Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:62506' (ECDSA) to the list of known hosts. 2022/09/27 02:22:59 fuzzer started 2022/09/27 02:23:00 dialing manager at localhost:38881 syzkaller login: [ 36.450901] cgroup: Unknown subsys name 'net' [ 36.550825] cgroup: Unknown subsys name 'rlimit' 2022/09/27 02:23:13 syscalls: 2215 2022/09/27 02:23:13 code coverage: enabled 2022/09/27 02:23:13 comparison tracing: enabled 2022/09/27 02:23:13 extra coverage: enabled 2022/09/27 02:23:13 setuid sandbox: enabled 2022/09/27 02:23:13 namespace sandbox: enabled 2022/09/27 02:23:13 Android sandbox: enabled 2022/09/27 02:23:13 fault injection: enabled 2022/09/27 02:23:13 leak checking: enabled 2022/09/27 02:23:13 net packet injection: enabled 2022/09/27 02:23:13 net device setup: enabled 2022/09/27 02:23:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/27 02:23:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/27 02:23:13 USB emulation: enabled 2022/09/27 02:23:13 hci packet injection: enabled 2022/09/27 02:23:13 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/27 02:23:13 802.15.4 emulation: enabled 2022/09/27 02:23:13 fetching corpus: 50, signal 26080/27911 (executing program) 2022/09/27 02:23:13 fetching corpus: 100, signal 34516/38053 (executing program) 2022/09/27 02:23:13 fetching corpus: 150, signal 46062/51087 (executing program) 2022/09/27 02:23:13 fetching corpus: 200, signal 51516/58040 (executing program) 2022/09/27 02:23:13 fetching corpus: 250, signal 55155/63191 (executing program) 2022/09/27 02:23:13 fetching corpus: 300, signal 58971/68419 (executing program) 2022/09/27 02:23:13 fetching corpus: 350, signal 63639/74440 (executing program) 2022/09/27 02:23:13 fetching corpus: 400, signal 66038/78225 (executing program) 2022/09/27 02:23:14 fetching corpus: 450, signal 70975/84349 (executing program) 2022/09/27 02:23:14 fetching corpus: 500, signal 75325/89874 (executing program) 2022/09/27 02:23:14 fetching corpus: 550, signal 78459/94217 (executing program) 2022/09/27 02:23:14 fetching corpus: 600, signal 80447/97486 (executing program) 2022/09/27 02:23:14 fetching corpus: 650, signal 82682/100947 (executing program) 2022/09/27 02:23:14 fetching corpus: 700, signal 86205/105459 (executing program) 2022/09/27 02:23:14 fetching corpus: 750, signal 90008/110210 (executing program) 2022/09/27 02:23:14 fetching corpus: 800, signal 92247/113546 (executing program) 2022/09/27 02:23:14 fetching corpus: 850, signal 94478/116814 (executing program) 2022/09/27 02:23:14 fetching corpus: 900, signal 97509/120763 (executing program) 2022/09/27 02:23:15 fetching corpus: 950, signal 99286/123610 (executing program) 2022/09/27 02:23:15 fetching corpus: 1000, signal 104580/129462 (executing program) 2022/09/27 02:23:15 fetching corpus: 1050, signal 106588/132377 (executing program) 2022/09/27 02:23:15 fetching corpus: 1100, signal 108985/135617 (executing program) 2022/09/27 02:23:15 fetching corpus: 1150, signal 111719/139076 (executing program) 2022/09/27 02:23:15 fetching corpus: 1200, signal 114085/142215 (executing program) 2022/09/27 02:23:15 fetching corpus: 1250, signal 115025/144165 (executing program) 2022/09/27 02:23:15 fetching corpus: 1300, signal 116215/146258 (executing program) 2022/09/27 02:23:15 fetching corpus: 1350, signal 117182/148216 (executing program) 2022/09/27 02:23:16 fetching corpus: 1400, signal 118989/150797 (executing program) 2022/09/27 02:23:16 fetching corpus: 1450, signal 120311/152975 (executing program) 2022/09/27 02:23:16 fetching corpus: 1500, signal 120859/154505 (executing program) 2022/09/27 02:23:16 fetching corpus: 1550, signal 122845/157123 (executing program) 2022/09/27 02:23:16 fetching corpus: 1600, signal 124080/159135 (executing program) 2022/09/27 02:23:16 fetching corpus: 1650, signal 125118/160993 (executing program) 2022/09/27 02:23:16 fetching corpus: 1700, signal 127989/164248 (executing program) 2022/09/27 02:23:16 fetching corpus: 1750, signal 129594/166498 (executing program) 2022/09/27 02:23:16 fetching corpus: 1800, signal 130826/168439 (executing program) 2022/09/27 02:23:16 fetching corpus: 1850, signal 133408/171386 (executing program) 2022/09/27 02:23:17 fetching corpus: 1900, signal 134963/173549 (executing program) 2022/09/27 02:23:17 fetching corpus: 1950, signal 136006/175358 (executing program) 2022/09/27 02:23:17 fetching corpus: 2000, signal 137365/177334 (executing program) 2022/09/27 02:23:17 fetching corpus: 2050, signal 139657/179907 (executing program) 2022/09/27 02:23:17 fetching corpus: 2100, signal 140619/181559 (executing program) 2022/09/27 02:23:17 fetching corpus: 2150, signal 142161/183608 (executing program) 2022/09/27 02:23:17 fetching corpus: 2200, signal 143464/185444 (executing program) 2022/09/27 02:23:17 fetching corpus: 2250, signal 145017/187441 (executing program) 2022/09/27 02:23:17 fetching corpus: 2300, signal 146105/189037 (executing program) 2022/09/27 02:23:17 fetching corpus: 2350, signal 146778/190373 (executing program) 2022/09/27 02:23:18 fetching corpus: 2400, signal 147611/191830 (executing program) 2022/09/27 02:23:18 fetching corpus: 2450, signal 148200/193113 (executing program) 2022/09/27 02:23:18 fetching corpus: 2500, signal 148828/194446 (executing program) 2022/09/27 02:23:18 fetching corpus: 2550, signal 150761/196536 (executing program) 2022/09/27 02:23:18 fetching corpus: 2600, signal 151683/198044 (executing program) 2022/09/27 02:23:18 fetching corpus: 2650, signal 152198/199258 (executing program) 2022/09/27 02:23:18 fetching corpus: 2700, signal 153811/201211 (executing program) 2022/09/27 02:23:18 fetching corpus: 2750, signal 155456/203100 (executing program) 2022/09/27 02:23:18 fetching corpus: 2800, signal 157741/205358 (executing program) 2022/09/27 02:23:19 fetching corpus: 2850, signal 158849/206922 (executing program) 2022/09/27 02:23:19 fetching corpus: 2900, signal 159499/208150 (executing program) 2022/09/27 02:23:19 fetching corpus: 2950, signal 161225/210002 (executing program) 2022/09/27 02:23:19 fetching corpus: 3000, signal 161987/211253 (executing program) 2022/09/27 02:23:19 fetching corpus: 3050, signal 162744/212497 (executing program) 2022/09/27 02:23:19 fetching corpus: 3100, signal 163413/213687 (executing program) 2022/09/27 02:23:19 fetching corpus: 3150, signal 164651/215219 (executing program) 2022/09/27 02:23:20 fetching corpus: 3200, signal 165218/216289 (executing program) 2022/09/27 02:23:20 fetching corpus: 3250, signal 166518/217749 (executing program) 2022/09/27 02:23:20 fetching corpus: 3300, signal 167681/219209 (executing program) 2022/09/27 02:23:20 fetching corpus: 3350, signal 168828/220598 (executing program) 2022/09/27 02:23:20 fetching corpus: 3400, signal 169550/221704 (executing program) 2022/09/27 02:23:20 fetching corpus: 3450, signal 170226/222800 (executing program) 2022/09/27 02:23:20 fetching corpus: 3500, signal 171015/223975 (executing program) 2022/09/27 02:23:20 fetching corpus: 3550, signal 172340/225410 (executing program) 2022/09/27 02:23:21 fetching corpus: 3600, signal 173022/226447 (executing program) 2022/09/27 02:23:21 fetching corpus: 3650, signal 174043/227612 (executing program) 2022/09/27 02:23:21 fetching corpus: 3700, signal 175367/228928 (executing program) 2022/09/27 02:23:21 fetching corpus: 3750, signal 176640/230316 (executing program) 2022/09/27 02:23:21 fetching corpus: 3800, signal 177370/231372 (executing program) 2022/09/27 02:23:21 fetching corpus: 3850, signal 177948/232330 (executing program) 2022/09/27 02:23:21 fetching corpus: 3900, signal 178692/233322 (executing program) 2022/09/27 02:23:21 fetching corpus: 3950, signal 179518/234395 (executing program) 2022/09/27 02:23:22 fetching corpus: 4000, signal 180724/235587 (executing program) 2022/09/27 02:23:22 fetching corpus: 4050, signal 181258/236499 (executing program) 2022/09/27 02:23:22 fetching corpus: 4100, signal 181813/237344 (executing program) 2022/09/27 02:23:22 fetching corpus: 4150, signal 182458/238273 (executing program) 2022/09/27 02:23:22 fetching corpus: 4200, signal 183195/239273 (executing program) 2022/09/27 02:23:22 fetching corpus: 4250, signal 183673/240142 (executing program) 2022/09/27 02:23:22 fetching corpus: 4300, signal 184486/241149 (executing program) 2022/09/27 02:23:22 fetching corpus: 4350, signal 185984/242338 (executing program) 2022/09/27 02:23:22 fetching corpus: 4400, signal 186787/243246 (executing program) 2022/09/27 02:23:23 fetching corpus: 4450, signal 187254/244044 (executing program) 2022/09/27 02:23:23 fetching corpus: 4500, signal 188134/245008 (executing program) 2022/09/27 02:23:23 fetching corpus: 4550, signal 188450/245758 (executing program) 2022/09/27 02:23:23 fetching corpus: 4600, signal 188823/246513 (executing program) 2022/09/27 02:23:23 fetching corpus: 4650, signal 189145/247250 (executing program) 2022/09/27 02:23:23 fetching corpus: 4700, signal 189725/248024 (executing program) 2022/09/27 02:23:23 fetching corpus: 4750, signal 190117/248772 (executing program) 2022/09/27 02:23:23 fetching corpus: 4800, signal 190525/249474 (executing program) 2022/09/27 02:23:23 fetching corpus: 4850, signal 190830/250152 (executing program) 2022/09/27 02:23:24 fetching corpus: 4900, signal 191313/250937 (executing program) 2022/09/27 02:23:24 fetching corpus: 4950, signal 191877/251711 (executing program) 2022/09/27 02:23:24 fetching corpus: 5000, signal 192229/252442 (executing program) 2022/09/27 02:23:24 fetching corpus: 5050, signal 192738/253181 (executing program) 2022/09/27 02:23:24 fetching corpus: 5100, signal 193179/253872 (executing program) 2022/09/27 02:23:24 fetching corpus: 5150, signal 193625/254592 (executing program) 2022/09/27 02:23:24 fetching corpus: 5200, signal 194246/255349 (executing program) 2022/09/27 02:23:24 fetching corpus: 5250, signal 195017/256108 (executing program) 2022/09/27 02:23:24 fetching corpus: 5300, signal 195820/256860 (executing program) 2022/09/27 02:23:25 fetching corpus: 5350, signal 196950/257630 (executing program) 2022/09/27 02:23:25 fetching corpus: 5400, signal 197285/258272 (executing program) 2022/09/27 02:23:25 fetching corpus: 5450, signal 198110/259006 (executing program) 2022/09/27 02:23:25 fetching corpus: 5500, signal 198520/259650 (executing program) 2022/09/27 02:23:25 fetching corpus: 5550, signal 199166/260323 (executing program) 2022/09/27 02:23:25 fetching corpus: 5600, signal 199705/260973 (executing program) 2022/09/27 02:23:25 fetching corpus: 5650, signal 200216/261571 (executing program) 2022/09/27 02:23:25 fetching corpus: 5700, signal 201256/262242 (executing program) 2022/09/27 02:23:26 fetching corpus: 5750, signal 201770/262866 (executing program) 2022/09/27 02:23:26 fetching corpus: 5800, signal 202155/263445 (executing program) 2022/09/27 02:23:26 fetching corpus: 5850, signal 202598/264019 (executing program) 2022/09/27 02:23:26 fetching corpus: 5900, signal 203032/264614 (executing program) 2022/09/27 02:23:26 fetching corpus: 5950, signal 203447/265203 (executing program) 2022/09/27 02:23:26 fetching corpus: 6000, signal 204537/265879 (executing program) 2022/09/27 02:23:26 fetching corpus: 6050, signal 205091/266401 (executing program) 2022/09/27 02:23:27 fetching corpus: 6100, signal 205628/266928 (executing program) 2022/09/27 02:23:27 fetching corpus: 6150, signal 206045/267476 (executing program) 2022/09/27 02:23:27 fetching corpus: 6200, signal 206488/268017 (executing program) 2022/09/27 02:23:27 fetching corpus: 6250, signal 206979/268643 (executing program) 2022/09/27 02:23:27 fetching corpus: 6300, signal 207589/269213 (executing program) 2022/09/27 02:23:27 fetching corpus: 6350, signal 208388/269723 (executing program) 2022/09/27 02:23:27 fetching corpus: 6400, signal 208782/270220 (executing program) 2022/09/27 02:23:27 fetching corpus: 6450, signal 209093/270738 (executing program) 2022/09/27 02:23:27 fetching corpus: 6500, signal 209533/271242 (executing program) 2022/09/27 02:23:27 fetching corpus: 6550, signal 209892/271729 (executing program) 2022/09/27 02:23:28 fetching corpus: 6600, signal 210542/272175 (executing program) 2022/09/27 02:23:28 fetching corpus: 6650, signal 210876/272644 (executing program) 2022/09/27 02:23:28 fetching corpus: 6700, signal 