Warning: Permanently added '[localhost]:28819' (ECDSA) to the list of known hosts. 2022/09/22 19:22:36 fuzzer started 2022/09/22 19:22:36 dialing manager at localhost:40289 syzkaller login: [ 45.252484] cgroup: Unknown subsys name 'net' [ 45.382828] cgroup: Unknown subsys name 'rlimit' 2022/09/22 19:22:51 syscalls: 2215 2022/09/22 19:22:51 code coverage: enabled 2022/09/22 19:22:51 comparison tracing: enabled 2022/09/22 19:22:51 extra coverage: enabled 2022/09/22 19:22:51 setuid sandbox: enabled 2022/09/22 19:22:51 namespace sandbox: enabled 2022/09/22 19:22:51 Android sandbox: enabled 2022/09/22 19:22:51 fault injection: enabled 2022/09/22 19:22:51 leak checking: enabled 2022/09/22 19:22:51 net packet injection: enabled 2022/09/22 19:22:51 net device setup: enabled 2022/09/22 19:22:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/22 19:22:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/22 19:22:51 USB emulation: enabled 2022/09/22 19:22:51 hci packet injection: enabled 2022/09/22 19:22:51 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220921) 2022/09/22 19:22:51 802.15.4 emulation: enabled 2022/09/22 19:22:51 fetching corpus: 50, signal 32427/34173 (executing program) 2022/09/22 19:22:51 fetching corpus: 100, signal 43133/46450 (executing program) 2022/09/22 19:22:51 fetching corpus: 150, signal 48065/52925 (executing program) 2022/09/22 19:22:52 fetching corpus: 200, signal 54655/60890 (executing program) 2022/09/22 19:22:52 fetching corpus: 250, signal 60880/68400 (executing program) 2022/09/22 19:22:52 fetching corpus: 300, signal 64100/72979 (executing program) 2022/09/22 19:22:52 fetching corpus: 350, signal 66224/76432 (executing program) 2022/09/22 19:22:52 fetching corpus: 400, signal 69656/81118 (executing program) 2022/09/22 19:22:52 fetching corpus: 450, signal 72322/85066 (executing program) 2022/09/22 19:22:52 fetching corpus: 500, signal 74752/88729 (executing program) 2022/09/22 19:22:52 fetching corpus: 550, signal 82533/97149 (executing program) 2022/09/22 19:22:52 fetching corpus: 600, signal 84968/100675 (executing program) 2022/09/22 19:22:52 fetching corpus: 650, signal 87133/103914 (executing program) 2022/09/22 19:22:53 fetching corpus: 700, signal 89366/107174 (executing program) 2022/09/22 19:22:53 fetching corpus: 750, signal 90716/109654 (executing program) 2022/09/22 19:22:53 fetching corpus: 800, signal 93712/113477 (executing program) 2022/09/22 19:22:53 fetching corpus: 850, signal 96047/116735 (executing program) 2022/09/22 19:22:53 fetching corpus: 900, signal 100987/122119 (executing program) 2022/09/22 19:22:53 fetching corpus: 950, signal 105923/127517 (executing program) 2022/09/22 19:22:53 fetching corpus: 1000, signal 109825/132025 (executing program) 2022/09/22 19:22:54 fetching corpus: 1050, signal 111666/134675 (executing program) 2022/09/22 19:22:54 fetching corpus: 1100, signal 115257/138718 (executing program) 2022/09/22 19:22:54 fetching corpus: 1150, signal 117376/141515 (executing program) 2022/09/22 19:22:54 fetching corpus: 1200, signal 119705/144440 (executing program) 2022/09/22 19:22:54 fetching corpus: 1250, signal 123020/148109 (executing program) 2022/09/22 19:22:54 fetching corpus: 1300, signal 124086/149945 (executing program) 2022/09/22 19:22:54 fetching corpus: 1350, signal 125649/152165 (executing program) 2022/09/22 19:22:54 fetching corpus: 1400, signal 126536/153854 (executing program) 2022/09/22 19:22:54 fetching corpus: 1450, signal 128740/156511 (executing program) 2022/09/22 19:22:55 fetching corpus: 1500, signal 129736/158227 (executing program) 2022/09/22 19:22:55 fetching corpus: 1550, signal 132035/160904 (executing program) 2022/09/22 19:22:55 fetching corpus: 1600, signal 132759/162361 (executing program) 2022/09/22 19:22:55 fetching corpus: 1650, signal 134367/164464 (executing program) 2022/09/22 19:22:55 fetching corpus: 1700, signal 135375/166102 (executing program) 2022/09/22 19:22:55 fetching corpus: 1750, signal 136489/167791 (executing program) 2022/09/22 19:22:55 fetching corpus: 1800, signal 137794/169579 (executing program) 2022/09/22 19:22:55 fetching corpus: 1850, signal 139026/171351 (executing program) 2022/09/22 19:22:55 fetching corpus: 1900, signal 140518/173235 (executing program) 2022/09/22 19:22:56 fetching corpus: 1950, signal 142568/175527 (executing program) 2022/09/22 19:22:56 fetching corpus: 2000, signal 143351/176895 (executing program) 2022/09/22 19:22:56 fetching corpus: 2050, signal 143981/178164 (executing program) 2022/09/22 19:22:56 fetching corpus: 2100, signal 145132/179781 (executing program) 2022/09/22 19:22:56 fetching corpus: 2150, signal 146764/181672 (executing program) 2022/09/22 19:22:56 fetching corpus: 2200, signal 148021/183267 (executing program) 2022/09/22 19:22:56 fetching corpus: 2250, signal 149282/184829 (executing program) 2022/09/22 19:22:56 fetching corpus: 2300, signal 150411/186336 (executing program) 2022/09/22 19:22:56 fetching corpus: 2350, signal 151513/187778 (executing program) 2022/09/22 19:22:57 fetching corpus: 2400, signal 152830/189405 (executing program) 2022/09/22 19:22:57 fetching corpus: 2450, signal 153654/190639 (executing program) 2022/09/22 19:22:57 fetching corpus: 2500, signal 154253/191780 (executing program) 2022/09/22 19:22:57 fetching corpus: 2550, signal 155556/193312 (executing program) 2022/09/22 19:22:57 fetching corpus: 2600, signal 156773/194720 (executing program) 2022/09/22 19:22:57 fetching corpus: 2650, signal 157479/195864 (executing program) 2022/09/22 19:22:57 fetching corpus: 2700, signal 157860/196788 (executing program) 2022/09/22 19:22:57 fetching corpus: 2750, signal 160156/198732 (executing program) 2022/09/22 19:22:58 fetching corpus: 2800, signal 161244/200042 (executing program) 2022/09/22 19:22:58 fetching corpus: 2850, signal 162443/201355 (executing program) 2022/09/22 19:22:58 fetching corpus: 2900, signal 163876/202780 (executing program) 2022/09/22 19:22:58 fetching corpus: 2950, signal 164383/203728 (executing program) 2022/09/22 19:22:58 fetching corpus: 3000, signal 165292/204878 (executing program) 2022/09/22 19:22:58 fetching corpus: 3050, signal 166077/205926 (executing program) 2022/09/22 19:22:58 fetching corpus: 3100, signal 167021/207024 (executing program) 2022/09/22 19:22:58 fetching corpus: 3150, signal 167729/207996 (executing program) 2022/09/22 19:22:58 fetching corpus: 3200, signal 168588/209156 (executing program) 2022/09/22 19:22:59 fetching corpus: 3250, signal 169136/210084 (executing program) 2022/09/22 19:22:59 fetching corpus: 3300, signal 170507/211452 (executing program) 2022/09/22 19:22:59 fetching corpus: 3350, signal 171198/212376 (executing program) 2022/09/22 19:22:59 fetching corpus: 3400, signal 172043/213383 (executing program) 2022/09/22 19:22:59 fetching corpus: 3450, signal 172784/214296 (executing program) 2022/09/22 19:22:59 fetching corpus: 3500, signal 173652/215264 (executing program) 2022/09/22 19:22:59 fetching corpus: 3550, signal 174500/216227 (executing program) 2022/09/22 19:22:59 fetching corpus: 3600, signal 175477/217249 (executing program) 2022/09/22 19:23:00 fetching corpus: 3650, signal 176454/218234 (executing program) 2022/09/22 19:23:00 fetching corpus: 3700, signal 177006/219008 (executing program) 2022/09/22 19:23:00 fetching corpus: 3750, signal 177437/219720 (executing program) 2022/09/22 19:23:00 fetching corpus: 3800, signal 178395/220607 (executing program) 2022/09/22 19:23:00 fetching corpus: 3850, signal 179657/221569 (executing program) 2022/09/22 19:23:00 fetching corpus: 3900, signal 180643/222488 (executing program) 2022/09/22 19:23:00 fetching corpus: 3950, signal 181708/223382 (executing program) 2022/09/22 19:23:00 fetching corpus: 4000, signal 182927/224313 (executing program) 2022/09/22 19:23:01 fetching corpus: 4050, signal 183434/225018 (executing program) 2022/09/22 19:23:01 fetching corpus: 4100, signal 184492/225866 (executing program) 2022/09/22 19:23:01 fetching corpus: 4150, signal 185495/226812 (executing program) 2022/09/22 19:23:01 fetching corpus: 4200, signal 186261/227534 (executing program) 2022/09/22 19:23:01 fetching corpus: 4250, signal 187107/228263 (executing program) 2022/09/22 19:23:01 fetching corpus: 4300, signal 188058/229041 (executing program) 2022/09/22 19:23:01 fetching corpus: 4350, signal 188498/229638 (executing program) 2022/09/22 19:23:02 fetching corpus: 4400, signal 189301/230323 (executing program) 2022/09/22 19:23:02 fetching corpus: 4450, signal 190036/231014 (executing program) 2022/09/22 19:23:02 fetching corpus: 4500, signal 190462/231610 (executing program) 2022/09/22 19:23:02 fetching corpus: 4550, signal 191337/232274 (executing program) 2022/09/22 19:23:02 fetching corpus: 4600, signal 192025/232919 (executing program) 2022/09/22 19:23:02 fetching corpus: 4650, signal 192944/233553 (executing program) 2022/09/22 19:23:02 fetching corpus: 4700, signal 193665/234108 (executing program) 2022/09/22 19:23:02 fetching corpus: 4750, signal 194277/234685 (executing program) 2022/09/22 19:23:02 fetching corpus: 4800, signal 195596/235318 (executing program) 2022/09/22 19:23:03 