last executing test programs: 3m52.092741054s ago: executing program 1 (id=315): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000000300)) r0 = memfd_create(0x0, 0x3) r1 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x46a402, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 3m50.607681344s ago: executing program 1 (id=319): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010128bd7000fbdbdf251400000008000300", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 3m50.509720256s ago: executing program 32 (id=319): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010128bd7000fbdbdf251400000008000300", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 3m35.355655431s ago: executing program 2 (id=48): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000003ac0)={'wlan0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x32, 0x1, 0xfffffffffffffffb, {0x10, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x4e24, 0x4e21, 0x7}, {0x0, @random="65280be4343c", 0xfffd, 0x80, [0x8]}, @udp_ip4_spec={@multicast2, @empty, 0x4e23, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x3, [0x6, 0x7bf]}, 0xb, 0x5}, 0x1, [0x1]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) dup(r6) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) 3m18.693535991s ago: executing program 2 (id=48): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000003ac0)={'wlan0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x32, 0x1, 0xfffffffffffffffb, {0x10, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x4e24, 0x4e21, 0x7}, {0x0, @random="65280be4343c", 0xfffd, 0x80, [0x8]}, @udp_ip4_spec={@multicast2, @empty, 0x4e23, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x3, [0x6, 0x7bf]}, 0xb, 0x5}, 0x1, [0x1]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) dup(r6) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) 3m16.613059047s ago: executing program 3 (id=393): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x107be4be}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4489c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) 3m6.386955945s ago: executing program 4 (id=405): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init1(0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3, 0x0, 0x10, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000085000000050000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0xc) sendfile(r3, r3, 0x0, 0xc3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000880)={0x4, {{0xa, 0x4e24, 0x9, @private2, 0x4b}}, {{0xa, 0x4e20, 0x401, @empty, 0x6}}}, 0x104) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x70b}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="8492d8fb00bbca503b", 0x9}], 0x1, &(0x7f0000000480)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x10}, 0x40804) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800090000000000000000076600000005000000fcff010029ad0d9cdadc219873797a3100000000"], 0x28}}, 0x20000840) 3m5.528342049s ago: executing program 4 (id=407): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x9, 0x2, 0x9, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$bind(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x24b858, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x14900) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x4c040) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, 0x0) 3m1.109571455s ago: executing program 33 (id=393): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x107be4be}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4489c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) 2m59.933073076s ago: executing program 4 (id=409): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x141002, 0x0) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x4e, &(0x7f0000000080)=[{&(0x7f00000002c0)="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"}, {&(0x7f0000000000)="ff4197226fa75089e5ea52950943714ec95498e670bd5728df7e2ab3cda4418e62885d4e9ae428e93ca97bf235acf82cea521b84b06bd4b74b45f26a6d95676611b491fc745edf37ef033f96787bba0f5bc7e454e18e0fe876708a730741273485fbad4ebd9b8651d847bc9620d0810eae3f74f897ca"}], 0x3}, 0x4040080) 2m59.848753369s ago: executing program 4 (id=410): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000440)={0x2, 'veth1_to_batadv\x00', 0x3}, 0x18) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES16=0x0]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file0', [{0x20, '#! '}, {}], 0xa, "65148ce47ce2de8a7cd73644d637c941ace8e1d604"}, 0x25) msgget$private(0x0, 0x0) 2m57.74824662s ago: executing program 4 (id=411): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x107be4be}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4489c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) 2m50.614531935s ago: executing program 34 (id=406): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x10000, 0x10000, @value}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in=@local, 0x4e1f, 0x0, 0x0, 0x1, 0xa, 0x0, 0x80}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0xd, 0x2, 0x0, 0xb}, 0x0, 0x6e6bc0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x5, 0x0, 0xb3}}, 0xe8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioperm(0x0, 0x2, 0x7e) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05000000003f000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800351a00000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {0xe8d}, @device_b, @device_a, @random="4532bd25fc82", {0x0, 0x1}}, 0x0, 0x2, 0xfffd, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sync_file_range(0xffffffffffffffff, 0x3f, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m48.629214213s ago: executing program 4 (id=413): r0 = socket(0x1f, 0x800, 0x9) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000400)=""/77, 0x328000, 0x1000}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="640d009a955e3fb54fc08e5246d5b22c00", @ANYRES16=r4, @ANYBLOB="310428bd7000ffffffff160000fb00180001801400020500000000000000736c6176655f3100"], 0x2c}}, 0x400c1) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x11) bind$xdp(r2, &(0x7f0000000100), 0x10) syz_emit_ethernet(0x93, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$nmem0(0xffffff9c, 0x0, 0x301040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) r6 = socket$inet6(0xa, 0x5, 0x2) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x80000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x0, 0x5, {0x4}, 0x0, 0x1}) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xfffffffc, @remote, 0x101}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x5, @mcast2, 0x6}, @in6={0xa, 0x4e22, 0xf, @private1, 0x5}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x4, @private1, 0x1000}, @in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x74) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2m33.586232753s ago: executing program 35 (id=413): r0 = socket(0x1f, 0x800, 0x9) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000400)=""/77, 0x328000, 0x1000}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="640d009a955e3fb54fc08e5246d5b22c00", @ANYRES16=r4, @ANYBLOB="310428bd7000ffffffff160000fb00180001801400020500000000000000736c6176655f3100"], 0x2c}}, 0x400c1) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x11) bind$xdp(r2, &(0x7f0000000100), 0x10) syz_emit_ethernet(0x93, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$nmem0(0xffffff9c, 0x0, 0x301040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) r6 = socket$inet6(0xa, 0x5, 0x2) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x80000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x0, 0x5, {0x4}, 0x0, 0x1}) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xfffffffc, @remote, 0x101}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x5, @mcast2, 0x6}, @in6={0xa, 0x4e22, 0xf, @private1, 0x5}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x4, @private1, 0x1000}, @in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x74) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2m29.587088194s ago: executing program 2 (id=48): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000003ac0)={'wlan0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x32, 0x1, 0xfffffffffffffffb, {0x10, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x4e24, 0x4e21, 0x7}, {0x0, @random="65280be4343c", 0xfffd, 0x80, [0x8]}, @udp_ip4_spec={@multicast2, @empty, 0x4e23, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x3, [0x6, 0x7bf]}, 0xb, 0x5}, 0x1, [0x1]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) dup(r6) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) 2m7.608718464s ago: executing program 5 (id=415): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init1(0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3, 0x0, 0x10, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000085000000050000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0xc) sendfile(r3, r3, 0x0, 