0x1800, 0x20, &(0x7f0000000100))
setuid(r1)

[  121.151320] loop5: detected capacity change from 0 to 264192
[  121.177427] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value
[  121.528403] loop1: detected capacity change from 0 to 8
[  121.531024] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value
[  121.613903] loop1: detected capacity change from 0 to 8
[  121.615169] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value
[  121.839494] audit: type=1400 audit(1663724416.360:8): avc:  denied  { map } for  pid=3973 comm="syz-executor.2" path="pipe:[14462]" dev="pipefs" ino=14462 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1
[  121.842784] audit: type=1400 audit(1663724416.361:9): avc:  denied  { execute } for  pid=3973 comm="syz-executor.2" path="pipe:[14462]" dev="pipefs" ino=14462 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1
01:40:31 executing program 5:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="946f353f", @ANYRES16=r1, @ANYBLOB="10002abd7000fbdbdf251300000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "dd02a6", 0x2, 0x11, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0)

01:40:31 executing program 6:
mkdir(&(0x7f0000003b80)='./file0\x00', 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

01:40:31 executing program 4:
mkdir(&(0x7f0000003b80)='./file0\x00', 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r2, r1)
statx(r2, &(0x7f0000000200)='./file0\x00', 0x1800, 0x20, &(0x7f0000000100))

01:40:31 executing program 1:
r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff)
fcntl$addseals(r0, 0x409, 0x8)
syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x273, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000740))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff3447c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef819558"], 0x125)

01:40:31 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800))
r2 = syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)=<r3=>0x0)
getpid()
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x100010, r1, 0x8000000)
r5 = accept4$unix(r0, &(0x7f0000000940)=@abs, &(0x7f00000006c0)=0x6e, 0x80800)
syz_io_uring_submit(r4, r3, &(0x7f0000000780)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r5, 0x0, &(0x7f00000009c0)="376785935154b7f2b5d1d3a62480077f1304a82bfbe16b67bb61a5e1c3a9edd274901e5046064d531bbf9f6bcb095576a61f2b5dae47d57a777df037ad9c81c0da74ad494b57ff9eaa701dc23d8939f4f1403141c480f229d8a2b623e7bf6583d3e3e6f86ebddc0594be4bb58d099ed275ed70456e80bb08c98324b8ffc342553da4ce99d01ac40a9926bb8fec0bcd26ee21887b8571bdedb6876fe39ea1932243b93d075b0cf5d8f41e74279c49eec07bff3e57349f611aac8fb4f7a21e9661835de898541b4b7b39c7e4a5bc96b8b435cd41ffdf997ce0c895b1ce444a5b0c803467ee7b3b5e4e39e0edaa9c667be69bee9b3995", 0xf5, 0x8800, 0x1}, 0x1)
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d0, 0x20, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9df, 0x9}, 0x1c402, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r6, 0x0)
ftruncate(r1, 0xfffffffffffffff7)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95)
close(r6)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
finit_module(r0, 0x0, 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900))
syz_io_uring_setup(0x5787, &(0x7f0000000400)={0x0, 0x700f, 0x0, 0x3, 0x28a, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000005c0))

01:40:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff338a, 0x17}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0xb8, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x91b}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x747}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa35}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x35a}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x412}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2fd3}]}]}]}, 0x104}}, 0x0)
r3 = memfd_create(&(0x7f00000003c0)='\x00', 0x0)