211353/273086 (executing program) 2022/09/27 02:23:28 fetching corpus: 6750, signal 211714/273527 (executing program) 2022/09/27 02:23:28 fetching corpus: 6800, signal 211928/273582 (executing program) 2022/09/27 02:23:28 fetching corpus: 6850, signal 212267/273582 (executing program) 2022/09/27 02:23:28 fetching corpus: 6900, signal 213252/273582 (executing program) 2022/09/27 02:23:28 fetching corpus: 6950, signal 213666/273582 (executing program) 2022/09/27 02:23:28 fetching corpus: 7000, signal 214011/273582 (executing program) 2022/09/27 02:23:29 fetching corpus: 7050, signal 214248/273582 (executing program) 2022/09/27 02:23:29 fetching corpus: 7100, signal 214678/273601 (executing program) 2022/09/27 02:23:29 fetching corpus: 7150, signal 215144/273601 (executing program) 2022/09/27 02:23:29 fetching corpus: 7200, signal 215510/273603 (executing program) 2022/09/27 02:23:29 fetching corpus: 7250, signal 215826/273609 (executing program) 2022/09/27 02:23:29 fetching corpus: 7300, signal 216244/273614 (executing program) 2022/09/27 02:23:29 fetching corpus: 7350, signal 217062/273620 (executing program) 2022/09/27 02:23:29 fetching corpus: 7400, signal 217514/273658 (executing program) 2022/09/27 02:23:29 fetching corpus: 7424, signal 217662/273658 (executing program) 2022/09/27 02:23:29 fetching corpus: 7424, signal 217662/273658 (executing program) 2022/09/27 02:23:32 starting 8 fuzzer processes 02:23:32 executing program 0: rmdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xe8) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x50083, 0x10) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8001, 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) recvfrom$unix(r4, &(0x7f0000000180)=""/59, 0x3b, 0x12120, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) setxattr(&(0x7f0000000240)='\x00', &(0x7f0000000280)=@known='trusted.overlay.metacopy\x00', &(0x7f00000002c0)='\x00', 0x1, 0x1) creat(&(0x7f0000000300)='./file0/file0\x00', 0x2) r5 = accept(r0, &(0x7f0000000340)=@phonet, &(0x7f00000003c0)=0x80) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5a}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2b}]}, 0x38}}, 0x4040001) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x242002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000540)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x400, 0x84) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r7, 0x8000000) syz_io_uring_setup(0x5efb, &(0x7f0000000780)={0x0, 0x3649, 0x4, 0x1, 0x17c, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000800), &(0x7f0000000840)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000008c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)='./file0\x00', 0x80, 0x40, 0x12345}, 0xfffff565) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) syz_io_uring_setup(0x2100, &(0x7f0000000940)={0x0, 0x6ead, 0x10, 0x0, 0xfd, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x130, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x779}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff327}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x10) 02:23:32 executing program 7: ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0xb938, 0x3, 0x2}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x258100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x2, 0xa0}, {0x5, 0x80000000}, 0x1ff}) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x2, 0x2, 0x9}) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000180)={'\x00', 0x7, 0x3, 0x7}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x101001, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r3 = dup2(r1, r2) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000280)={{0x5, 0x1}, {0x10001, 0x200}, 0x1a, 0x1}) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x14, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x0, 0x3f, 0x7f, 0x80}, {0x6, 0x40, 0xc9, 0x1}, {0x3, 0x0, 0x20, 0x6f5d8274}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/179, 0xb3}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/217, 0xd9}, {&(0x7f0000001780)=""/37, 0x25}], 0x5, &(0x7f0000001840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x10100) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmsg$unix(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001b40)=""/121, 0x79}, {&(0x7f0000001bc0)=""/170, 0xaa}], 0x2, &(0x7f0000001cc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) r9 = pidfd_getfd(r3, r1, 0x0) r10 = eventfd(0x5f2) r11 = syz_open_procfs(0x0, &(0x7f00000021c0)='oom_score\x00') io_submit(0x0, 0x8, &(0x7f0000002280)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0xdb1, r4, &(0x7f0000000380)="3543aa4c0f833d76648cc36bc90347a867d0bcb72d6746a324b0b77e043754c819a88f90828e58ac62b9e70328b4f5a460f0165f94f5dfa285f45d2cdf27f0c8d394036b54a840b706b1f8fa60f04a7ca6224432e226a8293c7fe4876575ba3f5ff950bf9ba68fb1bdffdf82140c6d0343058e1177a290128db334c7c13c6ec536", 0x81, 0xc6f, 0x0, 0x1, r2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x7, 0x2, r2, &(0x7f0000000480)="871ba8fd57c8e8f9d007c06a84165563ee30588f6cd93bf698e589d954b708552fec22629d355344c3486b213a4dda221346abfbe1ff117d9e58c704e31ea11cead2ea81a70d36c2480d67686a8715ef1ccbf5e1ddcc5ee540c37ceef13799cfdea96c49c6a8f9bfd4c4a7cc753cf5eefea3f5707645fe58e7d9d2cea542b48f90b52d6219528186f0d1f54c223e78f4e9a948e38dcaba5ba15d6ce290cd0288e7eea14024455f61d1e6c5241c", 0xad, 0xe3f, 0x0, 0x2, r5}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f00000019c0)="070be6aede5f9f8bfd6c68684e71c7fb427e10e5ca572fd79b4489a2add77a6686eb6ca5752058ce3b5ae4bc68b2d87dcc4d9d7574155bc753c73be31178d715baadca7792e38bca01d3417f6de40e6b1b6727784fe907c6cb7eaaaac3e4c5ad463c0927a81ef4693de11f8a9d948430407f26acfa3712fe648ae01549b512aab6a3e033d15ff8e426f5a1d7092b44d74716e1091803ff212383bffa6b57358cd21c96c04d521c09ce691f90d92bae62515babfbcf6439792fdc281b5a633e36aa12a6e3f827ee4783558a5003b2a2ed27b70f9a73796d561b3f6d3a9bc737192fef0c4b6c12955341", 0xe9, 0x39, 0x0, 0x3, r6}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x8, 0x8000, r7, &(0x7f0000001e40)="7e524d10e157372fb0c5737b45575dc05dd9c25c7dd4d3da96e54662e39a80cc6f14402eb6170333d14990662f52fcc505c13bf61c06a7cbe83437b9b8ec66284039c7626c3be5bea2fe0d21a4a5fc21cd95f1f059bc539da4d8a0fc35cbdc6a84f41f9246c4571e34cf9b25a74fb492d5a232debce46cb8d188c657892b9996b5ed731186fc4a74f94c952fb8e212b1f8df5bfd241dc855293c07", 0x9b, 0x6, 0x0, 0x3, r2}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x7, 0x570c, r8, &(0x7f0000001f80)="bd1d33c2a8538589", 0x8, 0x80000000, 0x0, 0x0, r1}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0xbfd, r0, &(0x7f0000002000)="6f0ae2dbc7a3cfa37e3bc45185fa1ddd4a7c49bf86a177c1b5f9553d27178db05ea0067681b1114bcd4d4f3ff6edc7e27b899bd46be5a9c75db3cdc771da60888fbe58e9b943c04af1678363f80bcc04c936adbb52a2b16a2889cc1e4c0ad45bbd6f046616826986e7383ef28489785d5c73664ef5b2b8ffdca4cefbaec9e7a097699cf9b66ee3327cfb695f6af6add29a0628d453a03d23dd4699ec2bb4f7017f81e31834ad5ec9d978f54f9e314f3c051a", 0xb2, 0x100000000, 0x0, 0x1}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x6, 0x4, r9, &(0x7f0000002100)="b2b59ff29ca4670ede3bbf29edf5e531026e1c26d20dfec463d901417794435571b01010a31b7af6e766b913cb419f6c085bb76d689dc2f8596054b9e7a0f2f0bf39a291b7a562dff3f2e21be021cd6b464d3039759e41463533f849a842207474cb", 0x62, 0x7, 0x0, 0x3, r10}, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x6, 0x3, r11, &(0x7f0000002200)="2f2ea094017005debc9d1168e2eaa59dea696192a0a4be103fd5ebe67751", 0x1e, 0x4, 0x0, 0x3}]) 02:23:32 executing program 1: socketpair(0x21, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000000c0)={0x5, 0x48, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='macvlan1\x00') fsetxattr(r0, &(0x7f0000000140)=@random={'btrfs.', '\\}][,%),@-!&@+.(\x00'}, &(0x7f0000000180)='\x00', 0x1, 0x1) write$9p(0xffffffffffffffff, &(0x7f00000001c0)="14baaacb3ff716c6c29140c00835a1e272568d7d3c9bff7ac2f073b382b87adf5100ffee1692520975fc2058d284645da2cc1562af58c4c6a0f57f549854bfe126449c3571f50b2b3e643bb8caa2b06a7c9feb232dcd32b8d0e157af643f773ead1980136bbf1d284f85ff4d574640000a802c0197f02e9d694dcb53adb95811ce80603c575c1626eac4f202525f7bd0a79f82ebfebcec433483163e8022c258b06afffa9c5603040dafaef5e7c60b9a85e5ed2ff4c1e3428b6a989b4940d9d9030fb594959eddbcecf62beeaf965263dc424da9e42df78015c0367f3b8d4b514b", 0xe1) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000300)={0xf7, 0x28, '\x00', 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$setpipe(r0, 0x407, 0x7) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000340)={0x2, 0xe9, "0640e1bfc748803bdee04e2ba7a9466520bddf634042069ee717a902f8f4d763b51c45a10919ba904f99799f00cf63dd9510c652da86020c82188109299f5c6a1486c0ee68e271d8d7aebb4107ad36c4f5183a78d4fd63065c858d99c74901983dcade63d894d058499b82734419ecd4e04c25b61d6ac0adb3f8412b58f5b413f48c101342bb889f268165081cc7adefcefb99ffcb1504d54b3c8f4a9fb804b823c26cb156aad5af94bee38ca34f4a4aca956e9da285370a4a8275d287931749aa9a592aa4ac61107c9b1170181d407c20b54f6b4ba0936d1a05c2226df17a884ceed88bedf96fe022"}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0x0, 0x5, 0x7, 0x8}, {0x100, 0x2, 0x2, 0x2e6}]}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x9000200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = fork() r5 = syz_open_dev$hiddev(&(0x7f0000000600), 0x7, 0x286480) kcmp(r4, 0xffffffffffffffff, 0x5, r5, r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) capset(&(0x7f0000000680)={0x20071026, r4}, &(0x7f00000006c0)={0x182, 0x9, 0x7f, 0xfffffffe, 0x8f4b, 0x8}) fork() fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000700), &(0x7f0000000740)={'U+', 0xe94}, 0x16, 0x0) 02:23:32 executing program 2: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x800, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0x1ca3) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000001480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000200)={0x1228, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xe5c, 0x8, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ef4e17d9d85ea5975b565fffeee37ef1945c1b30fab94432235397524cc04083"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5c09b6021d46a122d33d448399d296373a0af527837701c9a250be4a95dca986"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8d4}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010102}}, @WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}, {0x9f4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ALLOWEDIPS={0x430, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x554, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x7fffffff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0dde3359213657e434936c8db41b9d65a5bd9fe091efbbc42b96276c6c67c939"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x101, @local, 0x89}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x85d}}]}, {0x178, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x174, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0af4d2ca6172efd17bb0df6d2100b4e75b99d6f1050f09d02bd8ac2c3c7e889f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fc7caeb70df5b4c2a18b1fb585de6fee17bf9b3a74ceebcf31b3d3290292791d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x37c, 0x8, 0x0, 0x1, [{0x378, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f3977b425cef79bfca2b56b0b91ffa54fbe201d65827c32aeb2c375f05856d9a"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2d0, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x1f}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @empty, 0xffffffe0}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x1228}, 0x1, 0x0, 0x0, 0x4000041}, 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f00000014c0), 0x6e, &(0x7f0000001680)=[{&(0x7f0000001540)=""/142, 0x8e}, {&(0x7f0000001600)=""/105, 0x69}], 0x2, &(0x7f00000016c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x90}}], 0x1, 0x0, &(0x7f00000017c0)={0x77359400}) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000001800)={r2}) r12 = pidfd_getfd(r8, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r12, 0x40a85321, &(0x7f0000002a40)={{0x1, 0x1f}, 'port0\x00', 0xc, 0x10, 0xe6, 0x1, 0x8, 0x2, 0x1ff, 0x0, 0x5, 0x1}) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002b00)='./binderfs2/custom1\x00', 0x2, 0x0) openat(r5, &(0x7f0000002b40)='./file0\x00', 0x400000, 0x2) r14 = signalfd4(r5, &(0x7f0000002b80)={[0x400]}, 