0xc3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000880)={0x4, {{0xa, 0x4e24, 0x9, @private2, 0x4b}}, {{0xa, 0x4e20, 0x401, @empty, 0x6}}}, 0x104) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x70b}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="8492d8fb00bbca503b", 0x9}], 0x1, &(0x7f0000000480)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x10}, 0x40804) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800090000000000000000076600000005000000fcff010029ad0d9cdadc219873797a3100000000"], 0x28}}, 0x20000840) 2m6.406291761s ago: executing program 5 (id=416): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) userfaultfd(0x801) io_setup(0x8, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) io_submit(0x0, 0x0, &(0x7f0000004540)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x8, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000001c000000f5a534"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r3, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x2}]}]}, 0x30}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m59.86127573s ago: executing program 5 (id=417): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340), &(0x7f0000000180)) r4 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x40045532, &(0x7f0000003f80)=""/4086) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001", @ANYRES32, @ANYBLOB="f8ffffff042004001c002b800800030019000800"], 0x44}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mkdir(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) cachestat(r7, &(0x7f0000000180)={0xffffffffffffffff, 0x80000000}, &(0x7f0000000200), 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r9 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) connect$ax25(r9, &(0x7f0000000440)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'geneve1\x00', 0x0}) sendto$packet(r11, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) read$FUSE(r8, &(0x7f0000006840)={0x2020}, 0x2020) 1m58.503117506s ago: executing program 5 (id=419): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0x8690, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) recvmsg$unix(r5, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000280)=""/199, 0xc7}], 0x1, &(0x7f0000000380)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x40) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) stat(&(0x7f0000004d80)='./cgroup\x00', &(0x7f0000004dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 1m54.348425888s ago: executing program 5 (id=421): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000003ac0)={'wlan0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x32, 0x1, 0xfffffffffffffffb, {0x10, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x4e24, 0x4e21, 0x7}, {0x0, @random="65280be4343c", 0xfffd, 0x80, [0x8]}, @udp_ip4_spec={@multicast2, @empty, 0x4e23, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x3, [0x6, 0x7bf]}, 0xb, 0x5}, 0x1, [0x1]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x7, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x700, 0x3eefb36931c9613a, 0x6, 0xfffff02f}}) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r10 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) 1m54.233966487s ago: executing program 7 (id=414): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x80002, 0x0) ioctl$FIONCLEX(r9, 0x5450) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r10, 0x5412, &(0x7f0000000640)=0x13) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETA(r10, 0x5406, &(0x7f0000000080)={0x2, 0xfa, 0xff92, 0x200a, 0x34, "000401600c00"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) 1m46.166064156s ago: executing program 5 (id=423): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x107be4be}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4489c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) 1m44.734056081s ago: executing program 7 (id=426): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m43.878425785s ago: executing program 7 (id=427): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080010000040"]) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) close(r10) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) 1m43.423757827s ago: executing program 7 (id=428): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x806}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e7755068305000000000000000010e200", [0xfffffffffffffffc, 0x1]}}) r6 = dup(r5) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000500)={{0x8, 0x2, 0xfffffffd, 0xff, 'syz1\x00', 0x80000800}, 0x1, [0x56, 0x4, 0xffffffff, 0x4, 0x10000, 0x4, 0x0, 0xfffffff7, 0xfffffff8, 0x2, 0x0, 0x80000001, 0x3e, 0x10005, 0x1ff, 0x8, 0x70, 0x1, 0x8, 0x7d0f, 0x6, 0xf, 0xfffffffb, 0xb, 0x8, 0x4, 0x6, 0x0, 0xfffffff7, 0x3, 0x1, 0x80, 0x2, 0x101, 0x9, 0x100000, 0x40c1f881, 0x29b0, 0x1, 0x1d, 0x6, 0x6, 0x4, 0x8, 0x6, 0x6, 0xfff, 0x2, 0x5, 0xe1, 0x6, 0x3b233bf5, 0x1a, 0x81, 0x9, 0x4, 0x9, 0x10001, 0xc, 0x10001, 0x7d60, 0x64c2, 0x1000, 0x6, 0x81, 0x6, 0xfffffff9, 0x80000000, 0xd8, 0x6, 0x1, 0x9, 0x1, 0x7, 0x4, 0x10000, 0x5, 0xffffffff, 0x1000, 0x7, 0xd49b, 0x7f, 0x4, 0x2, 0xffff8001, 0x5, 0x4, 0x2e8d, 0x2, 0x1000, 0x5, 0x800, 0x3, 0x1f, 0xffff, 0x7, 0xa7d, 0xfff, 0x6, 0x2, 0x1, 0x5, 0x9f0, 0x4, 0x8, 0x80000000, 0x2b5d, 0x8, 0x8724, 0x800, 0xffffffba, 0x4, 0x7f, 0x10001, 0x0, 0x5, 0x9, 0x6, 0xff, 0xffff, 0x73af9db5, 0xa4c, 0x6, 0x9072ee6, 0x5, 0x9, 0x5, 0x9]}) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) r7 = socket(0x2a, 0x6, 0x2) write(r7, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) pipe2(&(0x7f00000001c0), 0x800) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m42.173757516s ago: executing program 7 (id=429): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5f1}}, './file0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x2f) sendfile(r2, r3, 0x0, 0x8000002b) 1m41.783835803s ago: executing program 7 (id=430): socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x5ef4, &(0x7f00000002c0)={0x0, 0xa0fc, 0x0, 0x1, 0xa1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1280, 0x150, 0x150, 0x0, 0xf8010000, 0x1348, 0x238, 0x238, 0x1348, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1e8, 0x250, 0x0, {}, [@common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x6, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x43c) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) bind$netrom(r5, &(0x7f00000001c0)={{0x3, @default, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r6 = socket$kcm(0x2, 0x7, 0x84) sendmsg$inet(r6, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) 1m31.032732132s ago: executing program 36 (id=423): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x107be4be}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4489c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) 1m25.732123261s ago: executing program 37 (id=430): socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x5ef4, &(0x7f00000002c0)={0x0, 0xa0fc, 0x0, 0x1, 0xa1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1280, 0x150, 0x150, 0x0, 0xf8010000, 0x1348, 0x238, 0x238, 0x1348, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1e8, 0x250, 0x0, {}, [@common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x6, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x43c) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) bind$netrom(r5, &(0x7f00000001c0)={{0x3, @default, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r6 = socket$kcm(0x2, 0x7, 0x84) sendmsg$inet(r6, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) 1m16.304156802s ago: executing program 6 (id=435): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3, 0x0, 0x10, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000085000000050000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0xc) sendfile(r3, r3, 0x0, 0xc3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000880)={0x4, {{0xa, 0x4e24, 0x9, @private2, 0x4b}}, {{0xa, 0x4e20, 0x401, @empty, 0x6}}}, 0x104) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x70b}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="8492d8fb00bbca503b", 0x9}], 0x1, &(0x7f0000000480)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x10}, 0x40804) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800090000000000000000076600000005000000fcff010029ad0d9cdadc219873797a3100000000"], 0x28}}, 0x20000840) 1m15.397191049s ago: executing program 6 (id=436): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init1(0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3, 0x0, 0x10, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m14.488251509s ago: executing program 6 (id=437): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x806}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e7755068305000000000000000010e200", [0xfffffffffffffffc, 0x1]}}) r6 = dup(r5) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000500)={{0x8, 0x2, 0xfffffffd, 0xff, 'syz1\x00', 0x80000800}, 