fcntl$addseals(r3, 0x409, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000a00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000480)={0x514, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0x4b0, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x15c, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x114, 0xf, [@tim={0x5, 0xb9, {0x8, 0xd, 0x7, "2434d5b1f9d5df90206dae384d9ad9a3a8041083e2f137d44d4134a462128ef1c4f6aded5c07562c4dd5e7d28d7c8b14033010f7ee35146dcae82d2a4c02bad4ee633a51b0ad9494de74d3df3a885cf5d0c5968a01fb7dacfa3dddde6d7751c69f00659a0726389f209fc9ca5f68c83e1d2917f3f3177ff0239febc0b8f5a0202c3a7b138d85c4cff110d42b84a9537338c775eba0186c36e2d6d85c69ef18bb6e441f0184f030ef73778eb33903ef2788e0ab194819"}}, @random_vendor={0xdd, 0x1d, "9b47d7b1593a80f31de658db7a2385ecf9ce8ab0a6228a9955197c0c16"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3f, 0x0, 0xbe}}, @random_vendor={0xdd, 0x2a, "c8aab52556c512382c22ec6f01cfe3650b7ad6ad54ffb3a42c54533294253b9e1d53bd2b01929cc23813"}, @ibss={0x6, 0x2, 0x3}]}, @NL80211_ATTR_BEACON_TAIL={0x15, 0xf, [@sec_chan_ofs={0x3e, 0x1}, @chsw_timing={0x68, 0x4, {0xffc6, 0x800}}, @cf={0x4, 0x6, {0x7, 0x65, 0x800, 0x8}}]}, @NL80211_ATTR_BEACON_HEAD={0x221, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @from_mac=@broadcast, {0x2, 0x2}}, 0x81, @default, 0x4042, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xef, "843036a112fdded99c7b0566f431a04c18cfc89f4a25e809a94a80d893811a1efb5bf8e6604e56d224ac433660b9aadc49eac5fd3303570fc0337ef18faf6643a9339fae8aabcea66a9e24f8f5fef8f61f178551ad9f17d58d320b756482a4a6fc80281f9cc1c401c08fc3a8921695ce017670028663c432ad18906e889eaef57626acc31e1fe9ba559b8dc3e4bf67efb6c6302f13d14ebed78320af154d2759e20394393161da57ba08b7a1cb9f2c93b6ab274efd258baa20820ff8c283a172128f4cc84c52cd5fe609a5cdc3310187c06b88f8e20117877baad66c73f895f15f5fd460bcffeeffb3f00e2a2864cb"}, {0xdd, 0x35, "98ad99a676af37e8b8318f7a7550b25abe2ee42512175c56b1ad242fa4ed97255062db8e116b5e614af777c85d25f66b430066c010"}, {0xdd, 0xc7, "8063af6bdd840e1317672a7f50dac3549cb7aeef6ce3df38124ddede1da0294f7995bc2bf63df4036d1fa2a8912782e4c2a9e4eecc82a6c63a10ea02b894e1a382068e0d42cf73cc039230cfdfecf255f54a529e692983bb72eb034e0d7a5804dda3a7b4c19b6478f68f29299ac068aa9a40681014bb214aeb6bce31250bead815bd714e6094f6a0041f4efe0f7321108bdbab40d8686471aa6de5e9446d141b73c7853acd1fbd48b2f704c4f5d18d12f42485d1f65525cc4a8494a703bb170a52755b7f40bee1"}]}}]]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4f}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1c}]}, 0x514}, 0x1, 0x0, 0x0, 0x8015}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r2)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x72}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x52}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000c40)={[0x101]}, 0x8, 0x80000)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r4, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff4c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x28008840)
getpeername$inet6(r2, &(0x7f0000000d80)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000dc0)=0x1c)
fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x8, 0x2)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0)
read(r6, &(0x7f0000000e80)=""/221, 0xdd)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r7, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x4)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, r7, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2218cec3c6"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80000)

01:40:31 executing program 2:
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000013c0)={0x0, 0xfff})

01:40:31 executing program 0:
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1508, 0x0, 0x5, 0x604, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x4}, 0x4a, 0x1f, 0x2, 0x2, 0x4, 'syz1\x00', "dd875f5372a35232d7d3e635040ae6fa3c19483dbd88eda1f37e5a3285239a8e", "17ae5ec239f4416eba4dd419861cbdf323422ff5397570c1190e9a6e9a0373e0", [{0x7ff, 0x2, {0x3}}, {0xff, 0x200, {0x3, 0x8}}, {0x400, 0x0, {0x3, 0x9}}, {0xff, 0x2, {0x2, 0x9}}, {0x4, 0x9, {0x2, 0xe83e}}, {0x80, 0x2, {0x1, 0x96}}, {0xc000, 0x14, {0x1}}, {0xfe01, 0x586, {0x0, 0x7}}, {0x1, 0x2, {0x1, 0x5}}, {0xfff9, 0x2, {0x0, 0x8}}, {0xfff, 0x6, {0x1, 0x1000}}, {0x4, 0x0, {0x2, 0x8001}}, {0x1ff, 0x0, {0x3, 0x7f}}, {0x6, 0x5, {0x1, 0xf8d}}, {0x7ff, 0x6a, {0x2, 