0x8, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002bc0)='./binderfs2/custom1\x00', 0x1800, 0x0) r15 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/class/mdio_bus', 0x20a00, 0x4) r16 = syz_mount_image$iso9660(&(0x7f0000002c40), &(0x7f0000002c80)='./file0\x00', 0x1, 0x1, &(0x7f0000002d40)=[{&(0x7f0000002cc0)="ee6d2eae7b792a1b654bac4417d8276d032d30f4c0f874c500e01dd619bee1c1cf644bf34ab064b34b6da8872c9fc5ff4f9d83b6ce6bfb268a4c6b585b4bad2ff845be511d743f15f4", 0x49, 0x9}], 0x218030, &(0x7f0000002d80)={[{@check_relaxed}, {@map_off}, {@hide}, {@uid={'uid', 0x3d, r10}}], [{@pcr={'pcr', 0x3d, 0xa}}, {@uid_lt={'uid<', r11}}, {@smackfsroot={'smackfsroot', 0x3d, '\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000040)=""/248, 0xf8}, {&(0x7f0000000140)=""/48, 0x30}], 0x3, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x118}}], 0x1, 0x40012113, &(0x7f0000000380)={r0, r1+60000000}) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, 0xfffffffffffffffe, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r7, {r2, r12}}, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e21, 0x8, 0x4e20, 0x0, 0x0, 0xa0, 0x80, 0x5c, 0x0, r13}, {0x6f496284, 0x0, 0x8, 0x4, 0x1, 0x1ee, 0x7, 0x64447f41}, {0x6274, 0x1f, 0xb63, 0x40}, 0x20, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0xfffff29d, 0x2b}, 0x2, @in6=@local, 0x34ff, 0x3, 0x0, 0x3f, 0x101, 0x1, 0xfffffff7}}, 0xe8) accept4$inet(r10, &(0x7f0000000500)={0x2, 0x0, @broadcast}, &(0x7f0000000540)=0x10, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000006c0)={r14, 0x1, 0x6, @remote}, 0x10) r15 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x100000, 0x0) execveat(r15, &(0x7f0000000740)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000780)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000007c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000800)='-%@\x00', &(0x7f0000000840)='\xff\xff'], &(0x7f0000000900)=[&(0x7f00000008c0)='\xec\x00'], 0x100) pwritev(r3, &(0x7f0000000dc0)=[{&(0x7f0000000940)="ab32dda7b49cc902f3ff7a80478551b4e89112f06a06a6138f0df21a4f4d4f7af7f78519e6bb640ff0e3fcda5e51d506fc19eb422f374c6f07201470676d1ae1ae9dbdbbb443ad0f676fab542068eeba05bf87a3800d27a45d2ccd8e44f27f5c595989abfdeddeb5583ce52de0c8acfcfe83377780749f4228a88bd541a5734678fcf23b5d5a92c679dba39861b0744abaf39fc155e0148c72d0fe55d6a18b8ebf5d6efbdde91863ed2bc8666a61f789f98614f68b749fba660e219309c37cb60be6b0a3efc7bcb7bd26c2", 0xcb}, {&(0x7f0000000a40)="f21dd4654b979801b120627e562200ca889a814832567aa6db236a6df9fbbbd7bf1f4916b40b4f726a43957a7442a9928ae80426b530481183bbf965290324fce0af0d1197998e680732fb57c5bd47a683cad6dde47838d8164e66da5c2c6f0d3f0db32fdfc831e5d7e011ec599f465924fd55e6d47ac909305aa997c9d0d0fd3af995b3ed84b6061ab8d9d04cd7c908069b8fdef879513fbded3412bce28074cc219b557ca904160b49c648e5906918aeaf38a6b573fbdd8247b1a1e14d4080e67ae1c523", 0xc5}, {&(0x7f0000000b40)="f839708b07a63d5171ef3f3dd319a06f480256af9672d292647b86f687820c7f202aa903d02802ad4504805f2e5ca92ebe8a43eb34f0c3a1ddd6edb77bbbd3886d7a61d805427e319014d88eae0f5442141541b4fc3a3db6ccb8c8f234acd7e087b8840d1df241d91cd06c5551b8e6ffd38573afb50fe6a18a3dd71960", 0x7d}, {&(0x7f0000000bc0)="b08ae15bad92ed60aa7c59655f147403c6147b888985936744d5", 0x1a}, {&(0x7f0000000c00)="c503bcf7f77da9c89ae4639a313540bc6cafd313c4c4ea7dd93e9c6b0a71acf01a54c41a12bad048ea3519c9e52c725ba2217f090eb75451945d1abdee2da2cf6380f7534cfb262c0c2fcfefc418216e63646826fc2cc32243e23f1eaac923e9e4ab484c8968c61248bb5b6295189e80d821318d5fa81be0270f2b0c77aec7e05327c814a52f243ddb6451eebed410a28470eb3479668e30b1f1aeaa4388b8d6aed14970e633cfc1759636e8", 0xac}, {&(0x7f0000000cc0)="f2d916654fe755057066f2f37c4b08774f04ef69ce86e54009d3dcc9448b1536ed1296f04375e34c74885439631556814cdd2c85ba39949442bed36258962488bd4f8a0dd16db1a3f60b58df7d7fe2a5fdf81525232993d2aa894f1c01c61e9193276cdfe0626576a48471a383e348ea4b0bde1916a83f392d266cc9846f3026dc382bd87f1377e3d36ce715c8d7f6c30ce90a28b104657d12993ae0e494cc111a083c9646ba2758539b196fdca2f3f8e9a0493c4938e88663689c063d73919e9db2eedca3f6213197e245f554f749052337de3cea6630f5f3a93015c69b56", 0xdf}], 0x6, 0x84, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000ec0)={'syztnl2\x00', &(0x7f0000000e40)={'ip6gre0\x00', r14, 0x4, 0xff, 0x1, 0x3000, 0x52, @dev={0xfe, 0x80, '\x00', 0xf4}, @mcast1, 0x1, 0x20, 0xf484}}) setsockopt$inet6_mreq(r11, 0x29, 0x15, &(0x7f0000000f00)={@empty, r16}, 0x14) openat(r15, &(0x7f0000000f40)='./file0\x00', 0x48a800, 0x40) r17 = syz_mount_image$msdos(&(0x7f0000000f80), &(0x7f0000000fc0)='./file1\x00', 0x9, 0x4, &(0x7f0000001200)=[{&(0x7f0000001000)="d078d71dc4348dc363eff337ffb4a111e2b06498735d000d22655fa2050811ae1f81b9f27609ee5dc66a1cccfb0fdb816aa4a744b6e84aa2bb828951c3ee03f33d25", 0x42, 0x5}, {&(0x7f0000001080)="e3f8368d3ff68bab82b51d0fc27861bfe48f01d9e8492806d321d71ad8ddf8e99a5dd85d5812c9689ccedea8e46d48db5284bad8c5db91836a2eb8b888dc9b4a7457182d53ff19db24212ae6c631817ba9666625e0dec69c4b34ae3e7bd143cde73e1b3d48060b24407a59f727e0dd", 0x6f, 0x8}, {&(0x7f0000001100)="fccd5d94a3ba09b020a5e763e9b185a8ea00a766d45b4b6a7bb0e40abe20c1a3ca708576ceb7c5eb331e9bb31c76208d2be546e075", 0x35, 0xff}, {&(0x7f0000001140)="4a1174c83a4feda710f9d100387852c20346d4d463a044fca596f239087365db8298e9fc2ebb43b289064047508bcb6b8a7742d5fbbae5caf51c65419ad603e2c4e6d245768eb26d68edaf1fcd1cc431a882cf05582d46566fa0580ac27e12a669e2ea839422ff5a58fb61e7224c2c08165bdac6a4860fb3bdcfff2a807da3ceb24f5bcf8cd3ad1a924b9e3dcffbb5cf9f613138c49cc19d6ed094875132a749", 0xa0, 0xd79}], 0x840, &(0x7f0000001280)={[{@dots}, {@fat=@sys_immutable}, {@fat=@check_strict}, {}, {@dots}, {@dots}, {@fat=@errors_remount}], [{@pcr={'pcr', 0x3d, 0xf}}, {@dont_appraise}, {@subj_user}, {@dont_hash}]}) write$binfmt_elf32(r17, &(0x7f0000001340)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0xe2, 0x3, 0x20, 0x6, 0x2, 0x0, 0x8, 0x252, 0x38, 0x90, 0x1, 0x3a, 0x20, 0x2, 0xd4a, 0x9, 0xa25}, [{0x7, 0x7fffffff, 0x2, 0x10001, 0x6, 0x8, 0x4, 0xd6}, {0x5, 0x9, 0x7, 0x6, 0xfffffff9, 0x40, 0x3, 0xe0}], "19c47a5c7f96fc18a11a9669464d79b2a934b90077d18a9564350621c720bfa3d3939f574284c6a7ce203f778088bfe7402b8994", ['\x00', '\x00']}, 0x2ac) r18 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001600), 0x480e00, 0x0) r19 = openat$random(0xffffffffffffff9c, &(0x7f0000001640), 0x3cd102, 0x0) ioctl$LOOP_CHANGE_FD(r18, 0x4c06, r19) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f00000018c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x84, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8804}, 0x604c044) 02:23:32 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) recvfrom(r0, &(0x7f0000000000)=""/238, 0xee, 0x40010101, &(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x1}}, 0x80) openat(r0, &(0x7f0000000180)='./file0\x00', 0x305000, 0x101) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x408500, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80000001) r2 = syz_io_uring_complete(0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6b8, 0x9}}, './file0\x00'}) ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f00000002c0)={0x12e, 0x3f}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000300)={'gre0\x00', {0x2, 0x0, @initdev}}) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='trusted.overlay.opaque\x00', &(0x7f00000003c0)='gre0\x00', 0x5, 0x3) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff}, 0x80000) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000440), &(0x7f0000000480)={'U-', 0x7fff}, 0x16, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@empty}}, &(0x7f0000000c80)=0xe8) r9 = getgid() fcntl$getownex(r1, 0x10, &(0x7f0000000cc0)={0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000e80)={&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000540)="8bb31b1a3ae4ac417e2647cdd4120f923749d3f342fffb00f011c0d1f6b7e1b2f8052eba1e42e69a4552b867f0441689d5993c94dbe6befb2621f73f658a2244bf68895bc7620baa7eb38f7e4c8e0b11c061951ffcfdd7c130409a8ddb6786bbc4d2f0ba3737050b43c329ecdc896adf9b4df8ac0bddffa1721f27249cba1d960d8229bacea8cf74c13ee033a09ff2c0", 0x90}, {&(0x7f0000000600)="483942352e8c545872bd21d77bc121e2d516ffa159b170dd7a4e9a66a5dbc4fb8bfdb32ec2f3a122f64371753f4dac945a1575adf24e6b109093c4d3ad7d1c4cff51b06203772cd270ad89bf1871b012c1fbed7870ada5d14a1d8ac2635babe64a6e03ab9ea01af43124db8ed6d7a1a13fe5eaf8e35a6c32c1cb96b728ddb152130297e30319fd3a4f7a8e32ef70ea90614368f8b983469319a7041f386bbaa990a6cbc06088e2309d672357cf0fe2a617589a177e46e8d484056a11c5be983b5a295b2054ac3147d8960ba41e2a45ba7453c4d316eb42269edb2b4a50b249c6c03cdee47208bc53553cda9e02bf09515b0bf6e32f8681bef473f0fb24", 0xfd}, {&(0x7f0000000700)="9cf49680ff994d0a2ee2316c5cc1e11f9298a77f8796201fbd7aaa2a3462037abcd142048e0eb67d84d211905a26c3a7981a09aab71288ab5a6eac23827dfeb0267e632766a20d0b314fcaa3cfbc0256e5f2562ecc10b8cdbb1760676dd7a7effd817fcc9f5815d88172640ea87dcd98d54c3d695571fbcc0d49c33a6d878ae9c4424f59695579c89d41e8f7fb", 0x8d}, {&(0x7f00000007c0)="ac387d090feee7a1eb1dbf52b5355c4ed70d7555b95e27a9a81b9608653062c23706b4fb9caf93fc3f3cdd92c599f83b8c589a7e05b4ba7dfec102fb9c78dab3753fd69d9e7af3ff1beaa59ddc68fd38fc744fc4c327ac131d55bdde4255e103e40222782ac4c02444995363749cfc9d2d41c9f109517dc1247e9635bb8c217355fe0040feb228cb56bced422cbe56001c907068afc730aefb240165ee0752beb1f3d74e475137a25a0d3df02ca71e6fb3761aaa1dd63aac47158b433104a6b97ecf4dd8e8a58341abd0428b7f", 0xcd}, {&(0x7f00000008c0)="90272884ba20682a8bddeedb288fba7c06fd22d87e0f3590261cd90ae96c795996887aff5cf793f10f7fbe03871a1be4fe39f042a8d5660a5c621495741870f21e5d9b81803cc1574e74", 0x4a}, {&(0x7f0000000940)="66481d49c485e6025f3071c733def9631017ad303ab1529cb7a3c5211bcbb36a673a372176517dd872e67c4895782ad94dcaedb60d22dab79cb5437aa91d950dc6f85e7c656d09470abac5ba2175f64afcff72aab0c382000cf55e8c67f12373564313f6c7594837f22502c78f905bf353c87b9cb11f54ed30f9016261610c6c7278cb54e0648654f1edcf8a266e511837cd12fa8fd8495604a58ddf34ac3faf35f87a7ba9594a309e952f203810afda499243ad154f4d7135afb123dd3d9e4c61404c", 0xc3}, {&(0x7f0000000a40)="af1bdb3f26a53507233d2c09764e4802b1e6358dba6337ad3330ad1411739f333111e4a3ed60bba3418086ca4262626157e5b5e097592705e452766e55e5758b6791390a7c6faedc4aaf6a55459fc991243e1737b1e42b42867731a9ecf96da307c39783b10fe455383bf450ff7a70d0bad3523a84bd318c744ecb1b7725331632c99e3da16039fcd3cb6a14cf6bf1ba26686fb363e0502ada26acbf37785eab60319409349a69", 0xa7}], 0x7, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}], 0x40, 0x44004}, 0x20000040) 02:23:32 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x301040, 0x20) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0000}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x14}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x4000880) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000740)={r3, 0x6, 0x0, 0x1}) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x200}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffa}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xab08, 0x8, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x4c]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80000}, 0x81) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/net\x00') ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000cc0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x74, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ac7e9eb050607a1eb54f504c82bef1f0"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "6356623d1d559f410a8cc7f7c13d4c67"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "89f43c14b1625215f396afc9116ed983"}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x8005) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000e80)={0x3, 0x5, @start={r2, 