fetching corpus: 4850, signal 196927/236060 (executing program) 2022/09/22 19:23:03 fetching corpus: 4900, signal 197492/236560 (executing program) 2022/09/22 19:23:03 fetching corpus: 4950, signal 198390/237099 (executing program) 2022/09/22 19:23:03 fetching corpus: 5000, signal 198985/237683 (executing program) 2022/09/22 19:23:03 fetching corpus: 5050, signal 200271/238591 (executing program) 2022/09/22 19:23:03 fetching corpus: 5100, signal 200919/239081 (executing program) 2022/09/22 19:23:03 fetching corpus: 5150, signal 201940/239566 (executing program) 2022/09/22 19:23:03 fetching corpus: 5200, signal 202746/240212 (executing program) 2022/09/22 19:23:04 fetching corpus: 5250, signal 203424/240694 (executing program) 2022/09/22 19:23:04 fetching corpus: 5300, signal 204056/241106 (executing program) 2022/09/22 19:23:04 fetching corpus: 5350, signal 204601/241561 (executing program) 2022/09/22 19:23:04 fetching corpus: 5400, signal 205603/241980 (executing program) 2022/09/22 19:23:04 fetching corpus: 5450, signal 206121/242355 (executing program) 2022/09/22 19:23:04 fetching corpus: 5500, signal 206448/242714 (executing program) 2022/09/22 19:23:04 fetching corpus: 5550, signal 206992/243107 (executing program) 2022/09/22 19:23:04 fetching corpus: 5600, signal 207358/243491 (executing program) 2022/09/22 19:23:04 fetching corpus: 5650, signal 207859/243854 (executing program) 2022/09/22 19:23:04 fetching corpus: 5700, signal 208245/244194 (executing program) 2022/09/22 19:23:05 fetching corpus: 5750, signal 209018/244549 (executing program) 2022/09/22 19:23:05 fetching corpus: 5800, signal 209517/244924 (executing program) 2022/09/22 19:23:05 fetching corpus: 5850, signal 210052/245246 (executing program) 2022/09/22 19:23:05 fetching corpus: 5900, signal 210723/245569 (executing program) 2022/09/22 19:23:05 fetching corpus: 5950, signal 211592/245658 (executing program) 2022/09/22 19:23:05 fetching corpus: 6000, signal 212325/245705 (executing program) 2022/09/22 19:23:05 fetching corpus: 6050, signal 212704/245706 (executing program) 2022/09/22 19:23:06 fetching corpus: 6100, signal 213248/245709 (executing program) 2022/09/22 19:23:06 fetching corpus: 6150, signal 213861/245711 (executing program) 2022/09/22 19:23:06 fetching corpus: 6200, signal 214553/245714 (executing program) 2022/09/22 19:23:06 fetching corpus: 6250, signal 215020/245732 (executing program) 2022/09/22 19:23:06 fetching corpus: 6300, signal 215540/245751 (executing program) 2022/09/22 19:23:06 fetching corpus: 6350, signal 216012/245751 (executing program) 2022/09/22 19:23:06 fetching corpus: 6400, signal 216290/245755 (executing program) 2022/09/22 19:23:06 fetching corpus: 6450, signal 216625/245756 (executing program) 2022/09/22 19:23:07 fetching corpus: 6500, signal 217483/245757 (executing program) 2022/09/22 19:23:07 fetching corpus: 6521, signal 217730/245874 (executing program) 2022/09/22 19:23:07 fetching corpus: 6521, signal 217730/245874 (executing program) 2022/09/22 19:23:09 starting 8 fuzzer processes 19:23:09 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xfffffffffffffacd, &(0x7f0000000000)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x401, 0x68d, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x0, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2dca, 0xffffffffffffffc0, &(0x7f00000000c0)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xea5d, 0x34e, &(0x7f0000000100)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfa, 0x7, &(0x7f0000000180)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x162c6e2, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7ff, 0x8, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xfffffffffffffff9, &(0x7f0000000240)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xffff, &(0x7f0000000280)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000, 0x1, &(0x7f00000002c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000001, 0x1, &(0x7f0000000300)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000, 0x5d9, &(0x7f0000000340)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000000380)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xd4b, &(0x7f00000003c0)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7f, 0x39, &(0x7f0000000400)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x120000, &(0x7f0000000440)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000480)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x3, &(0x7f00000004c0)) 19:23:09 executing program 1: ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x182, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) r1 = signalfd(r0, &(0x7f0000000080)={[0x9]}, 0x8) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x0, 0xe93, 0x5, 0x56, 0x7f}, 0x193, [0x10001, 0x7, 0xd6e, 0x7, 0x3, 0x8, 0x40, 0x9, 0x8000, 0x9563, 0x20, 0x3, 0x86, 0x3, 0x3, 0x0, 0xfffffffb, 0x6, 0x20, 0x1000, 0xfff, 0x2, 0x10001, 0x6, 0x9, 0x10001, 0x1000, 0x80000000, 0x9, 0x1, 0x6, 0xb94, 0x7, 0x81, 0xffffffff, 0x31d2, 0xde27, 0x5, 0x9, 0x20, 0x6, 0xffffff79, 0x6, 0x800, 0x9, 0x4, 0x2, 0x8001, 0xd4, 0xa4, 0xfffeffff, 0x0, 0x9, 0xfffffff8, 0x8, 0x7, 0x16, 0x7fffffff, 0xfbd2, 0x173, 0x8, 0x6, 0x7, 0x7ff, 0x2, 0x5a, 0x0, 0x7ff, 0x5, 0x7fff, 0x7, 0x4, 0x81, 0x4, 0x7, 0x0, 0x812, 0x24, 0x6, 0x4, 0x79, 0x81, 0x100, 0x7, 0x3, 0x39eb, 0x5, 0x4, 0xe269, 0x80, 0x1, 0x0, 0xffffffc0, 0x5, 0x4, 0xe3ff, 0xffffffff, 0x10000, 0x400, 0x2, 0x0, 0xead, 0x7f, 0x4, 0x480000, 0x80000000, 0x9, 0x5, 0x6, 0x6, 0x3ff, 0x1d4e20e4, 0x9, 0x3ff, 0x7, 0x20, 0x2, 0x3, 0x6, 0x5, 0xffffff00, 0x3, 0xffff, 0x80, 0x7fffffff, 0xff, 0xff, 0x2cce3fdd, 0x10001, 0x200, 0x10001, 0x0, 0x6, 0x3, 0x2, 0x5, 0x6, 0x5a9, 0x1f, 0x0, 0x6, 0x8, 0x4, 0x69f, 0x698, 0x9, 0xff9, 0x7, 0x2, 0x7, 0x10001, 0x8, 0x7, 0x7f, 0xfffffbff, 0xffffff2b, 0x7fff, 0x7e53, 0xf31, 0x28, 0x1000, 0x9, 0xe2, 0x5, 0x5, 0x200, 0x8001, 0x200, 0x7, 0x6a47, 0x4, 0x231, 0x8001, 0x10000, 0x7fff, 0x80, 0x7, 0x6, 0x8, 0x7fff, 0x1ff, 0x10000, 0x7, 0x97c, 0x7ff, 0x1, 0x0, 0x7, 0x42, 0x80000001, 0x6, 0x401, 0x9, 0x0, 0x1, 0x3, 0x4, 0x3, 0xfffffffc, 0x101, 0xfffffc01, 0x7bc1, 0x5a07, 0x3, 0x1, 0x8, 0x80000001, 0x5, 0xff, 0x5, 0x7, 0x4, 0x400, 0x223, 0x9, 0xb06, 0x8, 0x3, 0x0, 0xe6b, 0x7, 0x10000, 0x2, 0xfff, 0x0, 0x0, 0x5, 0x8, 0x1f, 0x8, 0x7, 0x2806, 0x4a44, 0x9, 0x248, 0x4, 0x4, 0x50, 0x3ff, 0x3, 0x8, 0x4, 0x40, 0x1426, 0x7, 0x1ff, 0x8, 0xfffffff9, 0x7, 0x9, 0x0, 0xa7ad, 0x8, 0x4697, 0x2, 0x1, 0x5, 0xfffffffe, 0x10000, 0x4, 0x86, 0x3ff, 0xfff, 0x7, 0xdb, 0x2, 0x2, 0x20, 0x60, 0x1, 0x2, 0x4, 0x1, 0x6, 0x9, 0x6, 0x3ff, 0x3ff, 0x3, 0x76041250, 0x5, 0x8000, 0x101, 0x6, 0x2, 0x3, 0x200, 0x8001, 0x2, 0x3, 0x7, 0x10001, 0x7fffffff, 0x7, 0x904, 0xffffffff, 0x3, 0xc0f2, 0x27, 0x7f, 0x4, 0x3f, 0xae, 0x8, 0x25, 0x9, 0x2, 0x3, 0x550032c7, 0xfff, 0x80, 0x2, 0x5, 0x7, 0x1, 0x2, 0x7ae9, 0x6, 0xffff, 0x0, 0x9, 0x401, 0xb7, 0x4, 0x1, 0x8e, 0x1, 0x1, 0x1, 0xffffffff, 0x1, 0x1ff, 0x0, 0x9, 0x1, 0x100, 0x3, 0xfffff801, 0x1, 0x8, 0x6, 0x1, 0xc000, 0x1, 0x5, 0x4, 0x8, 0x7fffffff, 0x235dd4eb, 0x8000, 0x8934, 0x4, 0x3, 0x0, 0x6, 0x5, 0xffffff2c, 0x2a54, 0x1, 0x80000000, 0x6, 0x33, 0x9, 0x1, 0x6, 0x8, 0xa2f3, 0x401, 0x40, 0x4, 0x1f, 0x4, 0x0, 0x6, 0x1, 0x8, 0xa2, 0x20f6, 0xffffffff, 0x84c, 0x3f, 0x7, 0x80000001, 0x3, 0x400, 0x994, 0x3ff, 0xffff7fff, 0xff, 0x22191755, 0x6, 0x81, 0x5, 0x20, 0x1, 0x4, 0x3, 0x2, 0x6fb, 0x7, 0x0, 0x3e95, 0x9, 0x4, 0xfffffc01, 0x3, 0x3, 0x1000, 0x4, 0x75f, 0x1ff, 0x1f, 0x1, 0x2, 0x0, 0x8001, 0x7, 0x20, 0x7f, 0x10001, 0x2d09, 0x9, 0x3ff, 0x3118b3f5, 0x6, 0x7, 0x2, 0x3, 0x7, 0x36, 0x5, 0xc73, 0x16, 0x80000001, 0xc8, 0x5, 0x4, 0x2a, 0x80000001, 0x1, 0x1d61, 0x9, 0x2, 0x7fffffff, 0x0, 0xffffffff, 0x3, 0x40, 0x0, 0x96f, 0x7, 0x6, 0x8000, 0xff2, 0x400, 0xfffffc00, 0x2, 0x3, 0x7, 0x0, 0x0, 0x1, 0x6, 0x8001, 0x1f, 0xd7f3, 0x8, 0x4, 0x0, 0x38, 0x3738, 0x3, 0x3, 0x2, 0x200, 0x5, 0x7ff, 0x4c8, 0x3, 0x9, 0x5, 0x8001, 0xfffffffe, 0x79, 0x36b1, 0x8dec, 0x1, 0x7, 0x8, 0x5, 0x7f, 0x33bd8000, 0x7, 0x8, 0x5, 0x0, 0x1f, 0x5, 0x3ff, 0x6, 0x9, 0xffffffff, 0xfffffff8, 0x66b, 0x32ffe7ce, 0x9, 0x303b, 0x88000000, 0x5, 0x4, 0x7ff, 0x21, 0x7, 0x3, 0x9, 0x2, 0xb92b, 0x3, 0x8, 0x80000001, 0x4, 0xffff, 0x8001, 0x0, 0x3, 0x0, 0x5, 0x2, 0x1ff, 0x1ff, 0x1, 0x7f, 0x3, 0x2, 0x200, 0x5, 0xfffffffb, 0x2ed95ffc, 0x9, 0x0, 0x5, 0xe649, 0x7f36, 0x3, 0x2, 0x200, 0x3, 0x8, 0x7, 0x0, 0x9, 0x1, 0x9, 0x1, 0x6, 0x6, 0x4655, 0x5, 0x8, 0xc33, 0xfffffff8, 0x7, 0x80000000, 0x8001, 0x7fff, 0x4, 0x11576e20, 0x0, 0xcf7, 0xfff, 0x40, 0x1, 0xfc, 0xe7d0, 0x5, 0x80000000, 0x13055c45, 0x8001, 0x5, 0xe00, 0x2, 0x800, 0x1f, 0x5, 0x6, 0x1f, 0x0, 0x7, 0x6, 0x100, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0x0, 0x3ff, 0x9, 0x2, 0xffff, 0x6, 0x2, 0x800, 0xffffffc1, 0xa, 0xffffffc8, 0xff, 0x1, 0x8, 0x100, 0x80000001, 0x6, 0x80, 0x5c, 0x8c, 0x62ef, 0x2, 0x4, 0x5, 0xfffffff7, 0xfffffffb, 0x7ff, 0x2, 0x10001, 0x10001, 0x8, 0xffffffff, 0x22, 0x100, 0x0, 0x4, 0x3, 0x9, 0x6, 0xfff, 0x8, 0x0, 0xb850, 0x4c4, 0x10000, 0x80000001, 0x7, 0x0, 0x5, 0x78f, 0x8, 0x5, 0xfffffffc, 0x80000001, 0x7e, 0x2, 0x7f, 0x7ff, 0x400, 0x3ff, 0x3, 0x0, 0x0, 0x10001, 0xebb, 0x6, 0x401, 0x8, 0x100, 0x7, 0x1, 0x9, 0x1, 0x7fffffff, 0x0, 0xbc, 0x101, 0x4, 