0xc000}}, {0x1ff, 0x2, {0x1, 0x8}}, {0x1, 0x3, {0x1, 0x4}}, {0xb8, 0xd6, {0x2, 0x6750}}, {0x1000, 0x1, {0x0, 0x918f}}, {0xffff, 0x3, {0x1, 0x5}}, {0x5, 0x1000, {0x3}}, {0x3f, 0x2, {0x2, 0xffff}}, {0xf2fd, 0x4, {0x1, 0x2}}, {0x2aa1, 0x200, {0x1, 0x3f}}, {0x400, 0x7f, {0x3, 0x1}}, {0x9f3, 0x2, {0x2}}, {0x6a, 0x8, {0x3, 0x1}}, {0x3, 0xd4, {0x3, 0xfffffe01}}, {0xff, 0xb9, {0x2, 0x3f}}, {0x200, 0x5, {0x0, 0x8000}}, {0x826e, 0x1ff, {0x2, 0x7}}, {0x9aa6, 0x9}, {0x1, 0x7, {0x1, 0x4}}, {0x2, 0x212, {0x1, 0x4}}, {0x61, 0x200, {0x1, 0x13b422d8}}, {0x7, 0x3ff, {0x2, 0x9}}, {0x8, 0x5, {0x2, 0x3}}, {0xb3, 0x5, {0x1, 0x3}}, {0x640, 0xa7, {0x0, 0xeada}}, {0x2, 0x4, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x20}, 0x3, 0x70, 0x4, 0x2, 0x15, 'syz1\x00', "43ded0a794b90d9ba90d364482a0255293255ecb48fced4555f572741e4a0dc1", "64a005fa2ab831f06501c95ce216794a7eaa7d0a0e9b24c0f9901e990dc002ab", [{0x7d0e, 0x9, {0x3, 0x8}}, {0x4, 0x5, {0x0, 0x9}}, {0x401, 0x2, {0x3, 0x2400}}, {0x400, 0x400, {0x2, 0x9}}, {0x3, 0x8, {0x1, 0x890}}, {0xbd0, 0x7, {0x3, 0x168}}, {0x7f, 0x1, {0x3, 0x8001}}, {0x0, 0x5, {0x1, 0x8}}, {0x6, 0x7, {0x1}}, {0x4, 0x100, {0x0, 0x1}}, {0xfffd, 0x7e0, {0x2, 0x1}}, {0x7, 0x800, {0x1, 0x1000}}, {0x1, 0x9a20, {0x3, 0x4}}, {0x2, 0x3, {0x0, 0x3}}, {0x0, 0x0, {0x3, 0xffff}}, {0x8, 0x0, {0x2}}, {0x1, 0x9, {0x2, 0x9}}, {0x3, 0x0, {0x3, 0xffff1c47}}, {0x7, 0x7ff, {0x1, 0xad}}, {0xc5b8, 0x400, {0x2, 0x1}}, {0x0, 0x7, {0x0, 0x71a8}}, {0x400, 0x3, {0x1, 0x5}}, {0x8, 0x6, {0x0, 0x3}}, {0x400, 0x5, {0x0, 0x6}}, {0x5, 0x401, {0x0, 0xfffffff7}}, {0x0, 0x401, {0x3, 0xffff}}, {0x4, 0x3, {0x0, 0x4}}, {0xfffd, 0x32, {0x1, 0x800}}, {0x3, 0xf515, {0x3, 0x1}}, {0x9, 0x0, {0x2, 0x6}}, {0x1b7, 0xffff, {0x2, 0x9}}, {0x2, 0xede, {0x1, 0x6}}, {0x0, 0xfff, {0x1, 0x16a1d890}}, {0xfc00, 0x6, {0x2, 0xffffffff}}, {0xfff8, 0xb1b, {0x0, 0x5}}, {0x6, 0x2, {0x3, 0x12}}, {0x3, 0x0, {0x3, 0xfff}}, {0xfffa, 0x4, {0x2}}, {0x1f, 0x8000, {0x0, 0xffffffff}}, {0x5, 0x80, {0x4, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x780e}, 0x6, 0x1, 0x101, 0xfffe, 0x4, 'syz1\x00', "992f93e9b46b3b07239b50c012b931e615dd4e42b7401eb10c7049729bf68a0c", "eb8711430bd542154e5cb61b720fdb899243fbd84fbd923624c2312bbe86a4a2", [{0x7f, 0x81, {0x0, 0x94}}, {0x1, 0x7070, {0x2, 0x424}}, {0xefc, 0x3, {0x3, 0x48}}, {0x96d4, 0x0, {0x1, 0xbe6}}, {0x4, 0x1, {0x0, 0x1}}, {0x9, 0x7f, {0x0, 0x4}}, {0x5, 0xfffd, {0x0, 0x7ff}}, {0x6, 0x1, {0x0, 0xffffffff}}, {0xfff8, 0xf2b5, {0x1, 0xfffffde5}}, {0x1000, 0x8000, {0x1, 0x91}}, {0x7fff, 0x9, {0x1, 0x3f}}, {0x5, 0x1f, {0x2, 0x2}}, {0x7, 0x8001, {0x2, 0x1}}, {0x6, 0x3, {0x2}}, {0x3, 0x39, {0x3, 0x17}}, {0x6, 0x5, {0x1, 0x5}}, {0x6, 0xa24d, {0x3, 0xffff}}, {0x1, 0x1, {0x0, 0x9}}, {0x4, 0xfffa, {0x0, 0x8000}}, {0x5, 0x0, {0x2, 0x3}}, {0x5, 0x4, {0x3, 0xa218}}, {0x6, 0x7, {0x2, 0x3}}, {0x8, 0x5, {0x2, 0x8}}, {0x200, 0xa4, {0x2, 0x7da}}, {0x7ff, 0x7, {0x2, 0x401}}, {0x7, 0x3, {0x1}}, {0xe0, 0x87, {0x3, 0x5}}, {0x5, 0x2, {0x2, 0x3}}, {0x1, 0xfff7, {0x2, 0x5}}, {0x1ed0, 0x6, {0x2, 0x9}}, {0x9, 0x746}, {0x80, 0xff, {0x3, 0x1f}}, {0x4, 0x9, {0x2, 0x9}}, {0xffc0, 0x2, {0x2, 0x8}}, {0x2, 0x1000, {0x3, 0x8}}, {0xfa, 0x3ff, {0x0, 0x81}}, {0x2, 0x2, {0x2, 0x4}}, {0x3, 0x1ff, {0x1, 0x5}}, {0x0, 0x0, {0x0, 0x2}}, {0x3ff, 0x4, {0x1, 0x72}}]}}}, {{0x254, 0x1, {{0x1, 0xfffffffe}, 0x0, 0x0, 0x3, 0x1, 0x21, 'syz0\x00', "af46819c7de86c8f126b421a59fed2b867e62568a60f153749ba5894e5104617", "c7aeba47b1bb5fd8b8d54be84d03bfce90a97b21fc4a8b0c97d3f0a22c1240e8", [{0x6, 0xff18, {0x1, 0x6cba}}, {0x2, 0x9, {0x0, 0x100}}, {0x101, 0x200, {0x0, 0x6}}, {0xfffb, 0x8001, {0x2, 0xffff16f6}}, {0x3, 0xa8f6, {0x2, 0x6eae}}, {0x6, 0x20, {0x2, 0x1}}, {0xffff, 0x5, {0x2, 0xffffc2bd}}, {0x7, 0x6, {0x0, 0x1}}, {0x400, 0x8, {0x0, 0xfffffffe}}, {0x0, 0x3ff, {0x3, 0xc4e}}, {0x100, 0x200, {0x1, 0x7}}, {0xf801, 0x4, {0x3, 0x8}}, {0x1, 0x5, {0x2, 0x3}}, {0x9, 0x9, {0x1, 0x5}}, {0x5, 0x1000}, {0x400, 0x6, {0x1, 0x1000}}, {0x426, 0x3cf, {0x0, 0x40}}, {0xfffc, 0x200, {0x1, 0xc315c86}}, {0x4, 0x1, {0x1, 0x10000}}, {0x1ff, 0x1, {0x2, 0xff}}, {0x9f93, 0x9, {0x2, 0xe70}}, {0x1, 0x9, {0x2, 0xbec7}}, {0x4, 0x2, {0x3, 0x8}}, {0x37, 0xbd45, {0x0, 0x9}}, {0x8, 0x6, {0x0, 