0x1, "c7048f63600727cb496bdd8c571595ccc00d8b900e397b083ece016a33943fca438fe603da25b2aa29e47041ee786360e20081e3c9d8a68c66ffcc203899cd8f8d15fefb34888544cce656a9caf4726317ba227c8f58ea5feaa584da90e660a1db2283c5e8c759b6723dd76c8a7727c8aa69592d16118acbf40c0b4f18857d9d465d4e6fc9c25679a7343a193b22c20c7995641652d784728cd13ac526617a2a11d8b3c2e17c14a531f4f24ea91b8e6fd0698db8ff94b04faa4bf16b30892cd69c9041ed2d75154f1b660a19c6cb6943ed534ed01577d6604590bf60bfcee3c6a2d8869d69135325e4802e117ba85481e60505fa655a38d36feb1972f424d3b108622190e6f4936008fea86d0435cb52b42fb0ef673db8af76eea01bf0eac4a4f0fb3f5d7fba14c4add4ef403fd28e1c518196047ed90484a0c747d98fa680b4b0866fbcf2cdccf93235019f19e4ee5047197fd32d9dd168298dd048a6e7880111fd415fe16811de0b249a974296565c0ef8a371ebc753266a9243026f01b1fea7f41193a452e9accf44a54ed8bed2216520b624370fee387367e5f115eff3dc2096a5a7ed917765238a442427858cb740e1d5a8441976b97037af908d17c30d1b3a17bc077c392b0e39dcda4e93d99bebc0532b3de7cfc2cdb9165b7a41ea1e923ea0d08e0767c8afbe070ab968cbee222f571f390b5db7b847d6914f99fdf4c3f192cdf12698843b7f9cb4aca71f6e3afc9f35414946a9539fae727e720f4e7b43a81cf6366aaaa9644a413257a6fbc20ecc77e464e70157effaef2f05fa244ec7311b10e16ceb97cfd41b834b85735f653f4e20c9047553039c9811a693b555d77cdfdb54681ad40719285d3cb3480f9c8e50985c714fad0c8ece2c82609aebf4fc7e979e727c0bdbd3327bd36193fe28d8db6c4bdf4fac9b64dee8a64d5f36641cebadbd54bb1fc910afe588530a9643123400d7f0610aa865d40a872667d9c4a6bd6f9dcfe8f748a43a07b4e06e7775672dce92472e381a88f460cc3020f939301ced946177f607d3527d3d4d63b4f654f3a8137af399ea842e6b3392ddc6d6f1389c4eb18facab9580addd08cd5d50a99261a27643d02debcc3dd97ebbfe7beaccab569862105eb9753de7b5fda2c913be93cd97b03b68c40a10151d48d348ab368a378acb81850175978387e12a54c1967648b5dbd7b142c93f56fc8dd680f62643b42a0d74fc70a0cedcf947e505c6e31d9304df087422091321e0a3434ef90d0aad211e249c4ccea0ba9fb21c82f97b579c22124352b563d8fb88121a6ee4caa838451185ad3b7ec2d6f79578b53749887e257e48ef11b7966e896408d8a2f49c12b6fb86a53fa86a61e335607d359285c2c4397b3b4a133bb9b3876288090c80b73e1772de6861b232ed9640af5d682cdccdd4dedbf9e84170196ef9", "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"}, [0x80000000, 0x1, 0x6, 0x401, 0x9, 0x80000001, 0x8d3e, 0xa3, 0x1, 0x6, 0x0, 0xfffffffffffffffb, 0x6, 0x1, 0x5, 0x821, 0x1, 0x8001, 0xec2, 0xdaad, 0xe872, 0x540a, 0x1, 0xfffffffffffffffe, 0xffffffff, 0x4e3a, 0x7ff, 0x8, 0xffffffffffffffff, 0x0, 0x3, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x9, 0x9, 0x1, 0x2, 0x2, 0x8, 0x3, 0xff, 0x8, 0x3, 0xf1c, 0x3, 0x5, 0x4, 0x0, 0xffff, 0x100000001, 0x735, 0x200, 0xfff, 0x5, 0x3f, 0x0, 0x1, 0x2, 0x2, 0xb24, 0x8001]}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f00000022c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002280)={&(0x7f0000001900)={0x964, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x243d7f9, 0x4c}}}}, [@NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x3}, {0x6, 0x7}, {0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x5}, {0x5, 0x6}, {0x4, 0x2}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x4, 0x3}, {0x1, 0x3}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x7, 0x2}, {0x2, 0x6}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x7}, {0x6, 0x3}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x7}, {0x5, 0x6}, {0x2, 0x3}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0xa}, {0x1}, {0x0, 0x6}, {0x1, 0x3}, {0x7, 0x8}, {0x4, 0x7}, {0x5, 0x4}, {0x0, 0x8}, {0x5}, {0x7}, {0x3, 0x1}, {0x5, 0x3}, {0x3, 0xa}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x8}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x2}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x78, 0x6, 0x6, 0xd56, 0x945f, 0x6c9b, 0x8]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x60, 0x30, 0x5, 0x1, 0xb, 0x24, 0x6a, 0x16, 0x5, 0x30, 0x18, 0x6c, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x2, 0x2, 0x7, 0x0, 0x800, 0x0, 0xfe00]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff, 0x7, 0x1, 0x18ce, 0xf7, 0x101, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x2, 0xc, 0x569df8b1ed6e3dd, 0x4, 0x12, 0x6c, 0x1, 0x48, 0x24]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x3]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x2, 0x1, 0x2, 0x15, 0x6c, 0x1, 0x1b, 0x3, 0x24, 0xc, 0x60, 0x1, 0x6c, 0x4, 0x9, 0x9, 0x30, 0x30, 0x78, 0x2, 0x2, 0x6, 0x2, 0x24, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7fff, 0x5, 0x7f, 0xfffb, 0x9f, 0x7978, 0xfffd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x40, 0x8, 0x4, 0x1ffc, 0x9, 0xb8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x16, 0x3d, 0xc, 0x24, 0x3, 0x6c, 0x4, 0xb, 0x16, 0x12, 0x30, 0x60, 0x2, 0xc, 0xc, 0x60, 0x48, 0x6, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x3, 0x6c, 0x30, 0x42, 0x48, 0x1b, 0x30, 0xc, 0x48]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x1}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x6, 0x7}, {0x2, 0xa}, {0x6}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0x1}, {0x6, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x2}, {0x0, 0x2}, {0x2, 0x8}, {0x3, 0x8}, {0x6, 0x5}, {0x4, 0x9}, {0x7, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x3, 0x4}, {0x3, 0x5}, {0x7, 0x1}, {0x6, 0xa}, {0x3, 0xa}, {0x3}, {0x5, 0x5}, {0x6}, {0x5, 0x3}, {0x6, 0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x0, 0x6}, {0x6, 0x9}, {0x2, 0x8}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0x2}, {0x4}, {0x1, 0x4}, {0x1, 0x3}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x7, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x1}, {0x4, 0x4}, {0x6, 0x5}, {0x0, 0x3}, {0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x0, 0x401, 0xbaa, 0x7, 0x1, 0x81, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x3, 0x12, 0x6, 0x60, 0x3, 0x9, 0x22, 0x24, 0xebc0598a1a29057b, 0x16, 0xc, 0xb, 0x18, 0x36, 0x36, 0x9, 0xb, 0x16, 0x16, 0x6c, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x3, 0x200, 0x2, 0x401e, 0x31ed, 0x7]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x36, 0x1, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x16, 0x72, 0x6c, 0x30, 0x2, 0x0, 0x16, 0xb, 0x6, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x360, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf, 0x80, 0x62, 0x9, 0x4, 0xff, 0x6]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0xd, 0xb, 0x2, 0x6, 0xb, 0x12, 0x5, 0x60, 0x12, 0x5, 0x24, 0x5, 0x30, 0x12, 0x3, 0x48, 0x16, 0x6c]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7, 0xfa, 0x100, 0x4c5, 0x401, 0x3ff, 0x120]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfff, 0x7, 0x400, 0x9, 0x7ff, 0x6a, 0x38]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x0, 0x1b}, {0x7, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x6}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x7}, {0x0, 0x1}, {0x5}, {0x1, 0x6}, {0x7, 0x9}, {0x7, 0x3}, {0x0, 0x6}, {0x3, 0x4}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0xa}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x1}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x4, 0xa}, {0x2, 0x4}, {0x4, 0x5}, {0x7, 0x3}, {0x0, 0x8}, {0x5}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x5}, {0x4, 0x6}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x400, 0x7f, 0xcc, 0x3ff, 0x401, 0x2]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x522, 0x33, 0x8, 0x5, 0x2, 0x3f, 0x1, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x9, 0xbc5, 0x400, 0x101, 0x4, 0x1f]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x1}, {0x5, 0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x1}, {0x6}, {0x6, 0xa}, {0x7}, {0x2, 0x2}, {0x6, 0x9}, {0x4, 0x6}, {0x0, 0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x2}, {0x2, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x5}, {}, {0x1, 0x3}, {0x7, 0x2}, {0x3, 0xa}, {0x1, 0x1}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x3}, {0x5, 0x5}, {0x6, 0x2}, {0x7, 0x4}, {0x6, 0xa}, {0x5, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1004, 0x6, 0x7ff, 0xffe0, 0x7fff, 0x81, 0x9]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x4}, {0x3, 0x4}, {0x2, 0x4}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x1}, {0x0, 0x4}, {0x3, 0x9}, {0x3}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x9}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x3}, {0x5, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {0x5, 0x4}, {0x1}, {0x6, 0x7}, {0x6, 0xa}, {0x1, 0x1}, {0x6, 0x2}, {0x3, 0x2}, {0x0, 0x5}, {0x2, 0x8}, {0x4, 0x7}, {0x4}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {}, {0x7, 0x5}, {0x0, 0x6}, {0x5, 0xa}, {0x1}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x7}, {0x6}, {0x4, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x2, 0x4}, {0x1, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x5, 0x7}, {0x6, 0x1}, {0x7, 0x3}, {0x4, 0x6}, {0x5, 0x1}, {0x6, 0x2}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x5, 0x9}, {0x7, 0x5}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x9}, {0x6, 0x9}, {0x6, 0x1}, {0x3, 0x5}, {0x2, 0x3}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0xa}, {0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x7, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x4}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x7}, {0x1, 0x2}, {0x5, 0x8}, {0x5, 0x6}, {0x4, 0xa}, {0x0, 0x1}, {0x7, 0x9}, {0x4, 0x9}, {0x4, 0x6}, {0x2, 0x4}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x3}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x3}, {0x5, 0xa}, {0x5}, {0x6, 0x6}, {0x5}, {0x3, 0x2}, {0x6, 0x3}, {0x5, 0x6}, {0x2, 0x8}, {0x2, 0x3}, {0x3, 0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x7}, {0x2, 0x7}, {0x5, 0x7}, {0x3, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x8}, {0x6, 0x9}, {0x4, 0x9}]}]}, @NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x5}, {0x4, 0x5}, {0x0, 0x7}, {0x3, 0x7}, {0x1, 0x1}, {0x3}, {0x6, 0x7}, {0x1, 0x7}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0xc, 0x2, 0xc, 0x1, 0x1b, 0x36, 0x1, 0x3, 0x1b, 0x1, 0x3, 0x48, 0x6, 0x48, 0x6c, 0x36, 0x1b, 0x36, 0x9, 0x1, 0xb, 0xb, 0x6c, 0x60, 0x6c, 0x2, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x8}, {0x1, 0xa}, {0x6}, {0x7, 0x8}, {0x2, 0x2}, {0x4, 0x6}, {0x7, 0x4}, {0x7, 0xa}, {0x2, 0xa}, {0x5, 0x7}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x7, 0xa}, {0x5, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x7, 0x9}, {0x3}, {0x7}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x4, 0x6}, {0x7, 0x9}, {0x4, 0xa}, {0x4, 0x7}, {0x2, 0x6}, {}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0x2}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x4, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x9}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x8}, {0x5, 0x4}, {0x5, 0x3}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5b32, 0x6, 0x8000, 0x51, 0x7, 0x7, 0x5, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x2}, {0x3, 0x6}, {0x2}, {0x7, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0x2}, {0x4, 0x5}, {0x6, 0x5}, {0x3}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x7}, {0x5, 0x5}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x4}, {0x7, 0xa}, {0x7}, {0x2, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f18, 0x5, 0x2, 0x6, 0x1, 0x8, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x1000, 0x3, 0x5, 0x0, 0x101, 0x9]}}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x3}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x4, 0xa}, {0x7, 0xa}, {0x0, 0x5}, {}, {0x0, 0x2}, {0x6, 0x1}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x1}, {0x1, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0xc, 0x1b, 0x1b, 0x28, 0x5, 0x36, 0x35, 0x6c, 0x36, 0x16, 0x30, 0x12, 0x6c, 0x3, 0x0, 0x4, 0x24, 0x60, 0x2, 0x31, 0x6, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x1}, {0x3, 0x5}, {0x6, 0x9}, {0x1, 0x7}, {0x7, 0x4}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x1}, {0x5}, {0x1}, {0x2, 0x3}, {0x4, 0x7}, {0x5}, {0x5, 0x8}, {0x4, 0x1}, {0x4, 0x4}, {0x3}, {0x0, 0x9}, {}, {0x7, 0x9}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x2}, {0x2, 0x8}, {0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x7, 0x2}, {0x7, 0x4}, {0x4, 0x7}, {0x6}, {0x7, 0x3}, {0x4, 0x1}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x4}, {}, {0x6, 0x2}, {0x6, 0x5}, {0x7, 0x1}, {0x4, 0x5}, {0x7, 0x6}, {0x3, 0x7}, {0x4, 0x4}, {0x4, 0x6}, {0x7}, {0x1}, {0x4, 0x8}, {}, {0x0, 0x1}, {0x5, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x5, 0x2}, {0x6, 0x9}, {0x3, 0xa}, {0x2, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x3, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x2, 0x7}, {0x6}, {0x0, 0x1}, {0x2, 0x6}, {0x0, 0x5}, {0x5, 0x5}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x19c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d8, 0x8, 0x0, 0x4, 0x0, 0xfc00, 0x505d, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x2, 0x4a7, 0x1000, 0x3, 0x20, 0x1, 0x3]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x9}, {0x2}, {0x2, 0x2}, {0x3, 0xa}, {0x3, 0x8}, {0x0, 0x17}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x4}, {0x0, 0x7}, {0x6, 