0x1, [0x56, 0x4, 0xffffffff, 0x4, 0x10000, 0x4, 0x0, 0xfffffff7, 0xfffffff8, 0x2, 0x0, 0x80000001, 0x3e, 0x10005, 0x1ff, 0x8, 0x70, 0x1, 0x8, 0x7d0f, 0x6, 0xf, 0xfffffffb, 0xb, 0x8, 0x4, 0x6, 0x0, 0xfffffff7, 0x3, 0x1, 0x80, 0x2, 0x101, 0x9, 0x100000, 0x40c1f881, 0x29b0, 0x1, 0x1d, 0x6, 0x6, 0x4, 0x8, 0x6, 0x6, 0xfff, 0x2, 0x5, 0xe1, 0x6, 0x3b233bf5, 0x1a, 0x81, 0x9, 0x4, 0x9, 0x10001, 0xc, 0x10001, 0x7d60, 0x64c2, 0x1000, 0x6, 0x81, 0x6, 0xfffffff9, 0x80000000, 0xd8, 0x6, 0x1, 0x9, 0x1, 0x7, 0x4, 0x10000, 0x5, 0xffffffff, 0x1000, 0x7, 0xd49b, 0x7f, 0x4, 0x2, 0xffff8001, 0x5, 0x4, 0x2e8d, 0x2, 0x1000, 0x5, 0x800, 0x3, 0x1f, 0xffff, 0x7, 0xa7d, 0xfff, 0x6, 0x2, 0x1, 0x5, 0x9f0, 0x4, 0x8, 0x80000000, 0x2b5d, 0x8, 0x8724, 0x800, 0xffffffba, 0x4, 0x7f, 0x10001, 0x0, 0x5, 0x9, 0x6, 0xff, 0xffff, 0x73af9db5, 0xa4c, 0x6, 0x9072ee6, 0x5, 0x9, 0x5, 0x9]}) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r7 = socket(0x2a, 0x6, 0x2) write(r7, &(0x7f00000002c0)="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", 0xfc) pipe2(&(0x7f00000001c0), 0x800) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m13.370498238s ago: executing program 6 (id=438): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x806}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e7755068305000000000000000010e200", [0xfffffffffffffffc, 0x1]}}) r6 = dup(r5) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000500)={{0x8, 0x2, 0xfffffffd, 0xff, 'syz1\x00', 0x80000800}, 0x1, [0x56, 0x4, 0xffffffff, 0x4, 0x10000, 0x4, 0x0, 0xfffffff7, 0xfffffff8, 0x2, 0x0, 0x80000001, 0x3e, 0x10005, 0x1ff, 0x8, 0x70, 0x1, 0x8, 0x7d0f, 0x6, 0xf, 0xfffffffb, 0xb, 0x8, 0x4, 0x6, 0x0, 0xfffffff7, 0x3, 0x1, 0x80, 0x2, 0x101, 0x9, 0x100000, 0x40c1f881, 0x29b0, 0x1, 0x1d, 0x6, 0x6, 0x4, 0x8, 0x6, 0x6, 0xfff, 0x2, 0x5, 0xe1, 0x6, 0x3b233bf5, 0x1a, 0x81, 0x9, 0x4, 0x9, 0x10001, 0xc, 0x10001, 0x7d60, 0x64c2, 0x1000, 0x6, 0x81, 0x6, 0xfffffff9, 0x80000000, 0xd8, 0x6, 0x1, 0x9, 0x1, 0x7, 0x4, 0x10000, 0x5, 0xffffffff, 0x1000, 0x7, 0xd49b, 0x7f, 0x4, 0x2, 0xffff8001, 0x5, 0x4, 0x2e8d, 0x2, 0x1000, 0x5, 0x800, 0x3, 0x1f, 0xffff, 0x7, 0xa7d, 0xfff, 0x6, 0x2, 0x1, 0x5, 0x9f0, 0x4, 0x8, 0x80000000, 0x2b5d, 0x8, 0x8724, 0x800, 0xffffffba, 0x4, 0x7f, 0x10001, 0x0, 0x5, 0x9, 0x6, 0xff, 0xffff, 0x73af9db5, 0xa4c, 0x6, 0x9072ee6, 0x5, 0x9, 0x5, 0x9]}) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r7 = socket(0x2a, 0x6, 0x2) write(r7, &(0x7f00000002c0)="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", 0xfc) pipe2(&(0x7f00000001c0), 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m12.37893777s ago: executing program 6 (id=439): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) userfaultfd(0x801) io_setup(0x8, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) io_submit(0x0, 0x0, &(0x7f0000004540)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000140), 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r3, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x2}]}]}, 0x30}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m2.705693202s ago: executing program 6 (id=440): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r5, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xc4ffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x5}, {0x9, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8900}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}}, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000100), 0x80, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r9, 0x0, 0x0, 0x80, 0x0, 0x2}]) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) socket(0x2, 0x2, 0x1) 57.146214225s ago: executing program 9 (id=433): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init1(0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3, 0x0, 0x10, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 56.228273946s ago: executing program 9 (id=441): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2a32}, 0x18) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) dup2(r4, r4) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)="6bf71c9e98581637335d30ea5c633dde0d99e98def0ffa414da84bd0c849ceaa0813840d901c8bd1e0", 0x29}], 0x1) 49.738472351s ago: executing program 9 (id=442): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = fcntl$dupfd(r0, 0x0, r0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x200, &(0x7f0000002800)=0x0) io_destroy(r5) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000080), 0x4) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x3, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x2, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x8, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18500000ffffffff00000000000000009590c55d04369e00000000000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x10, 0x0, @void, @value}, 0x94) io_pgetevents(r5, 0x8, 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) read$snapshot(r4, 0x0, 0xffffffbf) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x2, 0x12) read$snapshot(r4, 0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1e, 0x21, &(0x7f0000000500)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}], &(0x7f0000000380)='GPL\x00', 0x4, 0x25, &(0x7f00000003c0)=""/37, 0x40f00, 0x60, '\x00', 0x0, @sk_lookup=0x24, r4, 0x8, &(0x7f0000000640)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xf, 0xfffffc01, 0x1}, 0x10, 0x0, r3, 0x5, &(0x7f00000006c0)=[r1, r1, r4], &(0x7f0000000700)=[{0x3, 0x3, 0x3, 0x8}, {0x2, 0x3, 0xf, 0xc}, {0x3, 0x4, 0x8, 0x1}, {0x3, 0x5, 0x4, 0x7}, {0x3, 0x1, 0xc, 0x7}], 0x10, 0x8000, @void, @value}, 0x94) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r8, 0xf505, 0x0) 49.536256852s ago: executing program 9 (id=443): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init1(0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3, 0x0, 0x10, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000085000000050000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0xc) sendfile(r3, r3, 0x0, 0xc3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000880)={0x4, {{0xa, 0x4e24, 0x9, @private2, 0x4b}}, {{0xa, 0x4e20, 0x401, @empty, 0x6}}}, 0x104) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x70b}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="8492d8fb00bbca503b", 0x9}], 0x1, &(0x7f0000000480)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x10}, 0x40804) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800090000000000000000076600000005000000fcff010029ad0d9cdadc219873797a3100000000"], 0x28}}, 0x20000840) 49.241845031s ago: executing program 2 (id=48): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000003ac0)={'wlan0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x32, 0x1, 0xfffffffffffffffb, {0x10, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x4e24, 0x4e21, 0x7}, {0x0, @random="65280be4343c", 0xfffd, 0x80, [0x8]}, @udp_ip4_spec={@multicast2, @empty, 0x4e23, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x3, [0x6, 0x7bf]}, 0xb, 0x5}, 0x1, [0x1]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) dup(r6) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) 49.192382815s ago: executing program 8 (id=432): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x107be4be}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4489c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) 46.626832601s ago: executing program 38 (id=440): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002d00090027bd7000000000000500000014000a00000000000000000000000000000000014cd27473cae1627840ddc2116be301c6934d9b561502514401fb7e2598d0aad8da830034cbf5bfeb5322da30c46668a15cfbfd36f735f8fb61e84a68f287a6ebe067816778798f962f4cca486942edba652c14d6ada528cd29d4e258e256dc9172b1ec26829405c46eed45e52d652745870da4283bef5ef2191f2edb0bc3f447d17694a826d8d1721b587220ffacb71b61665cabe74532a6f8e7eef31fc9770207cdf27029a8d946d7e4ce15fec57e2eeccbc8ca1350f623d80df180c58c6694f89ef6862193ed5cdf168a1c380a79811912a42a9fc7ddb376bd2800c3c9efe8f979b0294c4a87e3a3dc467b91c260c6d623b0cfed27139f5e804bdc8ad4f0c28741bfac54521084df58656f7269f79b71a2dae4dc5be56baf7bf19743e1c6db9658781d"], 0x28}}, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r5, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xc4ffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x5}, {0x9, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8900}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}}, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000100), 0x80, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r9, 0x0, 0x0, 0x80, 0x0, 0x2}]) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) socket(0x2, 0x2, 0x1) 46.619791528s ago: executing program 9 (id=445): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x107be4be}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4489c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) 45.572420057s ago: executing program 8 (id=446): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0x8690, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) recvmsg$unix(r5, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000280)=""/199, 0xc7}], 0x1, &(0x7f0000000380)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x40) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000020000000900010073797a300000000020000000000c01080000000000000000020000000900010073797a310000000014000000020a01020000000000000000000000002c000000180a01"], 0xa8}}, 0x0) stat(&(0x7f0000004d80)='./cgroup\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 31.418293506s ago: executing program 39 (id=445): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x107be4be}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4489c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) 30.353600461s ago: executing program 40 (id=446): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0x8690, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) recvmsg$unix(r5, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000280)=""/199, 0xc7}], 0x1, &(0x7f0000000380)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x40) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000020000000900010073797a300000000020000000000c01080000000000000000020000000900010073797a310000000014000000020a01020000000000000000000000002c000000180a01"], 0xa8}}, 0x0) stat(&(0x7f0000004d80)='./cgroup\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 8.317515474s ago: executing program 1 (id=444): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000440)={0x2, 'veth1_to_batadv\x00', 0x3}, 0x18) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES16=0x0]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file0', [{0x20, '#! '}, {}], 0xa, "65148ce47ce2de8a7cd73644d637c941ace8e1d604"}, 0x25) msgget$private(0x0, 0x0) 7.716103121s ago: executing program 2 (id=48): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000003ac0)={'wlan0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x32, 0x1, 0xfffffffffffffffb, {0x10, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x4e24, 0x4e21, 0x7}, {0x0, @random="65280be4343c", 0xfffd, 0x80, [0x8]}, @udp_ip4_spec={@multicast2, @empty, 0x4e23, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x3, [0x6, 0x7bf]}, 0xb, 0x5}, 0x1, [0x1]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) dup(r6) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) 5.690871945s ago: executing program 1 (id=449): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x806}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e7755068305000000000000000010e200", [0xfffffffffffffffc, 0x1]}}) socket(0x2a, 0x6, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 5.690678094s ago: executing program 3 (id=447): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x806}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000c80)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e7755068305000000000000000010e200", [0xfffffffffffffffc, 0x1]}}) socket(0x2a, 0x6, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 4.80027371s ago: executing program 3 (id=450): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = fcntl$dupfd(r0, 0x0, r0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x200, &(0x7f0000002800)=0x0) io_destroy(r5) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000080), 0x4) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x3, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x2, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4) io_pgetevents(r5, 0x8, 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) read$snapshot(r4, 0x0, 0xffffffbf) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x2, 0x12) read$snapshot(r4, 0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)) getpid() r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1e, 0x21, &(0x7f0000000500)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}], &(0x7f0000000380)='GPL\x00', 0x4, 0x25, &(0x7f00000003c0)=""/37, 0x40f00, 0x60, '\x00', 0x0, @sk_lookup=0x24, r4, 0x8, &(0x7f0000000640)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xf, 0xfffffc01, 0x1}, 0x10, 0x0, r3, 0x5, &(0x7f00000006c0)=[r1, r1, r4], &(0x7f0000000700)=[{0x3, 0x3, 0x3, 0x8}, {0x2, 0x3, 0xf, 0xc}, {0x3, 0x4, 0x8, 0x1}, {0x3, 0x5, 0x4, 0x7}, {0x3, 0x1, 0xc, 0x7}], 0x10, 0x8000, @void, @value}, 0x94) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r8, 0xf505, 0x0) 4.776188799s ago: executing program 1 (id=451): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0x3, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x8356, 0x30, 0x0, 0x0}) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x82d00) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@volatile}]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) openat$ptmx(0xffffff9c, &(0x7f00000001c0), 0x151842, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x2) r3 = fanotify_init(0x8, 0x0) fanotify_mark(r3, 0x1, 0x8000020, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000300)={{0x2, 0x7, 0x0, 0x5, 'syz1\x00', 0x8}, 0x0, [0xff, 0x400, 0x5, 0x4, 0x6, 0xf, 0x7, 0x0, 0xbbe4, 0x3, 0x54, 0x7, 0x8, 0x5b750512, 0xe3, 0x7, 0xb83, 0xc, 0xb, 0x5, 0x6, 0x93, 0x6, 0x8, 0x8, 0x8cf0, 0x2, 0x1, 0x4, 0x0, 0x3ff, 0x5, 0xa, 0x0, 0x60, 0x3, 0xfffffff7, 0x1000, 0xff, 0x200, 0x3df, 0x9, 0x8, 0x7377, 0x400, 0x6, 0x80, 0x8, 0x200, 0x1, 0x5, 0x1, 0x81, 0x7, 0x80000001, 0x8, 0x9, 0x4, 0x90b, 0x10000, 0xfffffffc, 0x80000001, 0x6, 0x100, 0x5, 0x10000, 0x3, 0x7, 0x0, 0x1, 0xd, 0x80, 0x1, 0x5, 0xe, 0x7, 0x631, 0x5, 0x200, 0x8, 0x9, 0x401, 0x8001, 0x1, 0x1, 0x5, 0x7b1, 0x18, 0x7f, 0x40, 0x2, 0x59c387ab, 0x1ff, 0x5, 0x8001, 0x9, 0x1, 0x4, 0x40, 0x0, 0x6, 0x4, 0x2, 0x9, 0xfffffffb, 0x2, 0x7, 0x1, 0x1, 0x10000, 0x6, 0x0, 0xfffffffc, 0x7, 0x7, 0xfff, 0x0, 0x9, 0x4, 0x1ff, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3252, 0x9, 0x1]}) 4.682785548s ago: executing program 0 (id=452): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x107be4be}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4489c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) 4.612943964s ago: executing program 3 (id=453): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c\x87\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x192}}, 0x20}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in=@rand_addr=0x64010101, 0x4e20, 0x0, 0x4e20, 0xd, 0x2, 0x0, 0x0, 0x2c, r10}, {0x3, 0x6, 0x1ff, 0x9, 0x7, 0x7f, 0x9, 0x2}, {0x2, 0x4fa, 0x1, 0x4}, 0xc2d, 0x6e6bb0, 0x2, 0x0, 0x1, 0x1}, {{@in=@private=0xa010102, 0x4d4, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3505, 0x4, 0x2, 0xd, 0x5, 0x2000, 0xeb}}, 0xe4) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r12 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000480)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) openat$sr(0xffffff9c, &(0x7f0000000140), 0x200000, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x0) 3.18582271s ago: executing program 3 (id=454): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x3}, 'syz1\x00', 0x52}) ioctl$UI_DEV_CREATE(r0, 0x5501) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r4, 0x2ded, 0xbf79, 0x5a, 0x0, 0xffffffffffffff6c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x448}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0xdc}, 0x1, 0x0, 0x0, 0x801}, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) readv(r12, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 3.058270912s ago: executing program 0 (id=455): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x3}, 'syz1\x00', 0x52}) ioctl$UI_DEV_CREATE(r0, 0x5501) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r4, 0x2ded, 0xbf79, 0x5a, 0x0, 0xffffffffffffff6c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x448}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r12 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) readv(r12, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.282230347s ago: executing program 3 (id=456): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0x3, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x8356, 0x30, 0x0, 0x0}) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x82d00) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@volatile}]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) openat$ptmx(0xffffff9c, &(0x7f00000001c0), 0x151842, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fanotify_init(0x8, 0x0) fanotify_mark(r2, 0x1, 0x8000020, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000300)={{0x2, 0x7, 0x0, 0x5, 'syz1\x00', 0x8}, 0x0, [0xff, 0x400, 0x5, 0x4, 0x6, 0xf, 0x7, 0x0, 0xbbe4, 0x3, 0x54, 0x7, 0x8, 0x5b750512, 0xe3, 0x7, 0xb83, 0xc, 0xb, 0x5, 0x6, 0x93, 0x6, 0x8, 0x8, 0x8cf0, 0x2, 0x1, 0x4, 0x0, 0x3ff, 0x5, 0xa, 0x0, 0x60, 0x3, 0xfffffff7, 0x1000, 0xff, 0x200, 0x3df, 0x9, 0x8, 0x7377, 0x400, 0x6, 0x80, 0x8, 0x200, 0x1, 0x5, 0x1, 0x81, 0x7, 0x80000001, 0x8, 0x9, 0x4, 0x90b, 0x10000, 0xfffffffc, 0x80000001, 0x6, 0x100, 0x5, 0x10000, 0x3, 0x7, 