0x5}}, {0x2, 0x6, {0x3, 0x9a61}}, {0x6, 0x6, {0x2, 0x6}}, {0x9, 0xab9a, {0x1, 0x80}}, {0x6, 0x4, {0x2, 0xfffffff7}}, {0xfffe, 0x400, {0x3, 0x800}}, {0x9, 0x9, {0x0, 0x8000}}, {0x6, 0x0, {0x1, 0x1ff}}, {0x3f, 0x0, {0x0, 0x40}}, {0x7, 0x8, {0x1, 0x40}}, {0x3, 0x8, {0x3, 0x8}}, {0x8, 0x800, {0x3, 0x10000}}, {0x3, 0x7, {0x0, 0x1}}, {0x6, 0x3, {0x0, 0x7fffffff}}, {0x3, 0x401, {0x1, 0xfff}}, {0x3, 0x8000, {0x0, 0x3ff}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x9, 0x81, 0x504, 0x9, 0x8, 'syz0\x00', "e616eca57fe91a298ddb6b7b810142e49e955f517698806fed43d84c9dab0867", "b0a9f05f2e312422d35495a88d1ee660e23d49b7a0cacfcb69620f9721a5fab7", [{0x8, 0x7ff, {0x0, 0x22}}, {0xfe, 0x0, {0x2, 0xffffffff}}, {0x3, 0x6, {0x0, 0x10000}}, {0x7f, 0x4, {0x1, 0x40}}, {0x4, 0x5, {0x1, 0x1}}, {0x3ff, 0x4b17, {0x2, 0x5}}, {0x49cf, 0x3, {0x2, 0x7}}, {0x8, 0x6}, {0x0, 0x2, {0x2, 0xf0fc}}, {0x3f, 0x7, {0x1, 0x8000}}, {0x1, 0x9, {0x0, 0x64f}}, {0x9, 0x1, {0x0, 0x9}}, {0x7, 0x3f, {0x3, 0x1ff}}, {0x5, 0x8, {0x1, 0x4}}, {0x1000, 0x0, {0x0, 0x3f}}, {0x1f, 0x8, {0x2, 0x9}}, {0x8001, 0x2, {0x2, 0x3}}, {0x2, 0x3904, {0x1, 0x7}}, {0x0, 0x2, {0x1, 0x3}}, {0xffff, 0x4, {0x1}}, {0x7, 0x1ff, {0x3, 0x8000}}, {0x5, 0x7fff, {0x1, 0xf76d}}, {0x1, 0x200, {0x2, 0x1}}, {0x8, 0x3, {0x2, 0x8001}}, {0xff, 0x81, {0x0, 0x4c63dea4}}, {0x0, 0x2, {0x1}}, {0x38, 0x2, {0x0, 0x1}}, {0xc867, 0x401, {0x0, 0xffffff00}}, {0xfff8, 0x200, {0x0, 0xe146}}, {0x13, 0x1, {0x1, 0xfffffffe}}, {0x9, 0x8, {0x0, 0x80}}, {0xfffa, 0x7ff, {0x3, 0x8000}}, {0x9, 0x17, {0x3, 0xf4e}}, {0x20, 0xa4fa, {0x2, 0x7f}}, {0x7, 0xb3a8, {0x1, 0x4}}, {0x8000, 0xfe00, {0x3, 0x5}}, {0x8, 0x20, {0x3, 0x5}}, {0x0, 0x81, {0x0, 0x3}}, {0x1, 0x200, {0x0, 0x2}}, {0xfa7f, 0x1, {0x2, 0x100}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x4, 0x61, 0x81, 0x2, 0x1a, 'syz1\x00', "24d9a7e5f169db07ca5652dd846ba69b7ac06928baaebe29f92bb6fdb96e0ff6", "e8617555ed4279f25b2b22b0d901a947b6a58146633a0c4f6bb091fd99a297eb", [{0x7fff, 0x1, {0x2, 0x3}}, {0x9, 0x7f, {0x2, 0x10000}}, {0x2, 0x400, {0x3, 0x7}}, {0x4, 0x2, {0x2, 0x8}}, {0x8, 0x9, {0x0, 0xeb6f}}, {0x7, 0x5, {0x1, 0x8}}, {0x15, 0x20, {0x0, 0x101}}, {0x99, 0x1, {0x1, 0x9}}, {0x6, 0x8, {0x3, 0x4}}, {0x7, 0x1, {0x1, 0x4}}, {0x5e, 0x7e7c, {0x0, 0x9}}, {0x400, 0x1f, {0x2, 0x1ff}}, {0x5, 0x7f, {0x0, 0xfffffffe}}, {0x7, 0x9, {0x1, 0x20}}, {0xfff7, 0x1, {0x0, 0x466}}, {0xd72, 0x101, {0x3, 0x3ff}}, {0x1, 0x101, {0x0, 0x6}}, {0x5, 0xb082, {0x2, 0x1}}, {0x5, 0xea, {0x0, 0x3}}, {0x9, 0x2, {0x0, 0xee}}, {0x5, 0xa5, {0x3, 0xfffff185}}, {0x40, 0x0, {0x3, 0x2dff}}, {0xf0c, 0x7, {0x3, 0x3ff}}, {0x9, 0x8001, {0x2, 0x8000}}, {0x1, 0x15, {0x1, 0xd8}}, {0x100, 0x7, {0x0, 0x1}}, {0x5be, 0x2, {0x2, 0x401}}, {0x5, 0x0, {0x2, 0xfffffff9}}, {0xfff, 0x0, {0x3, 0x80000001}}, {0x5, 0xd7f6, {0x3, 0x7}}, {0x8, 0x81, {0x1, 0x1c4}}, {0xfc01, 0x5, {0x2, 0x2}}, {0x7ff, 0xfffd, {0x1, 0x800}}, {0x1a, 0xfffb, {0x2, 0x8}}, {0xe6c3, 0x7, {0x0, 0x8}}, {0x7f, 0x3, {0x3, 0x4}}, {0x2, 0x200, {0x1, 0x3ff}}, {0x3, 0x9, {0x1, 0x1}}, {0xff, 0x7, {0x0, 0xe873}}, {0x1, 0x7, {0x3, 0x200}}]}}}, {{0x254, 0x1, {{0x2, 0x1522}, 0xca, 0x8, 0x200, 0x5, 0x1f, 'syz0\x00', "daaa4a510acc50aa2568ec0c6ee694f153a3e7a1df398190baae62d5d218a45b", "a1a02535d821288ceaf3acf47374bb16710275b41c3293643c7054eed1608079", [{0x0, 0x7, {0x0, 0x10000}}, {0x3, 0xff80, {0x1, 0x2}}, {0x0, 0x0, {0x0, 0x401}}, {0x9, 0xcab6, {0x3, 0x20}}, {0x9, 0x7fff, {0x3, 0x1ff}}, {0x8d3, 0x1ff, {0x2, 0xffffffff}}, {0x3, 0xb7, {0x1, 0xffffff14}}, {0x2e8, 0x3f, {0x0, 0x4}}, {0x1ff, 0x6, {0x0, 0x7fffffff}}, {0x0, 0x5, {0x3, 0x6}}, {0x2, 0x8111, {0x1, 0x49}}, {0x3ff, 0x3, {0x3, 0xfff}}, {0x40, 0x0, {0x1, 0x9}}, {0x9, 0x401, {0xc2d385bc83f83bd4, 0x8001}}, {0x1000, 0x6, {0x3, 0x1}}, {0xfff, 0x8}, {0x101, 0x3ff, {0x0, 0x400}}, {0x81, 0xffff, {0x1, 0x7fffffff}}, {0x6, 0x1f, {0x0, 0x3f}}, {0x5, 0x6, {0x2, 0x401}}, {0x3, 0x9, {0x0, 0x2}}, {0xffff, 0x6, {0x1, 0x80}}, {0x34d2, 0x1, {0x1, 0x8}}, {0x101, 0x43, {0x3, 0x8000}}, {0x0, 0x7, {0x1, 0x3}}, {0x1, 0x100, {0x3, 0x5}}, {0x9, 0x7, {0x2, 0x1f}}, {0x20, 0x9, {0x2, 0x2476}}, {0x1000, 0x57c5, {0x2, 0x8000}}, {0x8, 0xd000, {0x3, 0x7fff}}, {0x5, 0x8, {0x1, 0x6}}, {0x1000, 0x7, {0x2, 0x6}}, {0x400, 