0x10001, 0x6b, 0x8, 0x32b, 0x7, 0x3f, 0x3c9, 0x7f, 0x3, 0xa37, 0x9, 0x0, 0x80, 0x0, 0x1000, 0x7, 0xdff5, 0x10000, 0x9, 0x1f, 0x7, 0x6, 0x8, 0x8001, 0x80000001, 0x9, 0x7, 0x20, 0x1, 0x5152, 0x5, 0x0, 0x5, 0x7, 0x3f1, 0x100, 0x101, 0x3, 0x1, 0x7f, 0x20000, 0x7fffffff, 0x401, 0x800, 0x5, 0x4, 0x1000, 0x2, 0x7, 0x12d0, 0x8, 0xc6, 0x2a78, 0x5, 0xa, 0xffffffff, 0xffff, 0x7, 0xe027, 0x1, 0x7fffffff, 0x1c45, 0x3d3, 0x4d, 0x3, 0x5, 0x5, 0xe24, 0xffffffff, 0xfff, 0x74d3, 0x8001, 0x1, 0x8, 0x4, 0x3, 0xfff, 0x5, 0x6, 0xffff8000, 0x80, 0x0, 0x40, 0x80000001, 0x7, 0x0, 0x8, 0x0, 0xd3, 0x9, 0x7, 0x9, 0x6, 0xfffffffb, 0x12, 0x21aa, 0x7, 0x6, 0x5, 0x5, 0x0, 0xffff, 0x2, 0x7, 0x6, 0x4, 0x50b2, 0x0, 0xff, 0x53e8, 0x10000, 0x0, 0x6, 0xded6, 0x9, 0x6, 0x65, 0xfff, 0x8001, 0x57bafffb, 0x1f, 0x8, 0x6, 0xec7a, 0x80000001, 0x1, 0x81, 0x4, 0x8, 0x4, 0x7, 0x80, 0x0, 0x4d3, 0x1, 0x6, 0x1, 0x7, 0x4, 0x2, 0x1, 0xffffffff, 0x1d4b, 0xa0000, 0x5, 0x4, 0x1, 0x7fffffff, 0x200, 0x2, 0x0, 0x401, 0x9, 0x7, 0x1, 0x8d7, 0x7, 0x7, 0xfffffffa, 0x6, 0x6, 0x7, 0x7, 0x4, 0x101, 0x6, 0x0, 0x400, 0xc0, 0x8001, 0x4, 0x5, 0x0, 0x7fff, 0x80000001, 0x7f, 0x1e, 0x1, 0x6, 0x9, 0x9, 0x8, 0x2, 0xe5b, 0x7, 0x0, 0x6, 0x0, 0x0, 0x75bf, 0x200, 0xbe56, 0x80, 0x8, 0x1, 0x8, 0x9, 0x30000000, 0x9, 0x6, 0xa991, 0x7ff, 0x6, 0x8, 0x1, 0x7, 0x8, 0x1, 0x4, 0x0, 0x7, 0x10000, 0x3ff, 0x1, 0x400, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x5, 0x4, 0xffffffff, 0xa000000, 0x588d, 0xfffffff7, 0x7, 0x3, 0x7, 0x9, 0x9, 0x4, 0x2, 0x10001, 0x20, 0x1, 0x2, 0x3, 0x1ff, 0x6, 0x80000001, 0xbf, 0x101, 0x1, 0x22, 0x5, 0x4, 0x7fffffff, 0x1, 0x5, 0x0, 0x5, 0xff, 0x9, 0x800, 0x7, 0x7ff, 0x1f, 0x1, 0x40, 0x401, 0xe2be, 0x6, 0xe92, 0x31ee, 0x0, 0x3, 0x6, 0x7fffffff, 0x6b8132d, 0x4, 0x7, 0x9f2, 0x9, 0x8, 0x200, 0x1, 0x6, 0x7fffffff, 0xdb59, 0x9, 0x401, 0x9, 0x20, 0x79, 0x3, 0x7fca, 0x0, 0x200, 0x1, 0xa000, 0x7, 0x9, 0x1, 0x0, 0x9, 0x7ff, 0x3, 0xffffffc0, 0x9, 0x7, 0x800, 0x3ff, 0x3, 0x709, 0x2, 0xffffff53, 0x2, 0xfffff59e, 0xc6, 0x7fff, 0x80000001, 0xff, 0x8, 0xfffffff8, 0x400, 0xffff, 0x1e, 0x80, 0x6, 0x4, 0xffffffff, 0x4571, 0x5, 0x6f, 0x5, 0x5, 0xc4, 0x2, 0x9, 0x18, 0x3f, 0xff, 0x6, 0x2e21, 0xffff, 0x9, 0x7, 0x48, 0x2, 0x6, 0x9, 0x4b02, 0x7fff, 0x8, 0x6cd0cc74, 0x3ff, 0xfff, 0x81, 0x7f, 0x4, 0x40]}) fsync(r1) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f0000001140), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001200)={'syztnl1\x00', &(0x7f0000001180)={'sit0\x00', 0x0, 0x2f, 0xaa, 0x7, 0x3ff, 0x44, @dev={0xfe, 0x80, '\x00', 0x41}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x7, 0x50d}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001240)={'veth0_to_batadv\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001540)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001500)={&(0x7f0000001280)={0x250, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x31}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x0, 0xb4, 0x4}, {0x7f, 0x2, 0x3, 0x3f}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe315}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x8000}, 0x40c4) io_cancel(0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000001580)="24e2b122626964c9a2175528478b677cc5ff55b909d86375a91eb04344fa97680936a7c9132d8d2d0012d99d2c12515dd60306b340070a1714a4722a80a38a13099f362d879a27e17fe82feb958cf0ea7a05f7707743565185e93630f68ad2f13255ed37cc2af68fda31a6b8d1a020d06f631e08994338871c00416ece345239d7d5ba362cb028be3b7de1b3476ea618d0cbd69f9498e5a218482713c058da108942e533f21fb2", 0xa7, 0x400, 0x0, 0x1}, &(0x7f0000001680)) r5 = syz_open_dev$vcsu(&(0x7f00000016c0), 0x2, 0x201) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001700)='/proc/self/attr/fscreate\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001740)={0x0, 0x1, r6, 0x2, 0x80000}) fcntl$setstatus(r5, 0x4, 0x4000) ioctl$int_out(r1, 0x5462, &(0x7f0000001780)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001840)={'syztnl1\x00', &(0x7f00000017c0)={'ip6tnl0\x00', r4, 0x2f, 0x1, 0x1e, 0x0, 0x40, @loopback, @mcast2, 0x40, 0x20, 0x8794, 0x2}}) sendmsg$inet(r1, &(0x7f0000001b40)={&(0x7f0000001880)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001a00)=[{&(0x7f00000018c0)="947985a82c386c8f33fcd8e083799776fec6429e3c4125f6191c2e237f50159bbbe86a46eee3fa0dd149d246098973dd5d214b6a6cfab62c17c5396c7744c2f11a4e0243c961581380a834474a04e9989d8302fd4d6895b4a2cd5ae471dbbe866ce18f2cc9867f3062f1eab48f1617b818ed9e60228b164a36d3392e16", 0x7d}, {&(0x7f0000001940)="ef4f55c108d0647b15d119046141eda31f32a111341e233f9f92b2c80bb5a4d7d709dd5f49a790cf68f33ec4cc2c34e9e79063f0101218c1c3e7f6f2b05666f17df77c4f08e0832b58296180529208918e3049", 0x53}, {&(0x7f00000019c0)="4c11298dcc", 0x5}], 0x3, &(0x7f0000001a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14}}], 0xe8}, 0x41) perf_event_open(&(0x7f0000001bc0)={0x3, 0x80, 0x9, 0x3f, 0x0, 0x4, 0x0, 0x100000001, 0x800, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000001b80), 0x4}, 0x130aa, 0xfffffffffffffffc, 0xfff, 0x9, 0xbe, 0x6, 0x1, 0x0, 0x7f, 0x0, 0x3}, 0x0, 0xe, r5, 0x9) 19:23:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x2, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x88b}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x74c}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffff7f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x84}, 0x1, 0x0, 0x0, 0x20010010}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x900, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x880) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc081) creat(&(0x7f00000004c0)='./file0\x00', 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000f80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000780)={0x7b8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x51}}}}, [@NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0x6, 0x3, 0x4, 0x8, 0x3, 0x200]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0xa}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x2}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0x6}, {0x6, 0x5}, {0x2, 0x7}, {0x4}, {0x3, 0x9}, {0x1}, {0x1, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x9}, {0x1, 0x2}, {0x4, 0x9}, {0x4, 0x3}, {0x7, 0x2}, {0x0, 0x3}, {0x1}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x4}, {0x5, 0x4}, {0x0, 0x4}, {0x3, 0x2}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x2, 0x8}, {0x7, 0x7}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x3}, {0x2, 0x3}, {0x3, 0x4}, {0x5, 0x5}, {0x7, 0x9}, {0x5, 0x9}, {0x6}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x4, 0x7}, {0x5, 0x6}, {0x3, 0x8}, {0x7, 0x3}, {0x5, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x4}, {0x2, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x1ff, 0x40, 0x81, 0x3, 0x3, 0x2, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x24, 0x16, 0x6, 0x1, 0x1, 0x3, 0x6, 0x6, 0x9, 0xc, 0x16, 0x60, 0x16, 0x4, 0x88c08d436a26d1a6, 0x2, 0x1b, 0x36, 0x0, 0xb, 0x46, 0x6, 0x3, 0x1b]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x2, 0x77, 0x4, 0x100, 0x100, 0x1f, 0x1]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x9}, {0x7, 0x2}, {0x4, 0x6}, {0x4, 0x1}, {0x7, 0x2}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x4, 0x3}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0x8}, {0x0, 0x8}, {0x2, 0x8}, {}, {0x6, 0x5}, {0x0, 0x3}, {0x3, 0x8}, {0x5, 0x8}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5e, 0x7, 0x200, 0x4, 0x8, 0x200, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x5440, 0x3, 0x6, 0x7fff, 0x4, 0x2]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x2}, {0x4, 0x5}, {0x4, 0xa}, {0x4, 0x8}, {0x2, 0xa}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x48, 0x24, 0x36, 0x36, 0x30, 0x3, 0xc, 0x30, 0x6, 0x30, 0x6, 0x0, 0xe, 0x16, 0x0, 0x18, 0x5, 0x48, 0xc, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x86, 0x5, 0xe5b3, 0x5, 0x1, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0xc, 0x2, 0x4, 0x16, 0x1b, 0xc, 0x1b, 0x4, 0x18, 0x3f, 0x36, 0x72, 0x36, 0x24, 0x48, 0x1, 0x12, 0x6]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xdcda724d0b9b5840, 0x18, 0x12, 0x48, 0xb, 0x12, 0x5, 0x36, 0x18, 0x5, 0x16, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x85, 0xffff, 0x1, 0xff, 0x5, 0x7, 0x0, 0x8000]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x12, 0xc, 0xb, 0x1, 0x30, 0xb, 0x5, 0x18, 0x1b, 0x5, 0x2, 0x24, 0x36, 0x6c, 0x9, 0x6c, 0x9, 0x30, 0x4, 0x60, 0x16, 0x48, 0x18, 0x36, 0x6, 0x36, 0x0, 0x48, 0xb, 0x30, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7ff, 0x5, 0x40, 0x2, 0x9, 0x7, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x16, 0x4, 0x12, 0x6, 0x24, 0x18, 0x30, 0x9, 0x4, 0x5, 0x3]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x6}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x5}, {0x3, 0x3}, {0x2, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0x8}, {0x2, 0x5}, {0x0, 0x6}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0xa}, {0x5, 0x2}, {0x3, 0x6}, {0x7, 0x9}, {0x3, 0x4}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0x8}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x9}, {0x5, 0x1}, {0x0, 0x3}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x7}, {0x3, 0x9}, {0x1, 0x6}, {0x7, 0x7}, {0x6, 