0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0x8}, {0x6, 0x1}, {0x7, 0x7}, {0x2, 0x9}, {0x5, 0x5}, {0x4, 0x8}, {0x3, 0x2}, {0x6, 0x1}, {0x3, 0xa}, {0x4, 0x8}, {0x0, 0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0xa}, {0x3}, {0x7, 0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x7, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x2}, {0x6, 0x4}, {0x7, 0x6}, {0x4}, {0x7, 0x3}, {0x5, 0x5}, {0x2, 0x8}, {0x1}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x4, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x4}, {0x6, 0xa}, {0x6, 0x2}, {0x0, 0x5}, {0x3, 0x6}, {0x3, 0x3}, {0x7, 0x9}, {0x3}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x9}, {0x2, 0x3}, {0x7}, {0x2, 0x4}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xecca, 0x5, 0xc85c, 0x71, 0x1, 0x6, 0x3, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x1, 0x861, 0x48, 0x2, 0x3ff, 0x0, 0x5]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x8}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x3}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x4}, {}, {0x5, 0x9}, {0x1, 0x5}, {0x2, 0xa}, {0x5, 0x6}, {0x4, 0x4}, {0x2, 0x4}, {0x5, 0x1}, {0x1}, {}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x4, 0x6}, {0x3, 0x7}, {0x5, 0x1}, {0x5, 0x3}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x6, 0x0, 0x400, 0x3, 0x9, 0x7]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x4}, {}, {0x4, 0x8}, {0x5, 0x8}, {0x1, 0x6}, {0x7, 0x6}, {0x4, 0x9}, {0x0, 0x4}, {0x7, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x7, 0x8}, {0x1, 0x9}, {0x2, 0x2}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x6, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0x5}, {0x2, 0x2}, {0x2, 0x5}, {0x4, 0x8}, {0x3, 0x6}, {0x7, 0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x3}, {0x5, 0xa}, {0x1, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x3, 0x7}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x7}, {0x5, 0x7}, {0x6, 0xa}, {0x2}, {0x6, 0xa}, {0x1, 0x1}, {0x5, 0x4}, {0x2, 0x3}, {0x6, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x2}, {0x4, 0x8}, {0x5, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0x9}, {0x2, 0xa}, {0x4, 0x8}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x5, 0x8}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x3, 0x4}, {0x5, 0x8}, {0x0, 0x2}, {0x6}, {0x4, 0x9}, {0x0, 0x8}, {0x2}, {0x0, 0x9}, {0x5, 0x8}, {0x6}, {0x1}, {0x2, 0x1}, {0x0, 0x4}, {0x6, 0x1}, {0x3, 0x2}, {0x0, 0x1}, {0x7, 0x9}, {0x2, 0x8}, {0x7, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x7, 0x8}, {0x6, 0x8}, {0x5}, {0x7, 0x1}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0x4}, {0x2, 0x5}, {0x6, 0x5}, {0x4, 0xa}, {0x4, 0x1}, {0x0, 0x4}, {0x6, 0x9}, {0x6, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x100, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x8}, {0x4, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x6, 0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x4, 0x6}, {0x7, 0x3}, {0x2, 0x5}, {0x0, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x6}, {0x6, 0x7}, {0x7, 0x2}, {0x3, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {}, {0x1, 0x3}, {0x2, 0x8}, {0x0, 0x7}, {0x7, 0x9}, {0x4, 0x3}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x6}, {0x4}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0xa}, {0x2}, {0x5, 0xa}, {0x2, 0x4}, {0x6, 0x6}, {0x7, 0xa}, {0x4, 0x2}, {0x6, 0xa}, {0x7, 0x2}, {0x5, 0x1}, {}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0xa}, {0x3, 0x4}, {0x5, 0x2}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x3}, {0x5}, {0x7, 0x8}, {0x5, 0x8}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x9}, {0x4, 0x2}, {0x3, 0xa}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0xa}, {0x1, 0x8}, {0x4, 0x8}, {0x6, 0x9}, {0x2, 0x1}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x6, 0x6}, {0x4, 0x9}, {0x5, 0x5}, {0x5, 0x9}, {0x3, 0x2}, {0x6, 0x2}, {0x4, 0x4}, {0x6, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x7}, {0x2, 0x8}, {0x2}, {0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x4, 0x2}, {0x5, 0xa}, {0x3, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {0x2}, {0x3, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x5, 0xa}, {0x3, 0x7}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x9}, {0x6, 0x9}, {0x3}, {0x1, 0x9}, {0x6}, {0x1, 0x4}, {0x6, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x3}, {0x4, 0x8}, {0x4, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x1000, 0x400, 0x7ff, 0x38e8, 0xf7a9, 0x4]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x30, 0x1, 0x36, 0x16, 0x24, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x6, 0x1000, 0xffff, 0x9, 0x800, 0x7ff]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x5}, {0x4, 0x3}, {0x7, 0x2}, {0x6, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x2, 0x6}, {0x3, 0x8}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x8}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x2, 0x7}, {0x3, 0x9}, {0x2, 0xa}, {0x2, 0x8}, {0x1, 0x3}, {0x2, 0x8}, {0x7, 0x3}, {0x3, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x143b, 0x6531, 0x20, 0x2, 0x5, 0x0, 0x4]}}]}, @NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x8001, 0x8, 0xfaf, 0x5, 0x4, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x7}, {0x6, 0x4}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x2, 0x7}, {0x7, 0x5}, {0x0, 0x9}, {0x5, 0x4}, {0x5}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x1}, {0x7, 0x2}, {0x3, 0x8}, {0x5, 0x5}, {0x6, 0xa}, {0x7, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x1, 0x9}, {0x7}, {0x3, 0x5}, {0x0, 0x1}, {}, {0x1, 0x3}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x1}, {0x0, 0x9}, {0x3, 0x8}, {0x6, 0x4}, {0x3, 0x5}, {0x2}, {0x0, 0x3}, {0x6, 0x7}, {0x4, 0x7}, {0x1, 0x1}, {0x1, 0xa}, {0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x6, 0x1}, {0x4}, {0x3, 0x2}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0x9}, {}, {0x5, 0xa}, {0x3, 0x1}, {0x1, 0x2}, {0x1, 0x2}, {0x5, 0x7}, {0x1, 0x8}, {0x7, 0x7}, {0x7, 0x2}, {0x1, 0x7}, {0x4}, {0x6, 0x9}, {0x1, 0x4}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x1, 0x5}, {0x2}, {0x4}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x6}, {0x7, 0x3}, {0x5, 0x2}, {0x2, 0x7}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x6}, {0x2, 0xa}, {0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x2, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x1c}, {0x2, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0x5}, {0x6, 0x6}, {0x3, 0x4}, {0x1, 0xa}, {}, {0x2, 0xa}, {0x0, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x6}, {0x5, 0x1}, {0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x0, 0x3}, {0x7, 0x3}, {0x3, 0x7}, {0x5, 0x1}, {0x2, 0x7}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x1}, {0x2}, {0x0, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x6, 0x6}, {0x7, 0xa}, {0x6, 0x1}, {0x3, 0x1}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x2}, {0x6, 0x5}, {0x0, 0x3}, {0x6, 0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x1, 0xb, 0x12, 0x2, 0x24, 0x3, 0x6c, 0x30, 0x1, 0x5, 0x0, 0x24, 0x5, 0x16, 0x24, 0x55, 0xc, 0x60, 0x3, 0xc, 0x1, 0x18, 0xb, 0x6, 0x5, 0x3, 0x1b]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x964}, 0x1, 0x0, 0x0, 0x10}, 0x4000011) r6 = syz_open_dev$vcsa(&(0x7f0000002300), 0x4, 0x80000) readv(r6, &(0x7f0000003700)=[{&(0x7f0000002340)=""/200, 0xc8}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/160, 0xa0}, {&(0x7f0000003500)=""/202, 0xca}, {&(0x7f0000003600)=""/113, 0x71}, {&(0x7f0000003680)=""/119, 0x77}], 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000003780)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000003ec0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003800)={0x678, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x31}}}}, [@NL80211_ATTR_TID_CONFIG={0x364, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x719}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x67ec}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x20c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x3, 0x84, 0x6, 0x7ff, 0x8, 0x7]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x6, 0x18, 0x16, 0x9, 0x18, 0x3d, 0x68, 0x5, 0x1b, 0x1, 0x2, 0x60, 0x1, 0x24, 0x6c, 0xc, 0x18, 0x16, 0x3, 0x1, 0x4, 0x2, 0x30, 0x1, 0xc, 0xc, 0x6, 0x4, 0x8]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x9, 0x16, 0xb, 0x60, 0x1, 0x2, 0x48, 0xc, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x1, 0x3, 0x2, 0x3, 0x100, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0x3, 0x12, 0x5, 0x30, 0xb, 0x6, 0x16, 0xb, 0x0, 0x16, 0x1, 0x0, 0x1b, 0x4, 0x26, 0xb, 0x1, 0x1, 0x12, 0x16, 0xe, 0x1b, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcd8, 0x7, 0x7, 0x0, 0x3, 0xff, 0x4b8c, 0x81]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x7f, 0x8000, 0x5, 0x9, 0x8000, 0x0, 0x1]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x3}, {0x6}, {0x4, 0x1}, {0x1, 0x5}, {0x3, 0x1}, {0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x5, 0x3}, {0x3, 0xa}, {0x7, 0x8}, {0x4, 0xa}, {0x1}, {0x1, 0x6}, {0x6, 0x4}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0x7}, {0x7, 0x7}, {0x4, 0xa}, {0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x6}, {0x3, 0x5}, {0x7}, {0x2, 0x2}, {0x2, 0xa}]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0x7, 0x2}, {0x2, 0x5}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x5}, {0x5, 0x6}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x8}, {0x6, 0x2}, {0x1, 0x7}, {0x3, 0x7}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x5}, {0x2, 0x8}, {0x7}, {0x6, 0x7}, {0x5, 0x8}, {0x1, 0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x2, 0x8}, {0x1}, {0x0, 0x7}, {0x4, 0x6}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x1b, 0xd3fd035155d450a, 0x12]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x0, 0x30, 0x24, 0x33, 0x9, 0x6, 0x36, 0x15, 0x16, 0x3, 0x60, 0x30, 0x24, 0x60, 0xc, 0x0, 0xc, 0xc, 0x6c, 0x1, 0xc, 0xc, 0x16]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x9, 0x3, 0x16, 0x12, 0x2, 0x24, 0x36, 0x9, 0x12, 0x5, 0x4, 0xb, 0xb, 0x24, 0x60, 0x48, 0x16, 0x1, 0x48, 0x48, 0x12, 0x36, 0x1b]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x4}, {0x1, 0x7}, {0x2, 0x4}, {0x6, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x9}, {}, {0x6, 0x9}, {0x7, 0x2}, {0x4, 0x6}, {0x2, 0xa}, {0x3, 0x7}, {0x6, 0x6}, {0x7, 0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x3, 0x9}, {0x4, 0x8}, {0x2, 0x8}, {0x0, 0x1}, {0x7, 0x8}, {0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0x3}, {0x5}, {0x6, 0x2}, {0x1, 0x4}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x4}, {0x2, 0x3}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0xc, 0x6, 0x16, 0x2, 0x1, 0x1b, 0x4, 0x36, 0x6, 0x4, 0x6, 0x30, 0x1, 0x12, 0xc, 0x5, 0x5, 0x48, 0x18]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x4}, {0x6, 0x8}, {0x3, 0x3}, {0x2, 0x7}, {}, {0x6}, {0x5}, {0x3, 0x8}, {0x6, 0x1}, {0x4, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x4}, {0x6, 0xa}, {0x7, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0x9}, {0x5, 0x6}, {0x7, 0x8}, {0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x4}, {0x4, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x4, 0x3}, {0x6, 0x5}, {0x5, 0xa}, {0x1, 0x9}, {0x6, 0x8}, {0x6, 0x7}, {0x3, 0x6}, {0x7}, {0x3, 0xa}, {0x1, 0x2}, {0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x3, 0x9}, {0x7, 0xa}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x5, 0x7}, {0x0, 0x9}, {}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x12, 0x9, 0xb3570b53f324cb82, 0x6c, 0x3, 0x30, 0x3, 0x2, 0x16, 0xb, 0x1b, 0x18, 0x5, 0x1, 0xb, 0x36, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x97}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x2e4, 0x11d, 0x0, 0x1, [{0x150, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x70}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x13c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x9}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x8}, {0x6, 0x8}, {0x3, 0x8}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x5, 0x5}, {}, {0x7}, {0x3, 0x8}, {0x3, 0x6}, {0x6, 0xa}, {0x6, 0x7}, {0x5, 0x5}, {0x0, 0x6}, {0x2, 0x4}, {0x2, 0x4}, {0x1, 0x1}, {0x1, 0x6}, {0x2}, {0x1, 0x9}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5df4, 0x4, 0x7fff, 0x9, 0x1, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1000, 