0x3, {0x2, 0x4}}, {0x5, 0x4f, {0x0, 0x80000000}}, {0x5, 0xffff, {0x3}}, {0x1000, 0xd4, {0x3, 0x9}}, {0x0, 0x2, {0x0, 0xfffff000}}, {0x1d58, 0x6, {0x1, 0x5}}, {0x1ff, 0x452, {0x2, 0x7f}}, {0x6, 0xdf83, {0x3, 0x8001}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x1f, 0x81, 0x2, 0xfff8, 0x12, 'syz0\x00', "52326bfa335227b33383a0e164595118cc90e316d8dd5dc8c91b79616171ca3f", "1c1e0f1a59ff2232f27d8be220d78d095e627c2b8a8451cc98fb9dfc4a42549e", [{0x9efd, 0x1, {0x3, 0x6}}, {0x2, 0x3, {0x0, 0x100}}, {0x2, 0x1, {0x0, 0x7}}, {0xe013, 0x21b, {0x2, 0x3f}}, {0x2cf, 0x8001, {0x0, 0x8}}, {0x8, 0xee43, {0x0, 0x1f}}, {0x20, 0x3e9, {0x0, 0x4}}, {0x0, 0xc, {0x3, 0x7c}}, {0x40, 0x5, {0x2, 0x8}}, {0x40, 0x3, {0x0, 0x10000}}, {0x8001, 0xc6f8, {0x1, 0x9}}, {0x7, 0x9, {0x1, 0x9}}, {0x6, 0x40, {0x2, 0x1}}, {0x9, 0x6, {0x3, 0x7}}, {0x16b, 0x0, {0x2, 0x7fffffff}}, {0x8, 0x8001, {0x1, 0x2}}, {0x7ff, 0x80, {0x2, 0x2}}, {0x4, 0x2, {0x2, 0x6}}, {0x3, 0x7, {0x1, 0xfffffffa}}, {0x0, 0x4f3, {0x2, 0x7}}, {0x9, 0x0, {0x1, 0x1000}}, {0x2, 0x3ff, {0x2}}, {0xac0, 0x80, {0x1, 0xffff8000}}, {0x3, 0x0, {0x2, 0x2}}, {0x0, 0x7, {0x2, 0x2}}, {0x8001, 0x9, {0x1, 0x1}}, {0xfffc, 0x40, {0x1, 0x6}}, {0x4000, 0x9, {0x3, 0x3}}, {0x4, 0x4, {0x3, 0x2}}, {0x0, 0x7, {0x1, 0x2}}, {0x1ad7, 0x6, {0x0, 0x6}}, {0x29, 0x3, {0x1, 0x400}}, {0x9, 0x2, {0x0, 0x9}}, {0x20, 0x40, {0x2, 0x81}}, {0x2, 0x9, {0x1, 0x3}}, {0x2, 0x6, {0x3, 0xfffffffb}}, {0x0, 0x0, {0xd175534471156778, 0x9}}, {0xe108, 0xffff, {0x2, 0xfffffff8}}, {0x413, 0x7fff, {0x3, 0xfffffe0c}}, {0xfffd, 0x2, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x8000}, 0x40, 0x2, 0x0, 0x1f, 0x15, 'syz0\x00', "73c5b17e519efb982c17a281b962c00b7dde7cfffba88e5efeed3ba68523e42c", "14707b4cac14153d33516e763472cffc1f255f1015af326e676a84020b732d3c", [{0x7fff, 0x6, {0x2, 0x80000000}}, {0xba, 0xc800}, {0x81, 0x1ff, {0x0, 0x6}}, {0x81, 0x100, {0x2, 0xdbdc}}, {0xe25, 0x12ee, {0x2, 0x8}}, {0x5, 0x8a19, {0x1, 0x1}}, {0x7fff, 0xfffb, {0x1, 0x2}}, {0x72, 0x6, {0x2, 0x8000}}, {0x3, 0x2, {0x3, 0x7}}, {0x7fff, 0xfffc, {0x0, 0x400}}, {0x8, 0xb210, {0x1, 0x2}}, {0x0, 0xffe0, {0x2, 0x8000}}, {0x2, 0x8, {0x1, 0x6}}, {0x0, 0x0, {0x0, 0x3}}, {0x4, 0x9, {0x2, 0x41}}, {0x50e, 0x1, {0x0, 0x10000}}, {0x1, 0x4, {0x0, 0xfffffc9c}}, {0x100, 0x81, {0x0, 0x4}}, {0x2, 0x0, {0x2, 0x6cd1}}, {0x1057, 0x3ff, {0x0, 0x8}}, {0x8000, 0xffc0, {0x0, 0x200}}, {0x7, 0x9, {0x1, 0x7fff}}, {0x8, 0x1ff, {0x3, 0xffffffff}}, {0x4, 0x2, {0x6502c4bf0bbf70a6, 0x3f}}, {0x0, 0xffff, {0x0, 0x2}}, {0x8, 0x3f, {0x3, 0xffff5693}}, {0x1f, 0x0, {0x1, 0x4}}, {0x1, 0x6, {0x2, 0x888}}, {0x36, 0x4, {0x3, 0x9}}, {0x80, 0x7fd, {0x0, 0x81}}, {0x401, 0xd54e, {0x1, 0x4}}, {0x3, 0x8, {0x0, 0x20}}, {0xa37, 0x2, {0x3, 0x5}}, {0xc316, 0x7, {0x3, 0x3}}, {0x3, 0x8, {0x2, 0x4}}, {0x5, 0x40, {0x2}}, {0x1ff, 0x5, {0x1, 0xcc00}}, {0xf3, 0x4fc3, {0x3, 0xb93d}}, {0x1ff, 0xf9b8, {0x2, 0x6403}}, {0x1, 0xf53d, {0x2, 0x8}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000040)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xf, 0x11, r2, 0x0)
pwrite64(r0, &(0x7f0000001700)="bc9b214e02e96c15b404684d4e4d9c710595785181eca39f031e192e2bee6f0732fb065c8ab2d029aaeda6e49af08fba779ec6ed98a0c60d8a8d0155784d8ecfdda224555a0bddd1a1ae4f1e4c69909e8dd959f0f7de31a620360cf593d18be5ff64d2b08cbdc41bc8a63d1b42701874fc95171258eadfcb4e5dd51035974e717b9472ff073a7408eab39bdc9a04a3acfcec64c74c84d4399043408918abf735de94dab293028681", 0xa8, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040))

[  137.428135] audit: type=1400 audit(1663724431.949:10): avc:  denied  { kernel } for  pid=3992 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  137.442983] hrtimer: interrupt took 24867 ns
[  137.444691] ------------[ cut here ]------------
[  137.444723] 
[  137.444728] ======================================================
[  137.444735] WARNING: possible circular locking dependency detected
[  137.444742] 6.0.0-rc6-next-20220920 #1 Not tainted
[  137.444754] ------------------------------------------------------
[  137.444760] syz-executor.1/3993 is trying to acquire lock:
[  137.444772] ffffffff853faab8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0xe/0x70
[  137.444837] 