0x0, 0x1, 0xd, 0x80, 0x1, 0x5, 0xe, 0x7, 0x631, 0x5, 0x200, 0x8, 0x9, 0x401, 0x8001, 0x1, 0x1, 0x5, 0x7b1, 0x18, 0x7f, 0x40, 0x2, 0x59c387ab, 0x1ff, 0x5, 0x8001, 0x9, 0x1, 0x4, 0x40, 0x0, 0x6, 0x4, 0x2, 0x9, 0xfffffffb, 0x2, 0x7, 0x1, 0x1, 0x10000, 0x6, 0x0, 0xfffffffc, 0x7, 0x7, 0xfff, 0x0, 0x9, 0x4, 0x1ff, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3252, 0x9, 0x1]}) 2.249744551s ago: executing program 0 (id=457): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x806}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000c80)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e7755068305000000000000000010e200", [0xfffffffffffffffc, 0x1]}}) socket(0x2a, 0x6, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.729339289s ago: executing program 1 (id=458): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0x3, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x8356, 0x30, 0x0, 0x0}) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x82d00) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@volatile}]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) openat$ptmx(0xffffff9c, &(0x7f00000001c0), 0x151842, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x2) r3 = fanotify_init(0x8, 0x0) fanotify_mark(r3, 0x1, 0x8000020, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000300)={{0x2, 0x7, 0x0, 0x5, 'syz1\x00', 0x8}, 0x0, [0xff, 0x400, 0x5, 0x4, 0x6, 0xf, 0x7, 0x0, 0xbbe4, 0x3, 0x54, 0x7, 0x8, 0x5b750512, 0xe3, 0x7, 0xb83, 0xc, 0xb, 0x5, 0x6, 0x93, 0x6, 0x8, 0x8, 0x8cf0, 0x2, 0x1, 0x4, 0x0, 0x3ff, 0x5, 0xa, 0x0, 0x60, 0x3, 0xfffffff7, 0x1000, 0xff, 0x200, 0x3df, 0x9, 0x8, 0x7377, 0x400, 0x6, 0x80, 0x8, 0x200, 0x1, 0x5, 0x1, 0x81, 0x7, 0x80000001, 0x8, 0x9, 0x4, 0x90b, 0x10000, 0xfffffffc, 0x80000001, 0x6, 0x100, 0x5, 0x10000, 0x3, 0x7, 0x0, 0x1, 0xd, 0x80, 0x1, 0x5, 0xe, 0x7, 0x631, 0x5, 0x200, 0x8, 0x9, 0x401, 0x8001, 0x1, 0x1, 0x5, 0x7b1, 0x18, 0x7f, 0x40, 0x2, 0x59c387ab, 0x1ff, 0x5, 0x8001, 0x9, 0x1, 0x4, 0x40, 0x0, 0x6, 0x4, 0x2, 0x9, 0xfffffffb, 0x2, 0x7, 0x1, 0x1, 0x10000, 0x6, 0x0, 0xfffffffc, 0x7, 0x7, 0xfff, 0x0, 0x9, 0x4, 0x1ff, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3252, 0x9, 0x1]}) 1.307059465s ago: executing program 0 (id=459): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0xffffffffffffffe0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x682}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000bc0)={0xe24, r3, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0xa}, {0x3, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x0, 0x9}, {0x4, 0x1}, {0x4, 0xa}, {0x3}, {0x6, 0x7}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x6}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x2, 0x6}, {0x5}, {0x2, 0x2}, {0x7, 0x6}, {0x0, 0x6}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x8}, {0x6, 0x2}, {0x4, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x5}, {0x5, 0x3}, {0x2, 0xa}, {0x5, 0x1}, {0x5, 0x8}, {0x1, 0x7}, {0x5, 0x2}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x8000, 0x2, 0x30f8, 0xa, 0xa, 0x8]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x0, 0x1, 0x36, 0x3, 0x9, 0x19, 0xc, 0x24, 0x6, 0x1b, 0x60, 0x6c, 0x24, 0x4, 0xb, 0x12, 0x5, 0xb, 0x3, 0x1, 0x14, 0xc, 0x3, 0x4, 0x1, 0x2, 0xa8d20237b077a9c, 0xc, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x6}, {0x0, 0x4}, {0x5, 0x6}, {0x6, 0x8}, {0x5, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x3, 0x2}, {0x4, 0x3}, {0x3, 0x7}, {0x6, 0x5}, {0x4, 0x8}, {0x2}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x8}, {0x3, 0x9}, {0x1, 0x1}, {0x0, 0x5}, {}, {0x7}, {0x0, 0x7}, {0x0, 0x8}, {0x5, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x689, 0x7, 0x7, 0x7, 0x101, 0x91, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa1, 0x3, 0x3800, 0xe239, 0x0, 0x92, 0x7, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd7e5, 0xfffd, 0x9, 0xbd2, 0xfffd, 0x2, 0x4, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x6, 0x1}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0x7}, {0x6, 0x5}, {0x3, 0x1}, {0x6, 0x8}, {0x6, 0x6}, {0x2, 0x2}, {0x0, 0xa}, {0x3, 0x6}, {0x3, 0x6}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x8}, {0x6, 0x2}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x8}, {0x6, 0x8}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x1}, {0x5, 0x7}, {0x3, 0xa}, {0x7, 0x2}, {0x6, 0x3}, {}, {0x2, 0x1}, {0x7, 0xa}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x3, 0x9}, {0x2, 0x7}, {0x3}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x6c, 0x1b, 0x12, 0x16, 0x9, 0x1b, 0x16, 0x4, 0x36, 0x30, 0xaf8a044b8461c328, 0x6, 0x36, 0x60, 0x30, 0x48, 0x60, 0x1, 0xc, 0x36]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x4]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x5}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x4}, {}, {0x6, 0x4}, {0x0, 0x2}, {0x5}, {0x4, 0x7}, {0x1, 0x7}, {0x5, 0x5}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0x1}, {0x7}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x1}, {0x5, 0x8}, {0x2, 0x5}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0x4}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x7}, {0x1, 0x6}, {0x6}, {0x5, 0xa}, {0x4, 0x5}, {0x4, 0x5}, {0x2}, {0x0, 0x3}, {0x2}, {0x0, 0x9}, {0x7, 0x6}, {0x3, 0x5}, {0x3, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x3, 0x2}, {0x5}, {}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x7, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x5, 0x6}, {0x2, 0x9}, {0x6, 0x3}, {0x5, 0x1}, {0x2, 0x7}, {0x3, 0x5}, {0x6}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0xa}, {0x1}, {0x3, 0xa}, {0x4, 0x7}, {0x3, 0x7}, {0x2, 0x9}, {0x3, 0x8}, {0x7, 0x5}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x1}, {0x6, 0x8}, {0x3, 0x8}, {0x2, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {0x7}, {0x7, 0x5}, {0x7}, {0x7, 0x3}, {0x7, 0x8}, {0x1, 0x3}, {0x2, 0x7}]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x9}, {0x1, 0x7}, {0x7}, {0x3, 0x7}, {0x2}, {0x0, 0x8}, {0x4, 0x1}, {0x5, 0x8}, {0x1, 0x5}, {0x2, 0x7}, {0x1, 0x5}, {0x4, 0x7}, {0x6, 0x3}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x8}, {0x7, 0x9}, {0x2, 0xa}, {0x4, 0x9}, {0x2, 0x3}, {0x7, 0x5}, {0x7, 0x4}, {0x4, 0x7}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x1, 0x8}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0xa}, {0x3, 0x1}, {0x5, 0x6}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x9}, {}, {0x1, 0x6}, {0x0, 0x3}, {0x4, 0x1}, {0x5, 0x9}, {0x1, 0x4}, {0x2, 0x6}, {0x7, 0x3}, {0x0, 0x1}, {0x2, 0x8}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x7, 0x8}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0x8}, {0x5, 0x1}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0x3}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0x5}, {0x4, 0x8}, {0x3, 0x2}, {0x3, 0x5}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x8}, {0x0, 0x8}, {0x7, 0xa}, {0x4, 0x7}, {0x3, 0x3}, {0x5, 0x4}, {0x1, 0xa}, {0x3, 0x6}, {0x2, 0x2}, {0x1, 0x8}, {0x5, 0xa}, {0x6, 0x1}, {0x5}, {0x2, 0x3}, {0x3}, {0x1, 0x9}, {0x2}, {0x6, 0x6}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x3, 0x1}, {0x2, 0x12}, {0x1, 0x1}, {0x3, 0x6}, {0x2, 0x8}, {0x7, 0x6}, {0x6, 0x5}, {0x2, 0x4}, {0x0, 0x5}, {0x6, 0x6}, {0x1, 0x9}, {0x5, 0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x16, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x3, 0x800, 0x9, 0x8, 0xcd, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x19, 0x3, 0x6, 0x1, 0x2, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0xad85, 0x0, 0x9c93, 0x4, 0x5, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x32, 0x5, 0x9, 0x6, 0x4, 0x5, 0x12, 0x18, 0xc, 0x3, 0x30, 0x48, 0x18, 0xb, 0x9, 0x16, 0x18, 0x36, 0x12, 0xc, 0x0, 0x16, 0x60, 0x2, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xa, 0x2, 0x1, 0x10, 0x800, 0x81, 0x1]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x63, 0x16, 0x30, 0x1b, 0x48, 0x48, 0xd, 0x6f, 0x48, 0x12, 0x0, 0x9, 0x24, 0x48, 0x1b, 0x93f95da732b5b479, 0x60, 0x6c, 0x9, 0x1]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x8, 0xf, 0x1, 0xd470, 0x3, 0x9, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff00, 0x7, 0x0, 0x6d, 0xc3f, 0x7, 0x1]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xb0, 0x3, 0x2, 0xfff8, 0x3, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x983b, 0x3, 0xf000, 0xdd2a, 0xfffa, 0x4, 0xb53a]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff2, 0x200, 0x5ab, 0x6, 0x0, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x895, 0x8, 0x6, 0xb02f, 0xffff, 0x1, 0x5]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x5}, {0x0, 0x8}, {0x4, 0x8}, {0x2, 0x9}, {0x0, 0x1}, {0x7, 0x5}, {0x2, 0x8}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x4, 0x9}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x5}, {0x4, 0xa}, {0x6, 0x9}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x7}, {0x6, 0x17}, {0x1, 0x1}, {0x1, 0x9}, {0x1}, {0x4, 0x8}, {0x7, 0x1}, {0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x3}, {0x3, 