0xa}, {0x5, 0xa}, {0x6, 0x4}, {0x6}, {0x7, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x188, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0xb, 0x5, 0x4, 0x6, 0x6, 0x36, 0x1b, 0x2, 0x4, 0x24, 0x2, 0x48, 0x6, 0x2, 0x1, 0x0, 0x6c, 0x62, 0x30, 0x9, 0x12]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x12, 0x9, 0x6, 0x9, 0x5, 0x48, 0x24, 0x24, 0xa6f5319c7b47d7cf, 0xb, 0x4, 0x6c, 0xc, 0xc, 0x6, 0x1, 0x2, 0x12, 0x4, 0x2, 0x30, 0x1b, 0x18, 0x12, 0x1b, 0x68, 0x3, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x800, 0xf1d, 0x1, 0x0, 0x2, 0x2e, 0x200]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x1}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0x3}, {}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x7}, {0x4, 0x5}, {0x7, 0x9}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x6}, {0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x5, 0xa}, {0x6, 0x6}, {0x3, 0x1}, {0x5, 0x6}, {0x7, 0x5}, {0x7, 0x1}, {0x5}, {0x1, 0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x6}, {0x3, 0xa}, {0x5, 0x3}, {0x2, 0x7}, {0x7, 0x9}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x7}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x4}, {0x1, 0x4}, {0x6, 0x6}, {0x3, 0x7}, {0x0, 0x9}, {}, {0x3, 0x8}, {0x7}, {0x2, 0x5}, {0x7, 0x7}, {0x5, 0x2}, {0x7, 0x7}, {0x0, 0x4}, {}, {0x4, 0x8}, {0x5, 0x3}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x7}, {0x6, 0x2}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0xc, 0x9, 0x48, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3e, 0x2, 0x3, 0x1, 0x1, 0x2, 0x9, 0x1, 0x4, 0xc, 0x3, 0x30, 0x36, 0x1b, 0x5, 0x4, 0x16, 0x6, 0xc, 0x56, 0x9, 0xc, 0x12, 0x24, 0xc, 0x3, 0x60, 0x24, 0x3, 0xb, 0xb, 0x2]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x12, 0x30, 0x3, 0x6, 0x0, 0x1, 0xb, 0x1b, 0x1, 0x3, 0x4, 0x0, 0x12, 0x0, 0x48, 0x24, 0x1, 0xb]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x8}, {0x7, 0x7}, {0x5, 0x3}, {0x4, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x3, 0x2}, {0x2, 0xa}, {0x4, 0x6}, {0x5, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0x4, 0x4}, {0x6, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0x5}, {0x5}, {0x1, 0x7}, {0x4, 0x2}, {0x4, 0x9}, {0x3, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x2}, {0x1, 0x6}, {}, {0x1, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0xa}, {}, {0x0, 0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x5}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x2}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x6, 0x8}, {0x3, 0x2}, {0x3, 0x4}, {0x6, 0x5}, {0x6, 0x5}, {0x2, 0x4}, {0x5, 0x9}, {0x6, 0x5}, {0x2, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x3}, {0x7, 0x4}, {0x3, 0x9}, {0x1, 0x5}, {}, {0x4, 0x9}, {0x1, 0x7}, {0x4, 0x3}, {0x5, 0x2}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0x1}, {0x6, 0x4}, {0x5, 0x8}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf9, 0x0, 0x7, 0x6, 0x1, 0x4, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x34, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x5}, {0x5}, {0x3, 0x8}, {0x7}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x8}, {0x2, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x6}, {0x4, 0x4}, {0x0, 0x2}, {0x3}, {0x6}, {0x1}, {0x3, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x39c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x8}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd7, 0x1, 0x3, 0x8000, 0x20, 0x5c, 0x2, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x9, 0x0, 0x2, 0x2, 0xd876, 0x1000]}}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x3}, {0x5, 0x6}, {0x6, 0x7}, {0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0x4}, {0x6, 0x9}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x8}, {0x3, 0x7}, {0x7, 0x7}, {0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x2, 0x6, 0x9, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x401, 0x2, 0xe51, 0x3, 0x89, 0x1, 0xf7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9c40, 0x0, 0x6, 0x300, 0xffff, 0x3, 0x6]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x2, 0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x7, 0x7}, {0x5}, {0x7, 0x3}, {0x2, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0xa}, {0x4, 0x8}, {0x5, 0x3}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x4}, {0x4, 0x7}, {0x6}, {0x4, 0x5}, {}, {0x3, 0x2}, {0x5}, {0x1, 0x4}, {0x7, 0x1f}, {0x3, 0x3}, {}, {0x1, 0x7}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x6, 0x5}, {0x6, 0x4}, {0x3, 0x5}, {0x2, 0xa}, {0x7, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x7, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x6, 0x8}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x6, 0x7}, {0x7, 0x2}, {0x6, 0xa}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x7}, {0x1}, {0x7, 0x3}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x5}, {0x3, 0x1}, {0x4, 0x7}, {0x7, 0x2}, {0x1}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0xa}, {0x3, 0x5}, {0x2, 0x3}, {0x7}, {0x7, 0x2}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x1, 0x0, 0x9, 0x3, 0x16, 0x1, 0x5, 0x4, 0x6, 0x1]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x48, 0x24, 0x16, 0x9, 0x60]}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x6, 0x60, 0x1, 0x4, 0x1]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x3, 0x2, 0xb, 0xc, 0x30, 0x24, 0x9, 0x12, 0x36, 0x12, 0x48, 0x16, 0x36, 0x1e, 0x5, 0x24, 0x12, 0x9, 0x60, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xab3e, 0x4, 0x0, 0xca28, 0x8, 0x3, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x84, 0x1ff, 0xfa8f, 0x4, 0x3, 0xf9b1, 0xff, 0x5]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2}, {0x2, 0x5}, {0x0, 0x8}, {0x7, 0x5}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x2, 0x5}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x8}, {0x2, 0x9}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x40, 0x6, 0x0, 0xa4, 0xff, 0x8, 0xfff0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0xb, 0x6, 0x4, 0x12, 0x60, 0x2, 0x18, 0xc, 0x5, 0x18, 0x16, 0x5, 0x2e, 0x62501ff4ac342a77, 0x12, 0x0, 0x9, 0x4, 0xb, 0x12, 0x1, 0x60, 0xb, 0x16, 0x9, 0xc, 0xb, 0x36]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x5, 0x8}, {0x4, 0x7}, {0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x3, 0x1}, {0x4, 0x6}, {0x6, 0x6}, {0x3, 0x7}, {0x5, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x5, 0x5}, {0x7, 0x2}, {0x3, 0x7}, {0x3}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x4}, {}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x0, 0x0, 0x1cd0, 0x1000, 0xff7f, 0x81]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{}, {0x1, 0x8}, {0x6, 0xa}, {0x0, 0x6}, {0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x8}, {0x2, 0x8}, {0x4, 0x2}, {}, {0x6, 0x7}, {0x5, 0x6}, {0x0, 0x6}, {0x7, 0x2}, {0x7, 0x5}, {0x3, 0x3}, {0x2, 0x9}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0xa}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x3}, {0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x4}, {0x6, 0x7}, {0x6}, {0x0, 0x1}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{}, {0x1, 0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x8}, {0x7}, {0x6, 0x6}, {0x0, 0x1}, {0x6, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x2, 0x1}, {0x7, 0x6}, {0x6, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x0, 0x5}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x1}, {0x4, 0x3}, {0x4, 0x3}, {}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x2, 0xa}, {0x3}, {0x0, 0x4}, {0x6}, {0x3, 0x2}, {0x4, 0x4}, {0x3, 0x6}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0x3}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {0x5, 0x8}, {0x1, 0x4}, {0x3, 0xa}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0x2}, {0x0, 0x1}, {0x3}, {0x1, 0x7}, {0x6, 0x9}, {0x6, 0x7}]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x6, 0x2ce, 0x40, 0x0, 0x5, 0x1, 0x3b0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x200, 0x1f, 0x0, 0x7, 0x8, 0x8c97]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x3, 0x6, 0x48, 0xc, 0x36, 0xc, 0x16, 0x58a30b6fdae9c6d2, 0xb, 0x1, 0x5, 0x5, 0x30, 0x9, 0x30, 0x12, 0x1b, 0x30, 0x2, 0x12, 0xc, 0x48, 0x24, 0x60, 0x6c, 0x18, 0x5, 0x36, 0xc]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x20, 0xc, 0x5, 0x12, 0x18, 0x60, 0x2, 0x3, 0x6c, 0x89d90745eb80508c, 0x36, 0xc, 0x48, 0xc, 0x9, 0x6c, 0x6c, 0x1, 0x9, 0x1b, 0x1b, 0x4, 0x5, 0x1, 0x4, 0x12, 0x24]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x8}, {0x6, 0x9}, {0x1, 0x1}, {0x3, 0x4}, {0x5, 0x3}, {0x4}, {0x5, 0x5}, {0x2}, {0x3, 0x3}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x0, 0x7, 0x101, 0x6, 0x0, 0x7ff]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x3}, {0x0, 0x6}, {0x4}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x8}, {0x7, 0x6}, {0x6, 0x6}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x6}, {0x7, 0xb}, {0x1, 0x6}, {0x7}, {0x4, 0x3}, {0x3, 0x1}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0xa}, {0x5, 0x4}, {0x1, 0x9}, {0x6, 0xa}, {0x7}, {0x2, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x4, 0xa}, {0x6, 0x8}, {0x1, 0x5}, {0x7, 0x4}, {0x3}, {0x5, 0x3}, {0x6, 0x5}, {0x7, 0x8}, {0x1, 0x6}, {0x3, 