[  137.444837] but task is already holding lock:
[  137.444842] ffff88800e838c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  137.444899] 
[  137.444899] which lock already depends on the new lock.
[  137.444899] 
[  137.444905] 
[  137.444905] the existing dependency chain (in reverse order) is:
[  137.444911] 
[  137.444911] -> #3 (&ctx->lock){....}-{2:2}:
[  137.444938]        _raw_spin_lock+0x2a/0x40
[  137.444974]        __perf_event_task_sched_out+0x53b/0x18d0
[  137.444999]        __schedule+0xedd/0x2470
[  137.445023]        schedule+0xda/0x1b0
[  137.445047]        exit_to_user_mode_prepare+0x114/0x1a0
[  137.445069]        syscall_exit_to_user_mode+0x19/0x40
[  137.445091]        do_syscall_64+0x48/0x90
[  137.445121]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  137.445159] 
[  137.445159] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  137.445185]        _raw_spin_lock_nested+0x30/0x40
[  137.445219]        raw_spin_rq_lock_nested+0x1e/0x30
[  137.445243]        task_fork_fair+0x63/0x4d0
[  137.445275]        sched_cgroup_fork+0x3d0/0x540
[  137.445302]        copy_process+0x4183/0x6e20
[  137.445322]        kernel_clone+0xe7/0x890
[  137.445340]        user_mode_thread+0xad/0xf0
[  137.445361]        rest_init+0x24/0x250
[  137.445381]        arch_call_rest_init+0xf/0x14
[  137.445407]        start_kernel+0x4c1/0x4e6
[  137.445431]        secondary_startup_64_no_verify+0xe0/0xeb
[  137.445457] 
[  137.445457] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  137.445484]        _raw_spin_lock_irqsave+0x39/0x60
[  137.445518]        try_to_wake_up+0xab/0x1930
[  137.445544]        up+0x75/0xb0
[  137.445566]        __up_console_sem+0x6e/0x80
[  137.445596]        console_unlock+0x46a/0x590
[  137.445628]        do_con_write+0xc05/0x1d50
[  137.445650]        con_write+0x21/0x40
[  137.445669]        n_tty_write+0x4d4/0xfe0
[  137.445695]        file_tty_write.constprop.0+0x49c/0x8f0
[  137.445719]        vfs_write+0x9c3/0xd90
[  137.445753]        ksys_write+0x127/0x250
[  137.445787]        do_syscall_64+0x3b/0x90
[  137.445817]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  137.445854] 
[  137.445854] -> #0 ((console_sem).lock){-.-.}-{2:2}:
[  137.445881]        __lock_acquire+0x2a02/0x5e70
[  137.445914]        lock_acquire+0x1a2/0x530
[  137.445945]        _raw_spin_lock_irqsave+0x39/0x60
[  137.445978]        down_trylock+0xe/0x70
[  137.446003]        __down_trylock_console_sem+0x3b/0xd0
[  137.446035]        vprintk_emit+0x16b/0x560
[  137.446067]        vprintk+0x84/0xa0
[  137.446098]        _printk+0xba/0xf1
[  137.446117]        report_bug.cold+0x72/0xab
[  137.446146]        handle_bug+0x3c/0x70
[  137.446176]        exc_invalid_op+0x14/0x50
[  137.446211]        asm_exc_invalid_op+0x16/0x20
[  137.446231]        group_sched_out.part.0+0x2c7/0x460
[  137.446253]        ctx_sched_out+0x8f1/0xc10
[  137.446272]        __perf_event_task_sched_out+0x6d0/0x18d0
[  137.446295]        __schedule+0xedd/0x2470
[  137.446317]        schedule+0xda/0x1b0
[  137.446338]        exit_to_user_mode_prepare+0x114/0x1a0
[  137.446358]        syscall_exit_to_user_mode+0x19/0x40
[  137.446378]        do_syscall_64+0x48/0x90
[  137.446406]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  137.446441] 
[  137.446441] other info that might help us debug this:
[  137.446441] 
[  137.446446] Chain exists of:
[  137.446446]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  137.446446] 
[  137.446472]  Possible unsafe locking scenario:
[  137.446472] 
[  137.446476]        CPU0                    CPU1
[  137.446480]        ----                    ----
[  137.446484]   lock(&ctx->lock);
[  137.446494]                                lock(&rq->__lock);
[  137.446506]                                lock(&ctx->lock);
[  137.446517]   lock((console_sem).lock);
[  137.446528] 
[  137.446528]  *** DEADLOCK ***
[  137.446528] 
[  137.446531] 2 locks held by syz-executor.1/3993:
[  137.446543]  #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  137.446594]  #1: ffff88800e838c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  137.446645] 