0x2}, {0x3, 0x6}, {0x2, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x6, 0x63, 0xa, 0x6, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x3b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x6, 0x4, 0x5, 0x6, 0x16, 0x6c, 0x24, 0x0, 0x10, 0xc, 0xb, 0xc, 0xc, 0x12, 0x0, 0x2, 0x5, 0x18, 0x12, 0x60, 0x4b, 0x36, 0x16, 0x16, 0xc, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xb, 0x18da, 0x6, 0xfffb, 0xe, 0x200, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x9, 0x5, 0x16, 0x5, 0x1, 0x1, 0x30, 0x5, 0x48, 0x48, 0x9, 0x0, 0x6, 0x36, 0x9, 0x9, 0x60, 0x1, 0xc, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xca, 0x4, 0x0, 0xddc, 0x8a3, 0x0, 0x401, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc00, 0x7, 0x100, 0x4, 0x5, 0xfff8, 0x101]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x24, 0x36, 0x36, 0x9, 0x1b, 0x4, 0xb, 0x30, 0x4, 0x1b, 0x24, 0x48, 0x18, 0x1b, 0x60, 0x1, 0x1b, 0x2, 0x5, 0x12, 0xb, 0xc, 0x60, 0x4, 0x24, 0x2, 0x18, 0x2, 0x5]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x4}, {0x6, 0x9}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x5}, {0x4, 0x4}, {0x4, 0xa}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x6}, {0x0, 0x7}, {0x7}, {0x1, 0x6}, {}, {0x2, 0xa}, {0x7, 0x6}, {0x7, 0x9}, {0x6, 0x2}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0xa}, {0x2, 0x8}, {0x2, 0x8}, {0x0, 0x3}, {0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x5, 0x6, 0xdd, 0x2d, 0xffff, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x24, 0x9, 0x30, 0x18, 0xb, 0x36, 0x1b, 0x18, 0x3b, 0x18, 0x9, 0x6, 0x6c, 0x36, 0x48, 0x6, 0x1, 0x9, 0x3, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x5, 0x7, 0x0, 0x3, 0x8, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x8, 0x7fff, 0xf11, 0xd2, 0x7, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x6, 0x8, 0x1000, 0x9, 0x5, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfa, 0xc48a, 0x4, 0x9, 0x7f, 0x5, 0xff5a]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x3}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0xb}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x7}, {0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x9}, {0x4, 0x6}, {0x5, 0x9}, {0x6, 0x3}, {0x1}, {0x3, 0xa}, {0x2}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x7, 0x6}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x9}, {0x7, 0x8}, {0x3, 0x7}, {0x0, 0xa}, {0x7, 0x7}, {0x3, 0x9}, {0x7, 0x1}, {0x2, 0x6}, {0x3, 0x7}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x5}, {0x7, 0x4}, {}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xff, 0x8, 0x7, 0x30, 0x1800, 0x2, 0xffde]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x48, 0x36, 0x1b, 0x12, 0x6, 0x6, 0x3, 0x12, 0x3, 0x3, 0x1b, 0x60, 0x0, 0x0, 0xc, 0x18, 0x24, 0x48, 0x16, 0x5, 0x1b, 0x60, 0x6, 0x60, 0xc, 0x3, 0x48, 0x6c, 0x48, 0x6c, 0x60, 0x4]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x1a, 0x6, 0xb, 0x1, 0x1b, 0x3, 0x1b, 0x36, 0x1, 0x2, 0x2, 0x3, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x8000, 0x9, 0x100, 0x7f, 0x101, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffcf, 0x2, 0x5, 0x9, 0x4, 0x8, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x8}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0x7}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x9}, {0x1, 0x3}, {0x7, 0x9}, {0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x4, 0x6}, {0x5, 0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x7}, {0x2, 0x8}, {0x6, 0x3}, {0x4, 0x8}, {0x3, 0x7}, {0x3, 0x9}, {0x4, 0x6}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x7}, {0x7, 0x6}, {0x2, 0x3}, {0x7, 0x2}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x4}, {0x2, 0x6}, {0x7, 0x4}, {0x0, 0x1}, {}, {0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x7}, {0x7, 0x8}, {0x4, 0x5}, {0x7, 0x6}, {0x3, 0x7}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0x1}, {0x1, 0x7}, {0x2, 0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {}, {0x1, 0x5}, {0x2, 0x2}, {0x3, 0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x30, 0xc, 0x5, 0x24, 0x18, 0x6, 0x24, 0x18, 0x1b, 0xb, 0xb, 0xb, 0x9, 0x12, 0x4, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x0, 0xfffe, 0x2, 0xa, 0xfff8, 0x1]}}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0x2}, {0x4, 0x6}, {0x4, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x5}, {0x1, 0x1}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x2}, {0x4, 0x5}, {0x1, 0x5}, {0x5, 0x7}, {0x6, 0x3}, {0x6, 0x1}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x4}, {0x4, 0x9}, {0x6, 0x5}, {0x1, 0x4}, {0x2}, {0x5, 0x2}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x6}, {0x7, 0x5}, {0x1, 0x8}, {0x4, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x2}, {0x7, 0xa}, {0x3, 0x9}, {0x7, 0x8}, {0x4, 0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x4}, {0x3}, {0x2, 0x4}, {0x3, 0x2}, {0x2, 0x1}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0x4}, {0x5, 0x3}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0xa}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x4}, {0x7, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xe, 0x5, 0x7, 0x0, 0x2, 0x8000, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x1, 0x6, 0x4, 0x6, 0x3]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x6}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x8}, {0x2, 0x7}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x5, 0x3}, {0x6, 0x8}, {0x1, 0x9}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x2}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x1, 0x6}, {0x7, 0x5}, {0x5, 0x5}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x7, 0x5}, {0x6, 0x4}, {0x7, 0xa}, {0x7, 0x4}, {0x6, 0x5}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x5, 0x4, 0x1, 0x7, 0x8, 0x7, 0x98ad]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x1}, {0x2, 0x9}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x1}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {0x4, 0x1}, {0x6}, {0x0, 0x1}, {0x6, 0x3}, {0x1}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0x3}, {0x0, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0xa}, {0x6, 0x3}, {0x2, 0x5}, {0x3, 0x3}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0xa}, {0x3, 0x7}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x6}, {0x7, 0x5}, {0x6, 0x8}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x7, 0x8}, {0x3}, {0x6, 0x8}, {0x5, 0x7}, {0x2}, {0x3, 0xa}, {0x7, 0x7}, {0x7, 0x3}, {0x0, 0x7}, {0x5, 0x4}, {}, {0x5, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {}, {0x0, 0xa}, {0x1, 0x1}, {0x5}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x5, 0x101, 0x24, 0xa, 0xfffc, 0xcd18]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x12, 0x59, 0x35, 0x36, 0x18, 0x1b, 0x4, 0x6, 0x68, 0x1, 0x9, 0x9, 0x48, 0x30, 0x1, 0x2, 0x2, 0x4, 0x16, 0x2, 0x24, 0xb]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xca, 0xb, 0x1, 0x1, 0x9, 0x3, 0x7, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1000, 0x40, 0x8, 0x7f, 0xfff, 0xff52, 0xbe8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xd358, 0xfff1, 0x1, 0x7, 0x7ff, 0x4, 0x5]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x6, 0xe, 0xed1, 0x8, 0x7f, 0xffff, 0xb54]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x1, 0x5}, {0x1}, {0x6, 0x5}, {0x3}, {0x1, 0x9}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x8}, {0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0x3}, {0x3, 0x9}, {0x1, 0x9}, {0x7, 0x6}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x7}, {0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x2, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x2}, {}, {0x2}, {0x1}, {0x2, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0xa}, {0x3, 0xa}, {}, {0x7, 0x7}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x5}, {0x4, 0x5}, {0x1, 0x5}, {0x2, 0x9}, {}, {0x0, 0x8}, {0x7, 0x6}, {0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x7}, {0x6, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x2, 0xa}, {0x7, 0x3}, {0x5, 0xa}, {0x2, 0x8}, {0x3, 0x8}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xe, 0x2, 0x6, 0x7, 0x2010, 0x8, 0x200a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa78f, 0x3, 0x40, 0x1, 0x7, 0x8, 0x9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x1, 0x6, 0x5, 0x2, 0x60, 0xb, 0x30, 0x4, 0x6c, 0x9, 0x60, 0x5, 0x3, 0x6, 0x16, 0x24, 0x36, 0x2, 0x16, 0x2, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbc, 0xe1, 0x9, 0x462f, 0x1ff, 0x100, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x63, 0x4, 0x2, 0x1ff, 0x7fff, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x1b4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x9f, 0xfffe, 0x1, 0x4, 0x10, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe127, 0x0, 0x7, 0x7ff, 0xa, 0x3, 0xb, 0xfffa]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xff, 0x9, 0x7e00, 0x3, 0xa, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x7, 0x8, 0x4, 0x9, 0xed, 