0x3}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x3, 0x7}, {0x2, 0x9}, {0x7}, {0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0x4}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x6}, {0x1, 0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x4, 0x4}, {0x3, 0x6}, {0x0, 0x6}, {0x1, 0x1}]}]}]}]}, 0x7b8}, 0x1, 0x0, 0x0, 0x840}, 0x804) r4 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r4, {0xfffffe00}}, './file0\x00'}) r6 = syz_mount_image$nfs(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x8000, 0x1, &(0x7f00000010c0)=[{&(0x7f0000001080)="989aaab76c5301e298", 0x9, 0x10001}], 0x2080081, &(0x7f0000001100)={[{'syz0\x00'}, {}, {'syz0\x00'}, {}, {'syz0\x00'}, {}], [{@dont_hash}, {@measure}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{\xf3@\'%]'}}, {@fowner_lt={'fowner<', 0xee01}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '/*%,&,/{&'}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x1f}}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f00000011c0)={0x40, 0x8, 0x7, 0xfffffffe, 0x6, [{0x6ab, 0x5, 0x80, '\x00', 0x804}, {0x0, 0x80, 0x7, '\x00', 0x2}, {0x3, 0x8001, 0x0, '\x00', 0x1000}, {0x1cc, 0xffffffffffff8000, 0x1, '\x00', 0xa00}, {0x2, 0x1, 0x800, '\x00', 0x101}, {0x3, 0x4, 0x101}]}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0xb8, 0x0, 0x410, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x35, 0x2a, [@preq={0x82, 0x25, @not_ext={{0x1, 0x1}, 0x5a, 0x5, 0x6, @broadcast, 0x80000001, "", 0x6, 0x2, 0x1, [{{0x1}, @device_b, 0x1}]}}, @perr={0x84, 0x2, {0x9}}, @ssid={0x0, 0x4, @random="fffdbf96"}]}, @NL80211_ATTR_IE={0x57, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @random_vendor={0xdd, 0x45, "35ae20d678b832bcc1f19f1f8e2c302cf7fd69366d0dd4a3a0c294e86a08beb8b5aef09d66ed0a696a148af86de5f33b91cff7dd085820fa0d6daf45c94ba216bac5f4d0bb"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x100}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0/file0\x00'}) syz_genetlink_get_family_id$fou(&(0x7f0000001500), r7) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x1) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r8, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x11) [ 77.810159] audit: type=1400 audit(1663874589.709:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:23:09 executing program 3: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x7f, 0x4, 0x4c4}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0x2, 0x6, 0x6, 0x401, 0x15, "13cf5b457e5e3cc5565c3effcbb544203ddd48"}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000180)={0x3, 0x5, 0x1, 0x4, 0x2, [{0x24, 0x9, 0xffff, '\x00', 0x81}, {0x7, 0x1, 0x7f, '\x00', 0x1000}]}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) umount2(&(0x7f0000000480)='./file0\x00', 0xc) r3 = openat2(r2, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x20101, 0x81, 0x8}, 0x18) mount_setattr(r0, &(0x7f00000004c0)='./file0\x00', 0x900, &(0x7f0000000580)={0x2, 0x89, 0x0, {r3}}, 0x20) r4 = fsopen(&(0x7f00000005c0)='hfsplus\x00', 0x1) dup2(r4, r0) r5 = openat$incfs(r0, &(0x7f0000000600)='.log\x00', 0x500, 0x110) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000640)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x1040000, &(0x7f0000000800)={'trans=xen,', {[{@mmap}, {@afid={'afid', 0x3d, 0x5}}, {@msize={'msize', 0x3d, 0x800}}, {@cache_fscache}, {@cache_loose}, {@debug={'debug', 0x3d, 0x6}}, {@uname={'uname', 0x3d, 'hfsplus\x00'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '#\\'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}}) 19:23:09 executing program 4: r0 = creat(&(0x7f0000001700)='./file0\x00', 0x3) getpeername$inet(r0, &(0x7f0000001740)={0x2, 0x0, @empty}, &(0x7f0000001780)=0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000017c0)={0x5, 0xa0, 0x243, 0x4, 0x2}, 0x14) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000001800), &(0x7f0000001880)=0x68) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000018c0)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xa, 0x0, "badcf049c599a34a738e09239d147a495554765e105c607eb630f99189c656a8ab290f6565db9a6339dba8a8e0bc66478f44367ed7cf4c25b3bfd4cecfe22f4c5b3fa51446b5b6f9fed1e65e25db6417"}, 0xd8) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000002a40)={0x1, 0x1, 0x1000, 0x1000, &(0x7f00000019c0)="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", 0x64, 0x0, &(0x7f00000029c0)="39cdfb9cb3c4e37004b99ac2df7e0b554804990a13740b8477a53118bbcce8c9f7b1b6f0a46ade3a1fba9ebf4eb1d852350caa819082af0040c84dd3690e2cf471c2e3f145433e9b2f171af662e999a38a0cdf15d1ff2eea90fca1f8cfeb2bc25e784270"}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000002ac0)='./file1\x00', 0x200) fsetxattr$security_capability(r1, &(0x7f0000002b00), &(0x7f0000002b40)=@v2={0x2000000, [{0x3, 0x8a}, {0x294da93d, 0x4}]}, 0x14, 0x2) r2 = openat(r0, &(0x7f0000002b80)='./file0\x00', 0x0, 0x2) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000002bc0)={'ah\x00'}, &(0x7f0000002c00)=0x1e) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000002c40)='xfrm0\x00') ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002c80)={r2, 0x1, 0x5, 0x6}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000002cc0)) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x50, 0x2, 0x7, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x51ca}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1fe}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000000) syz_io_uring_setup(0x6b5e, &(0x7f0000002e40)={0x0, 0x6a55, 0x0, 0x2, 0x210, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002ec0), &(0x7f0000002f00)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000002f40)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1) 19:23:09 executing program 5: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c810}, 0x15) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x6, 0xb0ea, 0x14, @local, @mcast1, 0x80, 0x7800, 0xe03, 0x9}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x4ac, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xfc, 0x8, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "077166bddae06cd730f3842b6a76f1267c5314895b6bbc49764826bf10a644a1"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9e5, @local, 0xfffffffb}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "13611dca86a8accfabfdba621cc5ea35db688d7236a2f77f11ef55f7875d95d0"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4985dfa8183b2d8a3d9747265e9ac621ea0b9ad020a9c47536173e975e205588"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "52fc984da08f730612490eefb409ade8dd619d651c24d382b2bf94bf0af0622b"}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_PEERS={0xc4, 0x8, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fbac12501031a5b81c0e316b7bda896e38980a1006b987a57374b2cb66414acf"}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2ac, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @empty, 0x6}}]}, {0x284, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x280, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8}]}, 0x4ac}}, 0x5) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8850}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x140, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfffffff7}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000) sendto(0xffffffffffffffff, &(0x7f0000000ec0)="ff59d367f7c7423a2a6ecf8f8527500e4681abcd308fd505e2186e8b8b19f82eb6b28ecedfcf523dda14b8d86a88c81fe6b50c72a1b585629cad5cb8745247ed241fa23a5ba1855bab67c940bf00608e5355cb183995a1ccfe36d6b438899dfaeeb80b7e41aff86e9f5320c74335", 0x6e, 0x40, &(0x7f0000000f40)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x80) r3 = openat(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x5c040, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001140)={'ip6gre0\x00', &(0x7f00000010c0)={'sit0\x00', r0, 0x29, 0xff, 0x3, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x10, 0x7, 0x80000000, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000001200)={'ip6gre0\x00', &(0x7f0000001180)={'syztnl1\x00', r4, 0x2f, 0x8, 0xff, 0x20, 0x10, @private2, @private2, 0x40, 0x7800, 0x7, 0x4}}) r5 = syz_open_dev$vcsn(&(0x7f0000001240), 0x4, 0x90001) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x88, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x66e}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x792}}}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r3) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x64, r6, 0x14, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x200400c5) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x111000, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x7f, 0xfffffffc, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7, 0x2, 0x4}}) ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f0000001680)) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0x100, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8ff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) 19:23:09 