[  137.446645] stack backtrace:
[  137.446650] CPU: 1 PID: 3993 Comm: syz-executor.1 Not tainted 6.0.0-rc6-next-20220920 #1
[  137.446672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  137.446686] Call Trace:
[  137.446692]  <TASK>
[  137.446698]  dump_stack_lvl+0x8b/0xb3
[  137.446729]  check_noncircular+0x263/0x2e0
[  137.446759]  ? format_decode+0x26c/0xb50
[  137.446787]  ? print_circular_bug+0x450/0x450
[  137.446818]  ? enable_ptr_key_workfn+0x20/0x20
[  137.446844]  ? __lockdep_reset_lock+0x180/0x180
[  137.446875]  ? format_decode+0x26c/0xb50
[  137.446904]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  137.446937]  __lock_acquire+0x2a02/0x5e70
[  137.446977]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  137.447018]  lock_acquire+0x1a2/0x530
[  137.447057]  ? down_trylock+0xe/0x70
[  137.447084]  ? lock_release+0x750/0x750
[  137.447115]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  137.447159]  ? vprintk+0x84/0xa0
[  137.447195]  _raw_spin_lock_irqsave+0x39/0x60
[  137.447230]  ? down_trylock+0xe/0x70
[  137.447257]  down_trylock+0xe/0x70
[  137.447283]  ? vprintk+0x84/0xa0
[  137.447317]  __down_trylock_console_sem+0x3b/0xd0
[  137.447351]  vprintk_emit+0x16b/0x560
[  137.447384]  ? lock_downgrade+0x6d0/0x6d0
[  137.447421]  vprintk+0x84/0xa0
[  137.447455]  _printk+0xba/0xf1
[  137.447476]  ? record_print_text.cold+0x16/0x16
[  137.447502]  ? hrtimer_try_to_cancel+0x163/0x2c0
[  137.447528]  ? lock_downgrade+0x6d0/0x6d0
[  137.447563]  ? report_bug.cold+0x66/0xab
[  137.447596]  ? group_sched_out.part.0+0x2c7/0x460
[  137.447620]  report_bug.cold+0x72/0xab
[  137.447654]  handle_bug+0x3c/0x70
[  137.447686]  exc_invalid_op+0x14/0x50
[  137.447719]  asm_exc_invalid_op+0x16/0x20
[  137.447741] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  137.447768] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 0b 13 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  137.447790] RSP: 0018:ffff88804054fc48 EFLAGS: 00010006
[  137.447808] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  137.447822] RDX: ffff88801bc3d040 RSI: ffffffff815662c7 RDI: 0000000000000005
[  137.447838] RBP: ffff88803fc80000 R08: 0000000000000005 R09: 0000000000000001
[  137.447852] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e838c00
[  137.447867] R13: ffff88806cf3d140 R14: ffffffff8547c820 R15: 0000000000000002
[  137.447889]  ? group_sched_out.part.0+0x2c7/0x460
[  137.447915]  ? group_sched_out.part.0+0x2c7/0x460
[  137.447942]  ctx_sched_out+0x8f1/0xc10
[  137.447967]  __perf_event_task_sched_out+0x6d0/0x18d0
[  137.447999]  ? lock_is_held_type+0xd7/0x130
[  137.448023]  ? __perf_cgroup_move+0x160/0x160
[  137.448048]  ? set_next_entity+0x304/0x550
[  137.448082]  ? update_curr+0x267/0x740
[  137.448118]  ? lock_is_held_type+0xd7/0x130
[  137.448143]  __schedule+0xedd/0x2470
[  137.448174]  ? io_schedule_timeout+0x150/0x150
[  137.448205]  ? __x64_sys_futex_time32+0x480/0x480
[  137.448232]  schedule+0xda/0x1b0
[  137.448258]  exit_to_user_mode_prepare+0x114/0x1a0
[  137.448283]  syscall_exit_to_user_mode+0x19/0x40
[  137.448307]  do_syscall_64+0x48/0x90
[  137.448339]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  137.448378] RIP: 0033:0x7ff5b8198b19
[  137.448395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  137.448417] RSP: 002b:00007ff5b570e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  137.448438] RAX: 0000000000000001 RBX: 00007ff5b82abf68 RCX: 00007ff5b8198b19
[  137.448453] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff5b82abf6c
[  137.448468] RBP: 00007ff5b82abf60 R08: 000000000000000e R09: 0000000000000000
[  137.448482] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff5b82abf6c
[  137.448497] R13: 00007ffd66c578cf R14: 00007ff5b570e300 R15: 0000000000022000
[  137.448522]  </TASK>
[  137.560885] WARNING: CPU: 1 PID: 3993 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  137.562121] Modules linked in:
[  137.562561] CPU: 1 PID: 3993 Comm: syz-executor.1 Not tainted 6.0.0-rc6-next-20220920 #1