0x1ce]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2}, {0x5, 0x9}, {0x5, 0xa}, {0x6, 0x2}, {0x5, 0x9}, {0x3, 0x9}, {0x4, 0x4}, {0x7, 0x1}, {0x7, 0x9}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0x1}, {0x1}, {0x3, 0x9}, {0x3, 0x5}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x0, 0x7, 0x0, 0xf, 0x3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe0, 0x3, 0x2, 0x2, 0x584, 0x5, 0x40, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x12, 0x6c, 0xc, 0x15, 0x3, 0x18, 0xc, 0x30, 0x13, 0x3, 0x2, 0x36, 0x18, 0x36, 0x2, 0x1, 0x0, 0x18, 0x36, 0x18, 0xc, 0x30, 0x48]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x12, 0x60, 0x4, 0x1b, 0x18, 0x48, 0x1, 0xb, 0x16, 0xb, 0x9, 0x48, 0x24, 0x6c, 0x16, 0x5, 0x52, 0x30, 0x9, 0x36, 0xc, 0x6, 0xb, 0x1, 0x48, 0x48, 0x48, 0x6b]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x0, 0x36, 0x6, 0x3, 0x1, 0x6, 0x3, 0x6, 0x1, 0x1b, 0x6b, 0x2, 0xb, 0x18, 0x4, 0x35, 0xb, 0x12, 0x24, 0x60, 0x12, 0x16, 0x36, 0x3, 0x5]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xff, 0xd8f9, 0x6, 0xffcf, 0x80, 0xff, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff6d, 0x5, 0xdd2, 0x8, 0x2, 0xf, 0x101, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x3, 0x1, 0x9, 0x1969, 0xfff, 0x100, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8001, 0x5, 0xfff9, 0x95b, 0x9, 0x1, 0x40]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x5, 0x2, 0x1ff, 0x0, 0x191, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8001, 0x7, 0x3, 0x4, 0x100, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x7}, {0x7, 0x1}, {0x7, 0x3}, {0x2, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x3, 0x8}, {0x4, 0x8}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x6, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x4, 0x4}, {0x5, 0x6}, {0x6, 0x3}, {0x4, 0x1}, {0x2, 0x5}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x6}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0xfff6, 0x31ac, 0x6f21, 0x9, 0x9, 0x9]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x1b, 0x12, 0xc, 0x48, 0x14, 0x9, 0x36, 0x1b, 0x18, 0x27]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0xf, 0x4, 0x6, 0x3, 0x6, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x9, 0x2b7, 0x4, 0x9, 0x8, 0xfff9, 0x2000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf98b, 0x3, 0xe, 0x0, 0x6, 0xa8c6, 0x5]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x4}]}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0xa}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x5, 0x4}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x8}, {0x6, 0x4}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x5}, {0x6, 0x6}, {0x4, 0x5}, {0x6, 0x9}, {0x6, 0x8}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x4}, {0x2, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x4}, {0x4}, {0x4, 0xa}, {0x2, 0x1}, {0x7, 0x4}, {}, {0x2, 0x2}, {0x4, 0x6}, {0x1, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x1, 0xfffe, 0xffff, 0x7, 0xfffd, 0xfff8, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0xf6, 0x2, 0x2, 0xa, 0xffff, 0x7f]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x5}, {0x0, 0x5}, {0x0, 0x9}, {}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x1}, {0x2, 0x4}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x2}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0x1}, {0x4, 0x5}, {0x5, 0x6}, {0x2, 0x9}, {0x1}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {0x3, 0x2}, {0x5, 0x4}, {0x4, 0x6}, {0x6, 0xa}, {0x2, 0x2}, {0x3, 0x8}, {0x5, 0x4}, {0x2, 0x9}, {0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x5, 0x9}, {0x7, 0x8}, {0x0, 0x6}, {0x5, 0x4}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x5, 0x7}, {}, {0x7, 0x9}, {0x6, 0x4}, {0x3, 0x1}, {0x5}, {0x1, 0x6}, {0x7, 0x9}, {0x5, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x3}, {0x6, 0x9}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x3}, {0x4, 0x1}, {0x5, 0x7}, {0x7, 0x3}, {0x6, 0x9}, {0x2, 0x5}, {0x3, 0x7}, {0x3, 0xa}, {0x4, 0x8}, {0x5}, {0x0, 0x8}]}]}]}]}, 0xe24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40440d0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110000"], 0x0) openat$nvram(0xffffff9c, &(0x7f0000000080), 0x10080, 0x0) 1.245491683s ago: executing program 0 (id=460): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4, 0x3f000000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000"], 0x74}}, 0x0) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000027000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) read(r5, &(0x7f0000000000)=""/83, 0x53) read(r5, 0x0, 0x0) 304.228182ms ago: executing program 0 (id=461): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0x8690, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) recvmsg$unix(r5, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000280)=""/199, 0xc7}], 0x1, &(0x7f0000000380)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x40) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000020000000900010073797a300000000020000000000c01080000000000000000020000000900010073797a310000000014000000020a01020000000000000000000000002c000000180a01"], 0xa8}}, 0x0) stat(&(0x7f0000004d80)='./cgroup\x00', &(0x7f0000004dc0)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=48): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000003ac0)={'wlan0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x32, 0x1, 0xfffffffffffffffb, {0x10, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x4e24, 0x4e21, 0x7}, {0x0, @random="65280be4343c", 0xfffd, 0x80, [0x8]}, @udp_ip4_spec={@multicast2, @empty, 0x4e23, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x3, [0x6, 0x7bf]}, 0xb, 0x5}, 0x1, [0x1]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) dup(r6) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) kernel console output (not intermixed with test programs): batadv0: Interface deactivated: batadv_slave_1 [ 151.678738][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.703457][ T13] veth1_macvtap: left promiscuous mode [ 151.710002][ T13] veth0_macvtap: left promiscuous mode [ 151.711864][ T13] veth1_vlan: left promiscuous mode [ 151.713573][ T13] veth0_vlan: left promiscuous mode [ 152.262262][ T13] team0 (unregistering): Port device team_slave_1 removed [ 152.341698][ T13] team0 (unregistering): Port device team_slave_0 removed [ 152.376344][ T7695] netfs: Couldn't get user pages (rc=-14) [ 152.490506][ T7697] input: syz1 as /devices/virtual/input/input24 [ 152.903114][ T7679] chnl_net:caif_netlink_parms(): no params data found [ 152.979934][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.982258][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.984511][ T7679] bridge_slave_0: entered allmulticast mode [ 152.993989][ T7679] bridge_slave_0: entered promiscuous mode [ 152.997413][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.000514][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.002899][ T7679] bridge_slave_1: entered allmulticast mode [ 153.008521][ T7679] bridge_slave_1: entered promiscuous mode [ 153.063166][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.073023][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.131978][ T7679] team0: Port device team_slave_0 added [ 153.135605][ T7679] team0: Port device team_slave_1 added [ 153.191980][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.194187][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.202797][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.208161][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.210412][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.218734][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.263241][ T7679] hsr_slave_0: entered promiscuous mode [ 153.265631][ T7679] hsr_slave_1: entered promiscuous mode [ 153.267823][ T7679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.271107][ T7679] Cannot create hsr debugfs directory [ 153.299813][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.303020][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.306073][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.308620][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.311497][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.399663][ T7728] Bluetooth: MGMT ver 1.23 [ 153.404006][ T40] audit: type=1326 audit(1748923406.327:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.323" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 153.437622][ T7721] virt_wifi0 speed is unknown, defaulting to 1000 [ 153.525596][ T5303] Bluetooth: hci3: command tx timeout [ 153.565255][ T7721] chnl_net:caif_netlink_parms(): no params data found [ 153.699498][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.702538][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.708192][ T7721] bridge_slave_0: entered allmulticast mode [ 153.711429][ T7721] bridge_slave_0: entered promiscuous mode [ 