0x101, 0x9335, 0x2, 0x5, 0x0, 0x3f]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0xc, 0x16, 0x3, 0x24, 0x36, 0x24, 0x1b, 0x5, 0x6, 0x60, 0x30, 0xb, 0x2, 0x60, 0x24, 0x6c, 0x16, 0x6c, 0x0, 0x6c, 0x18, 0xb, 0x1, 0x9, 0x48]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x18, 0x12, 0x1, 0x4, 0x48, 0x16, 0xb, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x12, 0x36, 0x60, 0x1b, 0x4, 0x4b, 0xb, 0x6c, 0x3, 0x5, 0xc, 0x16, 0x30, 0x30, 0x1, 0x30, 0xc, 0x18, 0x2, 0x4e, 0x38, 0x24, 0x5, 0x1b, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x3f, 0x2, 0x2, 0x7, 0x8, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x4, 0xa}, {0x3, 0x1}, {0x4}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x3, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x3, 0x7}, {0x4, 0xa}, {0x5, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x3, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0x4}, {0x6, 0x1}, {0x0, 0xa}, {0x4, 0xa}, {0x7, 0x1}, {0x1, 0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x7, 0x6}, {0x1}, {0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0x3}, {0x1}, {0x0, 0xa}, {0x7}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x5, 0xa}, {0x6, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x40, 0x0, 0xff, 0x5916, 0x7f, 0x50c1, 0x2]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x1}, {0x5, 0xa}, {0x2, 0x1}, {0x3, 0x7}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0x7}, {0x7, 0x8}, {0x5, 0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x9}, {0x7, 0x6}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x9}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0x8}, {}, {0x2, 0x1}, {0x5, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbd}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xcec}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xaf}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x20, 0x101, 0x1, 0x7, 0x8, 0x9, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x6c, 0x5, 0x18, 0x4, 0xc, 0x2, 0x6c, 0x5, 0x1b, 0x6d, 0x48, 0x18, 0x12, 0x16, 0xb, 0x24, 0x9, 0x1, 0x36, 0x6c, 0x3, 0x50, 0x60]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x6, 0x3, 0x63, 0x16, 0x2, 0x60, 0x4, 0x12, 0x16, 0x1, 0x12, 0x12, 0x0, 0xb, 0x36, 0x60, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x6, 0x60, 0x30, 0x2, 0x1d, 0x16, 0x30, 0x6, 0x30, 0x4, 0x1b, 0x9, 0x30, 0x6c, 0x12, 0x3, 0x30, 0x0, 0x18, 0x30, 0x6, 0x2, 0x9, 0x5]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x678}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003f00)={'ipvlan0\x00'}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000004000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000004180)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004140)={&(0x7f0000004080)={0xb4, r1, 0x500, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x46}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x19}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x32}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040880}, 0x10) [ 68.314609] audit: type=1400 audit(1664245412.253:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:23:32 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x281}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9eb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x118, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x2c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1700}}, {0x1c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x17, 0x2, "1e0e630f45497be5c5a71c87ea540d2a59af50"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc8, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x951}}, {0xac, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa7, 0x1, "78620b5511c095a45dff0713e9b61dc4298045a56ca00acf88c62afdae2508b396444958fc12d9b893f925e051267decd877df5c1be226a2d4d3a6546c4894516a050d6e63399c8162764a3b6bb1e7ab53fff17da0951eb47258c214daafab24736be65157a79c18523a19d1bcabbe47ba4017724d75f155d17da338224d7e05e26730412b1f30d326df8458a3af65c3a29b3161812bf1e3e5719029e2210522eee7de"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8000}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4040}, 0x804) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) close_range(r1, r2, 0x2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) r4 = fcntl$getown(r2, 0x9) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2d, 0xc0, 0xff, 0xff, 0x0, 0x100000000, 0x8000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000540)}, 0x804, 0x400, 0x51d96795, 0x5, 0xc5, 0x2, 0x9, 0x0, 0xf52c55ee, 0x0, 0x100000000}, r4, 0xe, r5, 0x2) r6 = syz_mount_image$msdos(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x7, 0x6, &(0x7f0000000940)=[{&(0x7f00000006c0)="94ab559004ba974351ec58b9958e6ef0693839245305502e364ac5a7e962675ea2011f1e79e49d6cc3afda3f83d882a229dc0abea14920825dc84e554f273bbf9f57e741739b7b071159968daf524ec240ff9e4e1f612481994044d234d00f1c2301f3d1d59738b33cfe09fc29ebb4cd8942b39285558c4a2254a365677b9ea5f9f2a68ff6e9d59704ca81dcacc31f657f59078fa1e5607d3cc7b59df53d5398f4c53b51515531fb5a15d0", 0xab, 0xfffffffffffffffd}, {&(0x7f0000000780)="f8c03038a8b6ad3c8ebdfcc011a41401e3034e7c484441ba5acb91fea17c78eb165f438187de1251fa82d301", 0x2c, 0xffffffffffffffff}, {&(0x7f00000007c0)="8a412dbc62408f21c1f43088d9f1e50a03069efcafd148674a8379eb7d1078f7bc86fe461cd8d3b1e0ab4d98857fbbdf76ecb2dc22ded1f1ac831c9dbe694e90b61dbdc48754d10a", 0x48, 0x100000001}, {&(0x7f0000000840)="b870be7ffb541c05b888e947e575878b4d7d5f41c8666a7b0f21ee3d9f1a6c06e880b3b84ab81033fd74d4030a2fe2fdee7d15cc8ae74d9dd05b2980c7a543955362b124d40dcdd6973071af3c165d831cd46a", 0x53, 0x9}, {&(0x7f00000008c0)="2417ebcd27084e0d2131", 0xa, 0x5}, {&(0x7f0000000900)="e688309bbb4f7ed2a38b0c3e66a4e79789f458797714b3", 0x17, 0x3}], 0xc0014, &(0x7f0000000a00)={[{@dots}, {@dots}], [{@fsmagic={'fsmagic', 0x3d, 0x7fffffff}}, {@audit}]}) close(r6) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/binder-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000a80)={0x20000000}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x80}}}}, [@NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24008080) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x8c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) pwritev(r8, &(0x7f0000001e40)=[{&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000001d80)="29ace97a88b09e489ceec2cac28798b36565d73bae6e39b619651340ac04e4efcc7d014309073ad6ca7d45fc050ccbcc6fadfcaef10865f6367a4ebb73ff6d12ece784c669f3b40a28cdbec414af28e70a39b3aa8165fa52d044a229a79404d0", 0x60}, {&(0x7f0000001e00)="6c428ad43411717b71223511fc9a29c344687cfa364f", 0x16}], 0x3, 0x7, 0x8) read$char_usb(r1, &(0x7f0000001e80)=""/186, 0xba) [ 69.570609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.574124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.575395] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.578752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.580499] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.582925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.587866] Bluetooth: hci0: HCI_REQ-0x0c1a [ 69.656376] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.657792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.658831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.661788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.668310] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.669837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.671488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.676353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.680925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.692023] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.693558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.695196] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.696392] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.698353] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.700771] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.701857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.703101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.704568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.707946] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.709246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.710544] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.714481] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.715728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.717036] Bluetooth: hci4: HCI_REQ-0x0c1a [ 69.718394] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.721994] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.724588] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.730277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.731539] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.734875] Bluetooth: hci3: HCI_REQ-0x0c1a [ 69.737220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.738450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.740156] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 69.742200] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 69.743460] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.747348] Bluetooth: hci2: HCI_REQ-0x0c1a [ 69.747462] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.758470] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 69.772163] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.775932] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.778852] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.782875] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.599437] Bluetooth: hci0: command 0x0409 tx timeout [ 71.662812] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 71.725838] Bluetooth: hci4: command 0x0409 tx timeout [ 71.789824] Bluetooth: hci7: command 0x0409 tx timeout [ 71.790821] Bluetooth: hci2: command 0x0409 tx timeout [ 71.791531] Bluetooth: hci3: command 0x0409 tx timeout [ 71.853854] Bluetooth: hci6: command 0x0409 tx timeout [ 71.855331] Bluetooth: hci5: command 0x0409 tx timeout [ 73.646213] Bluetooth: hci0: command 0x041b tx timeout [ 73.773742] Bluetooth: hci4: command 0x041b tx timeout [ 73.840075] Bluetooth: hci3: command 0x041b tx timeout [ 73.840712] Bluetooth: hci2: command 0x041b tx timeout [ 73.841265] Bluetooth: hci7: command 0x041b tx timeout [ 73.901840] Bluetooth: hci5: command 0x041b tx timeout [ 73.902401] Bluetooth: hci6: command 0x041b tx timeout [ 75.693779] Bluetooth: hci0: command 0x040f tx timeout [ 75.822806] Bluetooth: hci4: command 0x040f tx timeout [ 75.886830] Bluetooth: hci7: command 0x040f tx timeout [ 75.886902] Bluetooth: hci2: command 0x040f tx timeout [ 75.887408] Bluetooth: hci3: command 0x040f tx timeout [ 75.950730] Bluetooth: hci6: command 0x040f tx timeout [ 75.951300] Bluetooth: hci5: command 0x040f tx timeout [ 77.037732] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 77.742706] Bluetooth: hci0: command 0x0419 tx timeout [ 77.869776] Bluetooth: hci4: command 0x0419 tx timeout [ 77.933723] Bluetooth: hci3: command 0x0419 tx timeout [ 77.934283] Bluetooth: hci2: command 0x0419 tx timeout [ 77.934981] Bluetooth: hci7: command 0x0419 tx timeout [ 77.997730] Bluetooth: hci5: command 0x0419 tx timeout [ 77.999095] Bluetooth: hci6: command 0x0419 tx timeout [ 79.980043] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.989811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.006743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.015027] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.017556] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.019419] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.026338] Bluetooth: hci1: HCI_REQ-0x0c1a [ 82.094747] Bluetooth: hci1: command 0x0409 tx timeout [ 84.141722] Bluetooth: hci1: command 0x041b tx timeout [ 86.189781] Bluetooth: hci1: command 0x040f tx timeout [ 88.237770] Bluetooth: hci1: command 0x0419 tx timeout [ 132.179110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.180305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.184071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.186850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.189543] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 132.190392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.195986] Bluetooth: hci4: HCI_REQ-0x0c1a [ 132.219068] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 132.219806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.221182] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 132.221754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.225516] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 132.226949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.247077] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.248592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 132.249292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 132.254743] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 132.255247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.256953] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.265681] Bluetooth: hci6: HCI_REQ-0x0c1a [ 132.266859] Bluetooth: hci5: HCI_REQ-0x0c1a [ 133.677924] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 133.997825] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 134.125726] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 134.189754] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 134.253759] Bluetooth: hci4: command 0x0409 tx timeout [ 134.317763] Bluetooth: hci5: command 0x0409 tx timeout [ 134.318349] Bluetooth: hci6: command 0x0409 tx timeout [ 136.177476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.179366] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.180168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.185262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.187314] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 136.188092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.192393] Bluetooth: hci0: HCI_REQ-0x0c1a [ 136.301736] Bluetooth: hci4: command 0x041b tx timeout [ 136.365692] Bluetooth: hci6: command 0x041b tx timeout [ 136.365738] Bluetooth: hci5: command 0x041b tx timeout [ 136.831169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.834537] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.835337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.837201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.838157] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 136.838955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.841681] Bluetooth: hci2: HCI_REQ-0x0c1a [ 138.221787] Bluetooth: hci0: command 0x0409 tx timeout [ 138.350881] Bluetooth: hci4: command 0x040f tx timeout [ 138.413710] Bluetooth: hci5: command 0x040f tx timeout [ 138.414724] Bluetooth: hci6: command 0x040f tx timeout [ 138.503524] audit: type=1400 audit(1664245482.442:7): avc: denied { open } for pid=3560 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 138.511082] loop6: detected capacity change from 0 to 264192 [ 138.534968] loop6: detected capacity change from 0 to 264192 [ 138.553940] I/O error, dev loop6, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 02:24:42 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={r1, 0x101}) r2 = clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) process_vm_readv(r3, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/252, 0xfc}, {&(0x7f0000000140)}, {&(0x7f0000000700)=""/121, 0x79}, {&(0x7f0000000840)=""/171, 0xab}, {0x0}, {&(0x7f0000000900)=""/209, 0xd1}], 0x6, &(0x7f0000000400), 0x0, 0x0) clone3(&(0x7f0000000480)={0x100008100, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x3}, &(0x7f00000003c0)=""/147, 0x93, &(0x7f0000000240)=""/28, &(0x7f0000000300)=[r2, 0x0, r3], 0x3}, 0x58) r4 = syz_open_procfs(r2, &(0x7f00000017c0)='net/bnep\x00') r5 = clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) process_vm_readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/252, 0xfc}, {&(0x7f0000000140)}, {&(0x7f0000000700)=""/121, 0x79}, {&(0x7f0000000840)=""/171, 0xab}, {0x0}, {&(0x7f0000000900)=""/209, 0xd1}], 0x6, &(0x7f0000000400), 0x0, 0x0) clone3(&(0x7f0000000480)={0x100008100, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x3}, &(0x7f00000003c0)=""/147, 0x93, &(0x7f0000000240)=""/28, &(0x7f0000000300)=[r5, 0x0, r6], 0x3}, 0x58) recvmsg$unix(r4, &(0x7f0000002f80)={&(0x7f00000018c0), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000001940)=""/249, 0xf9}, {&(0x7f0000001a40)=""/240, 0xf0}, {&(0x7f0000001b40)=""/63, 0x3f}, {&(0x7f0000001b80)=""/219, 0xdb}, {&(0x7f0000001c80)=""/24, 0x18}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/85, 0x55}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0x8, &(0x7f0000002ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x40) perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x5, 0x1, 0x0, 0x3f, 0x0, 0x3ff, 0x44210, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000001800), 0x5}, 0x400, 0x32000000, 0x5, 0x3, 0x10000, 0x8, 0x8001, 0x0, 0x30, 0x0, 0x1fb}, r5, 0xf, r7, 0x9) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000180)={{r1, 0x4, 0x20, 0x7fffffff, 0x3ff, 0x8, 0x8, 0x28000000, 0x2d, 0x0, 0x1f, 0xff, 0x8c4, 0x7, 0x57}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f, 0x500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x50d, 0x3201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x90, 0x81, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x800, 0x3, 0x1, {0x22, 0xcf9}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xeb, 0x4, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x9, 0x40}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x9, 0x4, 0x5, 0x20, 0x3}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0xd, &(0x7f0000000100)=@string={0xd, 0x3, "f7c64cc7528140df186b0b"}}]}) [ 138.668078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.677902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.861754] Bluetooth: hci2: command 0x0409 tx timeout [ 139.181821] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 139.183226] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 139.193458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.218587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 02:24:43 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x7, 0x5, 0x1d, 0x8, "c0db93bd579ffb40c1bacb7e014c09d87ba46ee7244b8aeff152b7546057009ee8a3e9c6ea8442f941a49f46b74e4ec66bedcd89b10012d9af7c6c6eaf856af9", "469896bf6bf35adea3cc7c65c940d8a749d6c0b0c149163dcce16f14e5e7fa41", [0x200, 0x40000]}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, &(0x7f0000000000)=0xd, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x6, 0x7f, 0x400}, {0x982b, 0x3, 0x4, 0x4}, {0x9, 0x7f, 0x7b, 0x1}, {0x2, 0x3, 0x1, 0x401}, {0x8, 0x3, 0xd1, 0x6}]}) 02:24:43 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) fcntl$dupfd(r1, 0x0, r0) [ 139.766971] audit: type=1400 audit(1664245483.705:8): avc: denied { kernel } for pid=3625 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 139.768825] audit: type=1400 audit(1664245483.707:9): avc: denied { tracepoint } for pid=3625 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 139.793477] ------------[ cut here ]------------ [ 139.793536] [ 139.793545] ====================================================== [ 139.793554] WARNING: possible circular locking dependency detected [ 139.793565] 6.0.0-rc6-next-20220923 #1 Not tainted [ 139.793581] ------------------------------------------------------ [ 139.793590] syz-executor.6/3626 is trying to acquire lock: [ 139.793607] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 139.793704] [ 139.793704] but task is already holding lock: [ 139.793711] ffff88800fa68420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 139.793786] [ 139.793786] which lock already depends on the new lock. [ 139.793786] [ 139.793794] [ 139.793794] the existing dependency chain (in reverse order) is: [ 139.793803] [ 139.793803] -> #3 (&ctx->lock){....}-{2:2}: [ 139.793841] _raw_spin_lock+0x2a/0x40 [ 139.793891] __perf_event_task_sched_out+0x53b/0x18d0 [ 139.793928] __schedule+0xedd/0x2470 [ 139.793967] schedule+0xda/0x1b0 [ 139.794005] exit_to_user_mode_prepare+0x114/0x1a0 [ 139.794036] syscall_exit_to_user_mode+0x19/0x40 [ 139.794071] do_syscall_64+0x48/0x90 [ 139.794118] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 139.794153] [ 139.794153] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 139.794191] _raw_spin_lock_nested+0x30/0x40 [ 139.794239] raw_spin_rq_lock_nested+0x1e/0x30 [ 139.794274] task_fork_fair+0x63/0x4d0 [ 139.794319] sched_cgroup_fork+0x3d0/0x540 [ 139.794358] copy_process+0x4183/0x6e20 [ 139.794387] kernel_clone+0xe7/0x890 [ 139.794413] user_mode_thread+0xad/0xf0 [ 139.794442] rest_init+0x24/0x250 [ 139.794474] arch_call_rest_init+0xf/0x14 [ 139.794520] start_kernel+0x4c1/0x4e6 [ 139.794563] secondary_startup_64_no_verify+0xe0/0xeb [ 139.794601] [ 139.794601] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 139.794639] _raw_spin_lock_irqsave+0x39/0x60 [ 139.794698] try_to_wake_up+0xab/0x1930 [ 139.794735] up+0x75/0xb0 [ 139.794773] __up_console_sem+0x6e/0x80 [ 139.794816] console_unlock+0x46a/0x590 [ 139.794860] vt_ioctl+0x2822/0x2ca0 [ 139.794895] tty_ioctl+0x7c4/0x1700 [ 139.794928] __x64_sys_ioctl+0x19a/0x210 [ 139.794970] do_syscall_64+0x3b/0x90 [ 139.795016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 139.795051] [ 139.795051] -> #0 ((console_sem).lock){....}-{2:2}: [ 139.795090] __lock_acquire+0x2a02/0x5e70 [ 139.795136] lock_acquire+0x1a2/0x530 [ 139.795180] _raw_spin_lock_irqsave+0x39/0x60 [ 139.795232] down_trylock+0xe/0x70 [ 139.795273] __down_trylock_console_sem+0x3b/0xd0 [ 139.795318] vprintk_emit+0x16b/0x560 [ 139.795364] vprintk+0x84/0xa0 [ 139.795409] _printk+0xba/0xf1 [ 139.795438] report_bug.cold+0x72/0xab [ 139.795482] handle_bug+0x3c/0x70 [ 139.795528] exc_invalid_op+0x14/0x50 [ 139.795575] asm_exc_invalid_op+0x16/0x20 [ 139.795606] group_sched_out.part.0+0x2c7/0x460 [ 139.795636] ctx_sched_out+0x8f1/0xc10 [ 139.795664] __perf_event_task_sched_out+0x6d0/0x18d0 [ 139.795699] __schedule+0xedd/0x2470 [ 139.795735] schedule+0xda/0x1b0 [ 139.795771] exit_to_user_mode_prepare+0x114/0x1a0 [ 139.795802] syscall_exit_to_user_mode+0x19/0x40 [ 139.795836] do_syscall_64+0x48/0x90 [ 139.795881] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 139.795916] [ 139.795916] other info that might help us debug this: [ 139.795916] [ 139.795923] Chain exists of: [ 139.795923] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 139.795923] [ 139.795967] Possible unsafe locking scenario: [ 139.795967] [ 139.795973] CPU0 CPU1 [ 139.795979] ---- ---- [ 139.795985] lock(&ctx->lock); [ 139.796001] lock(&rq->__lock); [ 139.796019] lock(&ctx->lock); [ 139.796037] lock((console_sem).lock); [ 139.796052] [ 139.796052] *** DEADLOCK *** [ 139.796052] [ 139.796057] 2 locks held by syz-executor.6/3626: [ 139.796075] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 139.796148] #1: ffff88800fa68420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 139.796223] [ 139.796223] stack backtrace: [ 139.796230] CPU: 0 PID: 3626 Comm: syz-executor.6 Not tainted 6.0.0-rc6-next-20220923 #1 [ 139.796265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 139.796287] Call Trace: [ 139.796296] [ 139.796306] dump_stack_lvl+0x8b/0xb3 [ 139.796358] check_noncircular+0x263/0x2e0 [ 139.796406] ? format_decode+0x26c/0xb50 [ 139.796453] ? print_circular_bug+0x450/0x450 [ 139.796503] ? enable_ptr_key_workfn+0x20/0x20 [ 139.796552] ? format_decode+0x26c/0xb50 [ 139.796596] ? memcpy+0x39/0x60 [ 139.796626] ? vsnprintf+0x4ba/0x1600 [ 139.796677] __lock_acquire+0x2a02/0x5e70 [ 139.796740] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 139.796806] lock_acquire+0x1a2/0x530 [ 139.796854] ? down_trylock+0xe/0x70 [ 139.796953] ? lock_release+0x750/0x750 [ 139.797015] ? vprintk+0x84/0xa0 [ 139.797067] _raw_spin_lock_irqsave+0x39/0x60 [ 139.797124] ? down_trylock+0xe/0x70 [ 139.797172] down_trylock+0xe/0x70 [ 139.797218] ? vprintk+0x84/0xa0 [ 139.797266] __down_trylock_console_sem+0x3b/0xd0 [ 139.797310] vprintk_emit+0x16b/0x560 [ 139.797364] vprintk+0x84/0xa0 [ 139.797414] _printk+0xba/0xf1 [ 139.797446] ? record_print_text.cold+0x16/0x16 [ 139.797492] ? report_bug.cold+0x66/0xab [ 139.797545] ? group_sched_out.part.0+0x2c7/0x460 [ 139.797580] report_bug.cold+0x72/0xab [ 139.797635] handle_bug+0x3c/0x70 [ 139.797685] exc_invalid_op+0x14/0x50 [ 139.797738] asm_exc_invalid_op+0x16/0x20 [ 139.797775] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 