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) io_setup(0x6, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xff, r0, &(0x7f0000000080)="deacbaa72ed9ccf6f4977dad4a89c1f8702f3b3336a4853b30dc8ee7c21384bbba861aaceebff9dd4345d0e5636c10281d0cf77360121ae2e149e149d166aac65167760bb12fd44888c68e7b116af4779eb78a42675287cb18e67bd184451ac84c7b9c9434935049cf8ffbcd02b2431ca4c4b516e1d86c8ebb9063e252ea4e31c3819690e58b4b3a142e68c004ce00bc622aaf4b8106da2c73debc58e9048e75b0b0c470ac4fb86b4675f9c6089f559269eaf25a361e5c515474671fe7f9885b87379bf7ac", 0xc5, 0xffffffff, 0x0, 0x1, r0}, &(0x7f00000001c0)) r2 = eventfd2(0x7, 0x801) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r2, r3, 0x0, 0x4) io_submit(r1, 0x0, &(0x7f0000000200)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r1, 0x2, &(0x7f00000013c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x7, 0x2, r3, &(0x7f0000000240)="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", 0x1000, 0x4, 0x0, 0x2}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x6, 0xff, r2, &(0x7f0000001280)="953ebba3177d343a2d4108f1035a9b86789f8b2e39fcf5a3d2c8a04081caa9c98b331b26293e0eab1fd70dc4308fbaf1bcc69f12e674c53a102a7f70a28632f78ef33f8ef6ad7c79106536ced8cb439577b94ed5239f03353b9ccef1d7d665302b1d6489c1a1f1cf7d425e5cfe7a3d9e4c399341836328523dfafe51ad9e33314fdaa45dfcdd0ce07987312edbce0d064e9ae3cadc07029122c112af0081f74a42855f667ab15b52f90182cdaaf31c155be32df8cf52f63144f5fdc3434d9ca3d350c8e4eb4ab22df2dd", 0xca, 0x1, 0x0, 0x2, r0}]) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000001400)={0x8, 'ipvlan0\x00', {'erspan0\x00'}, 0xfff7}) close_range(r4, r5, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000001440)) connect$inet6(r4, &(0x7f0000001480)={0xa, 0x4e23, 0x101, @mcast2, 0x40}, 0x1c) write$binfmt_elf32(r4, &(0x7f00000014c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x6, 0x4, 0x17, 0x9f3, 0x2, 0x3, 0x9, 0x100, 0x38, 0x224, 0x9, 0xb6, 0x20, 0x2, 0x40, 0x80, 0x7ff}, [{0x7, 0x80000000, 0x9, 0x2, 0x8, 0x20, 0x6, 0x80000001}], "c3c4141fe3a9a5c1ceb4fac7e73332c13b248ceb2e21d87d0a8e00700a455a9253280138859d9d1062ce32fd4c1276c98c6d800862ca39a8ede4791fd5b1d9feaf3645c5dce948e6f1306d6676439d3f78b2ae51ee86fb037a952c3fa39153ff48a00611ac9a34f750701d96a7b12df683edaf38aca3d146214860c19b72d622d02bcb5b17378856f7a277c36fed81a4d0d01f8826dacaf487faeeaf4d3f4da1ca3e4e7c83285d91307898f2b3d6c0c894c24f7f95111718fa2803fe031855a9ad4ff1ee837fcb22fa0acb8d9096a6599ac757a5d8b547b917645e5cc8c9de3f43cdd64fcb798b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x83f) bind$inet6(r5, &(0x7f0000001d00)={0xa, 0x4e22, 0x48978a05, @remote, 0x20}, 0x1c) io_pgetevents(r1, 0x2, 0x5, &(0x7f0000001d40)=[{}, {}, {}, {}, {}], &(0x7f0000001e00)={0x0, 0x3938700}, 0x0) 19:23:09 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r2, 0x418, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004850) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008095}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x1f, 0x9, 0x30, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80, 0x700, 0x9, 0xa}}) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000008c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xfc, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4010}, 0x4000080) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r1) accept$packet(r7, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b00)=0x14) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r9, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x44084) [ 79.259889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.261816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.263635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.269016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.270887] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.286294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.294855] Bluetooth: hci0: HCI_REQ-0x0c1a [ 79.297968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.299493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.301370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.304597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.306486] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.307788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.312375] Bluetooth: hci2: HCI_REQ-0x0c1a [ 79.379657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.381698] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.386270] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.388187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.392308] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.393513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.401954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.403822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.407326] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.410810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.412015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.414396] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.416882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.418373] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.421762] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.423188] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.428586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.432700] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.433855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.434947] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 79.440880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.443048] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.445331] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 79.447752] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.449012] Bluetooth: hci1: HCI_REQ-0x0c1a [ 79.472628] Bluetooth: hci3: HCI_REQ-0x0c1a [ 79.474147] Bluetooth: hci6: HCI_REQ-0x0c1a [ 79.496129] Bluetooth: hci7: HCI_REQ-0x0c1a [ 79.608817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.622036] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.642514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.658626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.660606] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.661956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.672235] Bluetooth: hci4: HCI_REQ-0x0c1a [ 81.320447] Bluetooth: hci2: command 0x0409 tx timeout [ 81.320468] Bluetooth: hci0: command 0x0409 tx timeout [ 81.384190] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 81.513188] Bluetooth: hci6: command 0x0409 tx timeout [ 81.514028] Bluetooth: hci3: command 0x0409 tx timeout [ 81.514790] Bluetooth: hci1: command 0x0409 tx timeout [ 81.577183] Bluetooth: hci7: command 0x0409 tx timeout [ 81.704178] Bluetooth: hci4: command 0x0409 tx timeout [ 83.368128] Bluetooth: hci0: command 0x041b tx timeout [ 83.368580] Bluetooth: hci2: command 0x041b tx timeout [ 83.561160] Bluetooth: hci1: command 0x041b tx timeout [ 83.561647] Bluetooth: hci3: command 0x041b tx timeout [ 83.562058] Bluetooth: hci6: command 0x041b tx timeout [ 83.624112] Bluetooth: hci7: command 0x041b tx timeout [ 83.753153] Bluetooth: hci4: command 0x041b tx timeout [ 84.760278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.778221] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.779670] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.795022] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.828319] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.829047] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.850181] Bluetooth: hci5: HCI_REQ-0x0c1a [ 85.416296] Bluetooth: hci2: command 0x040f tx timeout [ 85.416766] Bluetooth: hci0: command 0x040f tx timeout [ 85.609183] Bluetooth: hci6: command 0x040f tx timeout [ 85.609662] Bluetooth: hci3: command 0x040f tx timeout [ 85.610423] Bluetooth: hci1: command 0x040f tx timeout [ 85.673114] Bluetooth: hci7: command 0x040f tx timeout [ 85.801123] Bluetooth: hci4: command 0x040f tx timeout [ 86.889416] Bluetooth: hci5: command 0x0409 tx timeout [ 87.465142] Bluetooth: hci0: command 0x0419 tx timeout [ 87.465624] Bluetooth: hci2: command 0x0419 tx timeout [ 87.656157] Bluetooth: hci1: command 0x0419 tx timeout [ 87.656673] Bluetooth: hci3: command 0x0419 tx timeout [ 87.657201] Bluetooth: hci6: command 0x0419 tx timeout [ 87.721124] Bluetooth: hci7: command 0x0419 tx timeout [ 87.849167] Bluetooth: hci4: command 0x0419 tx timeout [ 88.936142] Bluetooth: hci5: command 0x041b tx timeout [ 90.984280] Bluetooth: hci5: command 0x040f tx timeout [ 93.032125] Bluetooth: hci5: command 0x0419 tx timeout 19:24:09 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80a4, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="0154a5a2680010bbacb7e43ce47b940aa9533c5b2bf4006dc3b6b93c4b10e9d599cff74e67b8f800"/49, @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r1, 0x0, 0xfffffdef) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1a92, &(0x7f0000000380)={0x0, 0x71ba, 0x8, 0x401, 0x295, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) [ 137.210624] loop7: detected capacity change from 0 to 264192 [ 137.239809] I/O error, dev loop7, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.311478] audit: type=1400 audit(1663874649.211:7): avc: denied { open } for pid=3785 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.313014] audit: type=1400 audit(1663874649.211:8): avc: denied { kernel } for pid=3785 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.322726] ------------[ cut here ]------------ [ 137.322747] [ 137.322750] ====================================================== [ 137.322754] WARNING: possible circular locking dependency detected [ 137.322759] 6.0.0-rc6-next-20220921 #1 Not tainted [ 137.322766] ------------------------------------------------------ [ 137.322769] syz-executor.7/3786 is trying to acquire lock: [ 137.322776] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 137.322818] [ 137.322818] but task is already holding lock: [ 137.322821] ffff88800d055c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.322852] [ 137.322852] which lock already depends on the new lock. [ 137.322852] [ 137.322855] [ 137.322855] the existing dependency chain (in reverse order) is: [ 137.322859] [ 137.322859] -> #3 (&ctx->lock){....