[  137.563647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  137.565136] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  137.565881] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 0b 13 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  137.568304] RSP: 0018:ffff88804054fc48 EFLAGS: 00010006
[  137.569026] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  137.569982] RDX: ffff88801bc3d040 RSI: ffffffff815662c7 RDI: 0000000000000005
[  137.570953] RBP: ffff88803fc80000 R08: 0000000000000005 R09: 0000000000000001
[  137.571940] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e838c00
[  137.572912] R13: ffff88806cf3d140 R14: ffffffff8547c820 R15: 0000000000000002
[  137.573882] FS:  00007ff5b570e700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  137.574977] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  137.575780] CR2: 00007fd5cdbc0019 CR3: 000000000df7c000 CR4: 0000000000350ee0
[  137.576757] Call Trace:
[  137.577111]  <TASK>
[  137.577437]  ctx_sched_out+0x8f1/0xc10
[  137.577985]  __perf_event_task_sched_out+0x6d0/0x18d0
[  137.578711]  ? lock_is_held_type+0xd7/0x130
[  137.579323]  ? __perf_cgroup_move+0x160/0x160
[  137.579957]  ? set_next_entity+0x304/0x550
[  137.580564]  ? update_curr+0x267/0x740
[  137.581119]  ? lock_is_held_type+0xd7/0x130
[  137.581704]  __schedule+0xedd/0x2470
[  137.582238]  ? io_schedule_timeout+0x150/0x150
[  137.582878]  ? __x64_sys_futex_time32+0x480/0x480
[  137.583572]  schedule+0xda/0x1b0
[  137.584065]  exit_to_user_mode_prepare+0x114/0x1a0
[  137.584750]  syscall_exit_to_user_mode+0x19/0x40
[  137.585400]  do_syscall_64+0x48/0x90
[  137.585931]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  137.586671] RIP: 0033:0x7ff5b8198b19
[  137.587200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  137.589671] RSP: 002b:00007ff5b570e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  137.590725] RAX: 0000000000000001 RBX: 00007ff5b82abf68 RCX: 00007ff5b8198b19
[  137.591730] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff5b82abf6c
[  137.592731] RBP: 00007ff5b82abf60 R08: 000000000000000e R09: 0000000000000000
[  137.593699] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff5b82abf6c
[  137.594676] R13: 00007ffd66c578cf R14: 00007ff5b570e300 R15: 0000000000022000
[  137.595687]  </TASK>
[  137.596022] irq event stamp: 628
[  137.596500] hardirqs last  enabled at (627): [<ffffffff8133f8f9>] exit_to_user_mode_prepare+0x109/0x1a0
[  137.597787] hardirqs last disabled at (628): [<ffffffff8424c195>] __schedule+0x1225/0x2470
[  137.598923] softirqs last  enabled at (618): [<ffffffff811709ab>] __irq_exit_rcu+0x11b/0x180
[  137.600126] softirqs last disabled at (401): [<ffffffff811709ab>] __irq_exit_rcu+0x11b/0x180
[  137.601287] ---[ end trace 0000000000000000 ]---
01:40:32 executing program 6:
mkdir(&(0x7f0000003b80)='./file0\x00', 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080))
socket$inet_udp(0x2, 0x2, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)


VM DIAGNOSIS:
01:40:32  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84263897 RDX=ffffed100d9e6fa1
RSI=0000000000000004 RDI=ffff88806cf37d00 RBP=ffff88806cf37d00 RSP=ffff88801beefa98
R8 =0000000000000000 R9 =ffff88806cf37d03 R10=ffffed100d9e6fa0 R11=0000000000000001
R12=0000000000000003 R13=ffffed100d9e6fa0 R14=0000000000000001 R15=1ffff110037ddf54
RIP=ffffffff84263914 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556075400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f74200ab542 CR3=0000000036ed6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1551 RDI=ffffffff87643ba0 RBP=ffffffff87643b60 RSP=ffff88804054f698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001
R12=0000000000000020 R13=ffffffff87643b60 R14=0000000000000010 R15=ffffffff822b1540
RIP=ffffffff822b15a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007ff5b570e700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd5cdbc0019 CR3=000000000df7c000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007ff5b827f7c0 00007ff5b827f7c8
YMM02=0000000000000000 0000000000000000 00007ff5b827f7e0 00007ff5b827f7c0
YMM03=0000000000000000 0000000000000000 00007ff5b827f7c8 00007ff5b827f7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000