139.797814] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 139.797847] RSP: 0018:ffff888039cefc48 EFLAGS: 00010006 [ 139.797874] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 139.797896] RDX: ffff8880188dd040 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 139.797918] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 139.797939] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800fa68400 [ 139.797961] R13: ffff88806ce3d140 R14: ffffffff8547d1a0 R15: 0000000000000002 [ 139.797995] ? group_sched_out.part.0+0x2c7/0x460 [ 139.798034] ? group_sched_out.part.0+0x2c7/0x460 [ 139.798072] ctx_sched_out+0x8f1/0xc10 [ 139.798109] __perf_event_task_sched_out+0x6d0/0x18d0 [ 139.798153] ? lock_is_held_type+0xd7/0x130 [ 139.798193] ? __perf_cgroup_move+0x160/0x160 [ 139.798228] ? set_next_entity+0x304/0x550 [ 139.798280] ? update_curr+0x267/0x740 [ 139.798333] ? lock_is_held_type+0xd7/0x130 [ 139.798374] __schedule+0xedd/0x2470 [ 139.798424] ? io_schedule_timeout+0x150/0x150 [ 139.798473] ? rcu_read_lock_sched_held+0x3e/0x80 [ 139.798533] schedule+0xda/0x1b0 [ 139.798577] exit_to_user_mode_prepare+0x114/0x1a0 [ 139.798614] syscall_exit_to_user_mode+0x19/0x40 [ 139.798653] do_syscall_64+0x48/0x90 [ 139.798705] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 139.798744] RIP: 0033:0x7f4010c67b19 [ 139.798769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 139.798801] RSP: 002b:00007f400e1dd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.798834] RAX: 0000000000000001 RBX: 00007f4010d7af68 RCX: 00007f4010c67b19 [ 139.798858] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4010d7af6c [ 139.798880] RBP: 00007f4010d7af60 R08: 000000000000000e R09: 0000000000000000 [ 139.798898] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4010d7af6c [ 139.798916] R13: 00007ffdbae4976f R14: 00007f400e1dd300 R15: 0000000000022000 [ 139.798948] [ 139.945136] WARNING: CPU: 0 PID: 3626 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 139.947479] Modules linked in: [ 139.948063] CPU: 0 PID: 3626 Comm: syz-executor.6 Not tainted 6.0.0-rc6-next-20220923 #1 [ 139.949465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 139.951382] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 139.952351] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 139.960686] RSP: 0018:ffff888039cefc48 EFLAGS: 00010006 [ 139.963481] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 139.967157] RDX: ffff8880188dd040 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 139.970909] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 139.974550] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800fa68400 [ 139.978230] R13: ffff88806ce3d140 R14: ffffffff8547d1a0 R15: 0000000000000002 [ 139.981990] FS: 00007f400e1dd700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 139.986245] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.989379] CR2: 00007f761a340620 CR3: 000000003eb82000 CR4: 0000000000350ef0 [ 139.993259] Call Trace: [ 139.994588] [ 139.995775] ctx_sched_out+0x8f1/0xc10 [ 139.997750] __perf_event_task_sched_out+0x6d0/0x18d0 [ 140.000297] ? lock_is_held_type+0xd7/0x130 [ 140.001981] ? __perf_cgroup_move+0x160/0x160 [ 140.004224] ? set_next_entity+0x304/0x550 [ 140.006349] ? update_curr+0x267/0x740 [ 140.008277] ? lock_is_held_type+0xd7/0x130 [ 140.010479] __schedule+0xedd/0x2470 [ 140.012376] ? io_schedule_timeout+0x150/0x150 [ 140.014721] ? rcu_read_lock_sched_held+0x3e/0x80 [ 140.017145] schedule+0xda/0x1b0 [ 140.018822] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.021360] syscall_exit_to_user_mode+0x19/0x40 [ 140.023759] do_syscall_64+0x48/0x90 [ 140.025686] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.028311] RIP: 0033:0x7f4010c67b19 [ 140.030305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.039698] RSP: 002b:00007f400e1dd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.043380] RAX: 0000000000000001 RBX: 00007f4010d7af68 RCX: 00007f4010c67b19 [ 140.046893] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4010d7af6c [ 140.050451] RBP: 00007f4010d7af60 R08: 000000000000000e R09: 0000000000000000 [ 140.054072] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4010d7af6c [ 140.057660] R13: 00007ffdbae4976f R14: 00007f400e1dd300 R15: 0000000000022000 [ 140.061287] [ 140.062466] irq event stamp: 610 [ 140.064142] hardirqs last enabled at (609): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 140.068811] hardirqs last disabled at (610): [] __schedule+0x1225/0x2470 [ 140.070785] softirqs last enabled at (564): [] __irq_exit_rcu+0x11b/0x180 [ 140.072735] softirqs last disabled at (529): [] __irq_exit_rcu+0x11b/0x180 [ 140.074474] ---[ end trace 0000000000000000 ]--- [ 140.270710] Bluetooth: hci0: command 0x041b tx timeout [ 140.398775] Bluetooth: hci4: command 0x0419 tx timeout [ 140.462689] Bluetooth: hci6: command 0x0419 tx timeout [ 140.462803] Bluetooth: hci5: command 0x0419 tx timeout 02:24:44 executing program 6: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) 02:24:44 executing program 6: syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_for_children\x00') r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002e00)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r0, 0x0, &(0x7f0000002dc0)={&(0x7f00000025c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x5, @multicast1}, 0x1, 0x3, 0x0, 0x1}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002640)="d1e448ecd40eaf99687c6af3317ec6a6a57850994d496ac3a5b998fda1e936bbfdd8e2afc4d787a0a6da88f9f92ad62f5e5044a5b4095dbc2a6014bcb50d9ace494582d5a4795d9b64efad4612e9463f6ab9bcc8418eb760385b2a7560def2039d8a448ccd5aadf9de1a810afaace90b97fd076322f8c3677c4827d68bb285bcb0b6d8", 0x83}, {&(0x7f0000002700)="61013711f9660826e25a36a7a1cd77996f1f647d89bcd9de44e1d99077331f74b59880fbb45145020a05285552f81d36d152f66d4489d31c227a031e0cc9a4ccb327ae0da411ace742eb4aee32a0c16af9c978931bec8ca9d8f97f65b6437b439d5804eb016bf3a92e5df56cf121b5a2521acf823a07257531b883c01b316dd5ee1cd32f4e338d2c15132b3bf1e2071dd0da2b38c7cbdbf57736c19691dad97b2c46b458d2b08e71662710832c3b4ca557490153", 0xb4}, {&(0x7f00000027c0)="0e75221c0ce7205cca2531af4adb8f0206608dc61d59cdce689af1249673cf19a3907d58aacb8b982357ef5d5e59548e4eaa8c37de0017b61ae7ec9fcbe2b7c27b91d6fef8388649f0bab880fe9012776731", 0x52}, {&(0x7f0000002840)="924beba8a1e9c093163646cff2fce3a48436b4791b2768d286bea1dac3ed6b02f52552c59ca600c72e3fc561540269210442a6c30553c8bcfff3b482d9b9deda5de74b4978b0", 0x46}, {&(0x7f00000028c0)="f4b80420825ef475bd83eb295ac6e463ea3b7a03c3381d420ded8801bfbf0c051188cfc4d2e4cc64a5cd81ffbd09f275426ecb878dd567b7fa14e56d83bb3d148451b133e23aad6aa7ce2bda785b82971609573e6f0208071578b28b7810455b18683af1ee1bd804c363664915fa4dc1fdf103f1", 0x74}, {&(0x7f0000002940)="668c000d5330bcdabfce86ed8a31720e092edb7d02026e8e8aa54ee04a35f5a94319d503e7fca9f65cfa3ec409a764198dc4ef3eba8ec627c5dce298aaf027439ded90a6ade51894ba461f11367b87c61b37c4494306d86ed928208c0e5db6a0", 0x60}, {&(0x7f00000029c0)="6cda53839347e79c94de6177af8fc38000be7bc181d228ebae6decff7084263b692a829cf0938aa53a3e8a70b777c19bac4bb0c227957c1b9b5f562a00c2ed56f30b8ed74fa13dc8805bdd53af506181a32081bb735e4a1393d5ec2736c582db9fd3f62b4d7b485e91468aace1315bc6c70d1c915f4fc06b949d7ed16c4d2b11c7f4520c766e24c0e251bed5b84b8359150a906412b14ec29798e75a0cfaba65b68119973454e67322bc7498b991d462ef2926600b0d4cfa9b00b66c63f0114bab582e3b36", 0xc5}, {&(0x7f0000002ac0)="c6160bcb86831c9401499c557ba6eb6ca4ec1a2b9154da6a4687bce15bc918ea58bbc7fc0f63f9b8b5d75c30f424bd4c7f9ffc98e193ea9f5e3b689c4c3ef3ccb00a6707812c05e91c5c38b2dce8d6354720153f77c746dd67ec5e46a43994a37d846be438f7ce16f621aa802c020af2d77c82d00302636a3d960c43d85edb4c0e9743faaf377767721b74605d0e43178b6dc7df49d5a3261e4a", 0x9a}, {&(0x7f0000002b80)="b323ac67953e0d2b796b45e1f29cb22a4030cb384b25640ac97ca53f783c4b065407c58b17fb72472ad1163b21bb366f60aa9ec4a589db18c6390b5ad5c99c6923391d86697db3beb2c83c65738a0b0d76c3b2fab091dc4fb4a5bacf73e464748f5ffe2e7e3b63d60bbf3c2624b4b0d34d64bdd9361914d39cfcce20795ae2b0940f255e9308f33054b841b45c810aa359ba1bdb305927639b64060ce59437f0c3aaaad6b1110aa20f6e68a261aaf726f28cd316e5ff104b9a0109d119062e0ed7269a3fef842fcc3cb68498f6b3860c801c2d4e6dacae81268774c3dc3a3f3a72221c29520449ec3a", 0xe9}], 0x9, &(0x7f0000002d40)=[{0x60, 0x111, 0x0, "e36775fce441c69e07a844aad7f6ece5766e0c55a3e5990ba21b129ed1195395ae9251b4d470638e8d45b5e66b0ac2bbdcdccc6428f1ef3b63e1836fa225e241fc353481c422c9f80bd8ad292b"}], 0x60}, 0x0, 0x20080800}, 0x9) [ 140.909675] Bluetooth: hci2: command 0x041b tx timeout 02:24:44 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket(0x23, 0x5, 0x401) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 02:24:45 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket(0x23, 0x5, 0x401) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 02:24:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) process_vm_readv(r2, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/252, 0xfc}, {&(0x7f0000000140)}, {&(0x7f0000000700)=""/121, 0x79}, {&(0x7f0000000840)=""/171, 0xab}, {0x0}, {&(0x7f0000000900)=""/209, 0xd1}], 0x6, &(0x7f0000000400), 0x0, 0x0) clone3(&(0x7f0000000480)={0x100008100, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x3}, &(0x7f00000003c0)=""/147, 0x93, &(0x7f0000000240)=""/28, &(0x7f0000000300)=[0x0, 0x0, r2], 0x3}, 0x58) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x5, 0x6, 0xb2, 0x0, 0x6, 0x10a2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x180, 0x81, 0x437d, 0x4, 0x7, 0x1f, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xd, r1, 0x3) fallocate(r1, 0x0, 0x0, 0x87ffffc) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r6, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x1}}, './file1\x00'}) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) r7 = fcntl$dupfd(r5, 0x0, r3) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) dup3(r7, r8, 0x80000) [ 142.317727] Bluetooth: hci0: command 0x040f tx timeout [ 142.957671] Bluetooth: hci2: command 0x040f tx timeout [ 144.366697] Bluetooth: hci0: command 0x0419 tx timeout [ 144.877784] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 144.878743] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 145.005734] Bluetooth: hci2: command 0x0419 tx timeout [ 147.480308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.484032] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.489947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.492821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.495629] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.497034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.506503] Bluetooth: hci3: HCI_REQ-0x0c1a [ 147.631367] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.632440] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.633814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.635112] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.636230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.637052] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.639583] Bluetooth: hci7: HCI_REQ-0x0c1a [ 149.549691] Bluetooth: hci3: command 0x0409 tx timeout [ 149.677676] Bluetooth: hci7: command 0x0409 tx timeout VM DIAGNOSIS: 02:24:44 Registers: info registers vcpu 0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff888039cef698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f400e1dd700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f761a340620 CR3=000000003eb82000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f4010d4e7c0 00007f4010d4e7c8 YMM02=0000000000000000 0000000000000000 00007f4010d4e7e0 00007f4010d4e7c0 YMM03=0000000000000000 0000000000000000 00007f4010d4e7c8 00007f4010d4e7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff85b506a4 RBP=ffff88801ba273e0 RSP=ffff88801ba272b8 R8 =ffffffff85e3e972 R9 =ffffffff85e3e976 R10=ffffed1003744e7e R11=000000000003603d R12=ffff88801ba273c9 R13=ffff88801ba273e8 R14=ffff88801ba27388 R15=ffffffff85e3e977 RIP=ffffffff8111a6dc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe6f194d6f4 CR3=000000004085a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 652e29646e616d6d 6f632a282e637069 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 6940202c30783020 2c307830202c6178 YMM14=0000000000000000 0000000000000000 785c27202c273030 785c277b3d347670 YMM15=0000000000000000 0000000000000000 7d7974706d654020 2c276666785c6666