}-{2:2}: [ 137.322874] _raw_spin_lock+0x2a/0x40 [ 137.322895] __perf_event_task_sched_out+0x53b/0x18d0 [ 137.322908] __schedule+0xedd/0x2470 [ 137.322922] schedule+0xda/0x1b0 [ 137.322935] futex_wait_queue+0xf5/0x1e0 [ 137.322948] futex_wait+0x28e/0x690 [ 137.322959] do_futex+0x2ff/0x380 [ 137.322968] __x64_sys_futex+0x1c6/0x4d0 [ 137.322979] do_syscall_64+0x3b/0x90 [ 137.322997] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.323009] [ 137.323009] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 137.323027] _raw_spin_lock_nested+0x30/0x40 [ 137.323046] raw_spin_rq_lock_nested+0x1e/0x30 [ 137.323060] task_fork_fair+0x63/0x4d0 [ 137.323081] sched_cgroup_fork+0x3d0/0x540 [ 137.323097] copy_process+0x4183/0x6e20 [ 137.323108] kernel_clone+0xe7/0x890 [ 137.323118] user_mode_thread+0xad/0xf0 [ 137.323129] rest_init+0x24/0x250 [ 137.323140] arch_call_rest_init+0xf/0x14 [ 137.323158] start_kernel+0x4c1/0x4e6 [ 137.323173] secondary_startup_64_no_verify+0xe0/0xeb [ 137.323188] [ 137.323188] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 137.323202] _raw_spin_lock_irqsave+0x39/0x60 [ 137.323222] try_to_wake_up+0xab/0x1930 [ 137.323236] up+0x75/0xb0 [ 137.323251] __up_console_sem+0x6e/0x80 [ 137.323268] console_unlock+0x46a/0x590 [ 137.323286] vprintk_emit+0x1bd/0x560 [ 137.323304] vprintk+0x84/0xa0 [ 137.323322] _printk+0xba/0xf1 [ 137.323333] kauditd_hold_skb.cold+0x3f/0x4e [ 137.323351] kauditd_send_queue+0x233/0x290 [ 137.323367] kauditd_thread+0x5da/0x9a0 [ 137.323382] kthread+0x2ed/0x3a0 [ 137.323398] ret_from_fork+0x22/0x30 [ 137.323412] [ 137.323412] -> #0 ((console_sem).lock){....}-{2:2}: [ 137.323426] __lock_acquire+0x2a02/0x5e70 [ 137.323445] lock_acquire+0x1a2/0x530 [ 137.323462] _raw_spin_lock_irqsave+0x39/0x60 [ 137.323482] down_trylock+0xe/0x70 [ 137.323497] __down_trylock_console_sem+0x3b/0xd0 [ 137.323515] vprintk_emit+0x16b/0x560 [ 137.323533] vprintk+0x84/0xa0 [ 137.323550] _printk+0xba/0xf1 [ 137.323560] report_bug.cold+0x72/0xab [ 137.323577] handle_bug+0x3c/0x70 [ 137.323595] exc_invalid_op+0x14/0x50 [ 137.323612] asm_exc_invalid_op+0x16/0x20 [ 137.323623] group_sched_out.part.0+0x2c7/0x460 [ 137.323635] ctx_sched_out+0x8f1/0xc10 [ 137.323645] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.323658] __schedule+0xedd/0x2470 [ 137.323678] schedule+0xda/0x1b0 [ 137.323692] futex_wait_queue+0xf5/0x1e0 [ 137.323703] futex_wait+0x28e/0x690 [ 137.323713] do_futex+0x2ff/0x380 [ 137.323723] __x64_sys_futex+0x1c6/0x4d0 [ 137.323733] do_syscall_64+0x3b/0x90 [ 137.323750] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.323762] [ 137.323762] other info that might help us debug this: [ 137.323762] [ 137.323765] Chain exists of: [ 137.323765] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 137.323765] [ 137.323781] Possible unsafe locking scenario: [ 137.323781] [ 137.323784] CPU0 CPU1 [ 137.323787] ---- ---- [ 137.323790] lock(&ctx->lock); [ 137.323796] lock(&rq->__lock); [ 137.323803] lock(&ctx->lock); [ 137.323809] lock((console_sem).lock); [ 137.323816] [ 137.323816] *** DEADLOCK *** [ 137.323816] [ 137.323818] 2 locks held by syz-executor.7/3786: [ 137.323825] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 137.323856] #1: ffff88800d055c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.323885] [ 137.323885] stack backtrace: [ 137.323888] CPU: 0 PID: 3786 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220921 #1 [ 137.323902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.323910] Call Trace: [ 137.323914] [ 137.323919] dump_stack_lvl+0x8b/0xb3 [ 137.323938] check_noncircular+0x263/0x2e0 [ 137.323956] ? format_decode+0x26c/0xb50 [ 137.323973] ? print_circular_bug+0x450/0x450 [ 137.323992] ? enable_ptr_key_workfn+0x20/0x20 [ 137.324009] ? format_decode+0x26c/0xb50 [ 137.324027] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 137.324047] __lock_acquire+0x2a02/0x5e70 [ 137.324071] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 137.324096] lock_acquire+0x1a2/0x530 [ 137.324114] ? down_trylock+0xe/0x70 [ 137.324132] ? lock_release+0x750/0x750 [ 137.324155] ? vprintk+0x84/0xa0 [ 137.324175] _raw_spin_lock_irqsave+0x39/0x60 [ 137.324195] ? down_trylock+0xe/0x70 [ 137.324212] down_trylock+0xe/0x70 [ 137.324228] ? vprintk+0x84/0xa0 [ 137.324246] __down_trylock_console_sem+0x3b/0xd0 [ 137.324265] vprintk_emit+0x16b/0x560 [ 137.324286] vprintk+0x84/0xa0 [ 137.324305] _printk+0xba/0xf1 [ 137.324317] ? record_print_text.cold+0x16/0x16 [ 137.324333] ? report_bug.cold+0x66/0xab [ 137.324352] ? group_sched_out.part.0+0x2c7/0x460 [ 137.324364] report_bug.cold+0x72/0xab [ 137.324383] handle_bug+0x3c/0x70 [ 137.324401] exc_invalid_op+0x14/0x50 [ 137.324420] asm_exc_invalid_op+0x16/0x20 [ 137.324433] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.324447] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.324460] RSP: 0018:ffff8880411b78f8 EFLAGS: 00010006 [ 137.324469] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.324477] RDX: ffff88801ba28000 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 137.324486] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 137.324494] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800d055c00 [ 137.324502] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 137.324514] ? group_sched_out.part.0+0x2c7/0x460 [ 137.324528] ? group_sched_out.part.0+0x2c7/0x460 [ 137.324542] ctx_sched_out+0x8f1/0xc10 [ 137.324556] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.324573] ? lock_is_held_type+0xd7/0x130 [ 137.324586] ? __perf_cgroup_move+0x160/0x160 [ 137.324599] ? set_next_entity+0x304/0x550 [ 137.324621] ? lock_is_held_type+0xd7/0x130 [ 137.324635] __schedule+0xedd/0x2470 [ 137.324652] ? io_schedule_timeout+0x150/0x150 [ 137.324668] ? futex_wait_setup+0x166/0x230 [ 137.324683] schedule+0xda/0x1b0 [ 137.324698] futex_wait_queue+0xf5/0x1e0 [ 137.324711] futex_wait+0x28e/0x690 [ 137.324724] ? futex_wait_setup+0x230/0x230 [ 137.324738] ? wake_up_q+0x8b/0xf0 [ 137.324753] ? do_raw_spin_unlock+0x4f/0x220 [ 137.324774] ? futex_wake+0x158/0x490 [ 137.324792] ? fd_install+0x1f9/0x640 [ 137.324811] do_futex+0x2ff/0x380 [ 137.324822] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 137.324839] __x64_sys_futex+0x1c6/0x4d0 [ 137.324853] ? __x64_sys_futex_time32+0x480/0x480 [ 137.324866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.324880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.324895] do_syscall_64+0x3b/0x90 [ 137.324914] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.324926] RIP: 0033:0x7f76a7159b19 [ 137.324935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.324947] RSP: 002b:00007f76a46cf218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.324958] RAX: ffffffffffffffda RBX: 00007f76a726cf68 RCX: 00007f76a7159b19 [ 137.324967] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f76a726cf68 [ 137.324974] RBP: 00007f76a726cf60 R08: 0000000000000000 R09: 0000000000000000 [ 137.324982] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76a726cf6c [ 137.324990] R13: 00007fff6f21a16f R14: 00007f76a46cf300 R15: 0000000000022000 [ 137.325004] [ 137.385672] WARNING: CPU: 0 PID: 3786 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 137.386354] Modules linked in: [ 137.386597] CPU: 0 PID: 3786 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220921 #1 [ 137.387202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.388047] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.388452] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.389796] RSP: 0018:ffff8880411b78f8 EFLAGS: 00010006 [ 137.390192] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.390720] RDX: ffff88801ba28000 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 137.391255] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 137.391791] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800d055c00 [ 137.392319] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 137.392852] FS: 00007f76a46cf700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 137.393455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.393893] CR2: 00007fe193725310 CR3: 000000000e6a2000 CR4: 0000000000350ef0 [ 137.394425] Call Trace: [ 137.394622] [ 137.394795] ctx_sched_out+0x8f1/0xc10 [ 137.395101] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.395491] ? lock_is_held_type+0xd7/0x130 [ 137.395834] ? __perf_cgroup_move+0x160/0x160 [ 137.396175] ? set_next_entity+0x304/0x550 [ 137.396503] ? lock_is_held_type+0xd7/0x130 [ 137.396830] __schedule+0xedd/0x2470 [ 137.397116] ? io_schedule_timeout+0x150/0x150 [ 137.397470] ? futex_wait_setup+0x166/0x230 [ 137.397799] schedule+0xda/0x1b0 [ 137.398059] futex_wait_queue+0xf5/0x1e0 [ 137.398367] futex_wait+0x28e/0x690 [ 137.398645] ? futex_wait_setup+0x230/0x230 [ 137.398971] ? wake_up_q+0x8b/0xf0 [ 137.399247] ? do_raw_spin_unlock+0x4f/0x220 [ 137.399591] ? futex_wake+0x158/0x490 [ 137.399899] ? fd_install+0x1f9/0x640 [ 137.400193] do_futex+0x2ff/0x380 [ 137.400455] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 137.400893] __x64_sys_futex+0x1c6/0x4d0 [ 137.401203] ? __x64_sys_futex_time32+0x480/0x480 [ 137.401577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.401967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.402360] do_syscall_64+0x3b/0x90 [ 137.402651] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.403039] RIP: 0033:0x7f76a7159b19 [ 137.403325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.404674] RSP: 002b:00007f76a46cf218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.405249] RAX: ffffffffffffffda RBX: 00007f76a726cf68 RCX: 00007f76a7159b19 [ 137.405779] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f76a726cf68 [ 137.406311] RBP: 00007f76a726cf60 R08: 0000000000000000 R09: 0000000000000000 [ 137.406848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76a726cf6c [ 137.407379] R13: 00007fff6f21a16f R14: 00007f76a46cf300 R15: 0000000000022000 [ 137.407934] [ 137.408115] irq event stamp: 3984 [ 137.408373] hardirqs last enabled at (3983): [] syscall_enter_from_user_mode+0x1d/0x50 [ 137.409093] hardirqs last disabled at (3984): [] __schedule+0x1225/0x2470 [ 137.409720] softirqs last enabled at (3828): [] __irq_exit_rcu+0x11b/0x180 [ 137.410364] softirqs last disabled at (3823): [] __irq_exit_rcu+0x11b/0x180 [ 137.411007] ---[ end trace 0000000000000000 ]--- [ 138.051495] loop7: detected capacity change from 0 to 264192 [ 138.130842] syz-executor.7 (3821) used greatest stack depth: 24216 bytes left 19:24:10 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80a4, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="0154a5a2680010bbacb7e43ce47b940aa9533c5b2bf4006dc3b6b93c4b10e9d599cff74e67b8f800"/49, @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r1, 0x0, 0xfffffdef) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1a92, &(0x7f0000000380)={0x0, 0x71ba, 0x8, 0x401, 0x295, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) [ 138.287667] loop7: detected capacity change from 0 to 264192 [ 138.327087] hrtimer: interrupt took 17613 ns 19:24:11 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80a4, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="0154a5a2680010bbacb7e43ce47b940aa9533c5b2bf4006dc3b6b93c4b10e9d599cff74e67b8f800"/49, @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r1, 0x0, 0xfffffdef) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1a92, &(0x7f0000000380)={0x0, 0x71ba, 0x8, 0x401, 0x295, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) [ 139.308999] loop7: detected capacity change from 0 to 264192 19:24:12 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80a4, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="0154a5a2680010bbacb7e43ce47b940aa9533c5b2bf4006dc3b6b93c4b10e9d599cff74e67b8f800"/49, @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r1, 0x0, 0xfffffdef) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1a92, &(0x7f0000000380)={0x0, 0x71ba, 0x8, 0x401, 0x295, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) [ 140.289463] loop7: detected capacity change from 0 to 264192 19:24:13 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80a4, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="0154a5a2680010bbacb7e43ce47b940aa9533c5b2bf4006dc3b6b93c4b10e9d599cff74e67b8f800"/49, @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r1, 0x0, 0xfffffdef) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1a92, &(0x7f0000000380)={0x0, 0x71ba, 0x8, 0x401, 0x295, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) [ 141.200534] loop2: detected capacity change from 0 to 256 [ 141.209669] loop7: detected capacity change from 0 to 264192 [ 141.349674] loop2: detected capacity change from 0 to 256 19:24:13 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000380)={0x8, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000007c0)={0x3f, {{0xa, 0x4e22, 0xa3a8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}}}, 0x88) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x1, 0x7, 0x0, 0x8}, 0x20) syz_io_uring_setup(0x1cb6, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) recvfrom(r1, &(0x7f0000000000)=""/136, 0x88, 0x100, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000080)) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) 19:24:13 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000380)={0x8, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000007c0)={0x3f, {{0xa, 0x4e22, 0xa3a8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}}}, 0x88) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x1, 0x7, 0x0, 0x8}, 0x20) syz_io_uring_setup(0x1cb6, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) recvfrom(r1, &(0x7f0000000000)=""/136, 0x88, 0x100, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000080)) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) [ 141.964863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.965941] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 141.967514] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.969499] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.970856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.972298] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.973486] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.975722] Bluetooth: hci4: HCI_REQ-0x0c1a 19:24:13 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000380)={0x8, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000007c0)={0x3f, {{0xa, 0x4e22, 0xa3a8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}}}, 0x88) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x1, 0x7, 0x0, 0x8}, 0x20) syz_io_uring_setup(0x1cb6, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) recvfrom(r1, &(0x7f0000000000)=""/136, 0x88, 0x100, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000080)) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) [ 142.065960] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 142.066904] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 142.068986] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 142.069966] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 142.071513] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 142.073511] Bluetooth: hci7: HCI_REQ-0x0c1a [ 143.401091] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 143.656332] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 143.720106] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 143.912123] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 144.040137] Bluetooth: hci4: command 0x0409 tx timeout [ 144.104442] Bluetooth: hci7: command 0x0409 tx timeout [ 146.088180] Bluetooth: hci4: command 0x041b tx timeout [ 146.152153] Bluetooth: hci7: command 0x041b tx timeout [ 146.168240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.171001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.178447] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.180981] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.182969] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.187979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.193156] Bluetooth: hci3: HCI_REQ-0x0c1a VM DIAGNOSIS: 19:24:09 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1c91 RDI=ffffffff87645ba0 RBP=ffffffff87645b60 RSP=ffff8880411b7348 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff87645b60 R14=0000000000000010 R15=ffffffff822b1c80 RIP=ffffffff822b1ce9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f76a46cf700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe193725310 CR3=000000000e6a2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff85b0dffc RCX=ffffffff812a2bc8 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff85b044d0 RBP=ffffed1008247f94 RSP=ffff88804123fc90 R8 =0000000000000000 R9 =ffffffff85b044d7 R10=0000000000000000 R11=0000000000000001 R12=ffff88806cf2a658 R13=ffff88806cf2a6c0 R14=dffffc0000000000 R15=ffff88806cf2a640 RIP=ffffffff812a2f18 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd96a0f5540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd96a30859e CR3=0000000040614000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00ff000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 ff00ffffffffffff ffffffffffffff00 YMM02=0000000000000000 0000000000000000 470035312e325f43 42494c4700352e32 YMM03=0000000000000000 0000000000000000 0000000000000000 42494c4700352e32 YMM04=0000000000000000 0000000000000000 312e325f4342494c 470035312e325f43 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000