153.714670][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.717358][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.720228][ T7721] bridge_slave_1: entered allmulticast mode [ 153.723418][ T7721] bridge_slave_1: entered promiscuous mode [ 153.807771][ T7721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.812483][ T7721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.862924][ T7721] team0: Port device team_slave_0 added [ 153.869930][ T7721] team0: Port device team_slave_1 added [ 153.929697][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.932672][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.944097][ T7721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.969237][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.972178][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.982272][ T7721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.059991][ T7721] hsr_slave_0: entered promiscuous mode [ 154.062280][ T7721] hsr_slave_1: entered promiscuous mode [ 154.064443][ T7721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.067608][ T7721] Cannot create hsr debugfs directory [ 154.094097][ T7679] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.118581][ T7679] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.124859][ T7679] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.133445][ T7679] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.223298][ T7721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.229071][ T7721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.235047][ T7721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.241646][ T7721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.275494][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.312709][ T7679] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.322001][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.324372][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.337948][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.340848][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.384381][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.399788][ T7721] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.409574][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.411853][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.418341][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.420609][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.447731][ T7721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.450914][ T7721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.508138][ T7679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.529512][ T7679] veth0_vlan: entered promiscuous mode [ 154.534499][ T7679] veth1_vlan: entered promiscuous mode [ 154.627527][ T7679] veth0_macvtap: entered promiscuous mode [ 154.637099][ T7679] veth1_macvtap: entered promiscuous mode [ 154.657811][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.662284][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.680891][ T7679] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.683760][ T7679] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.697921][ T7679] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.700753][ T7679] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.013015][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.018666][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.082007][ T7721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.101612][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.104050][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.320441][ T7721] veth0_vlan: entered promiscuous mode [ 155.343716][ T7721] veth1_vlan: entered promiscuous mode [ 155.365370][ T5303] Bluetooth: hci1: command tx timeout [ 155.384092][ T7721] veth0_macvtap: entered promiscuous mode [ 155.391121][ T7721] veth1_macvtap: entered promiscuous mode [ 155.410547][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.464199][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.478282][ T7721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.481837][ T7721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.486771][ T7721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.490286][ T7721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.578590][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.582032][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.625813][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.629103][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.919884][ T7817] input: syz1 as /devices/virtual/input/input25 [ 156.690283][ T7825] bridge_slave_0: left allmulticast mode [ 156.692144][ T7825] bridge_slave_0: left promiscuous mode [ 156.694872][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.702786][ T7825] bridge_slave_1: left allmulticast mode [ 156.707819][ T7825] bridge_slave_1: left promiscuous mode [ 156.709780][ T7825] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.719583][ T7825] bond0: (slave bond_slave_0): Releasing backup interface [ 156.738111][ T7825] bond0: (slave bond_slave_1): Releasing backup interface [ 156.781517][ T7825] team0: Port device team_slave_0 removed [ 156.801980][ T7825] team0: Port device team_slave_1 removed [ 156.804852][ T7825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.808393][ T7825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.813175][ T7825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.817969][ T7825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.833593][ T7825] team0: Port device geneve0 removed [ 156.865394][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.445448][ T5303] Bluetooth: hci1: command tx timeout [ 158.360468][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.365357][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.369539][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.373521][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.377475][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.519285][ T7838] virt_wifi0 speed is unknown, defaulting to 1000 [ 158.618201][ T7838] chnl_net:caif_netlink_parms(): no params data found [ 158.694117][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.786642][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.797871][ T7838] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.802145][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.806215][ T7838] bridge_slave_0: entered allmulticast mode [ 158.810207][ T7838] bridge_slave_0: entered promiscuous mode [ 158.815410][ T7838] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.818145][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.821127][ T7838] bridge_slave_1: entered allmulticast mode [ 158.824363][ T7838] bridge_slave_1: entered promiscuous mode [ 158.894465][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.935930][ T7838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.940777][ T7838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.990547][ T7838] team0: Port device team_slave_0 added [ 158.999354][ T7838] team0: Port device team_slave_1 added [ 159.043049][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.046401][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.055928][ T7838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.060355][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.062677][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.072652][ T7838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.179982][ T7838] hsr_slave_0: entered promiscuous mode [ 159.182669][ T7838] hsr_slave_1: entered promiscuous mode [ 159.185978][ T7838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.188584][ T7838] Cannot create hsr debugfs directory [ 159.249469][ T46] bridge_slave_1: left allmulticast mode [ 159.251731][ T46] bridge_slave_1: left promiscuous mode [ 159.255340][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.263361][ T46] bridge_slave_0: left allmulticast mode [ 159.267777][ T46] bridge_slave_0: left promiscuous mode [ 159.270673][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.529020][ T5303] Bluetooth: hci1: command tx timeout [ 159.802805][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.827232][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.836797][ T46] bond0 (unregistering): Released all slaves [ 160.215180][ T5303] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 160.278697][ T7877] input: syz1 as /devices/virtual/input/input26 [ 160.374174][ T46] hsr_slave_0: left promiscuous mode [ 160.384459][ T46] hsr_slave_1: left promiscuous mode [ 160.388412][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.390751][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.393632][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.397507][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.417005][ T46] veth1_macvtap: left promiscuous mode [ 160.418949][ T46] veth0_macvtap: left promiscuous mode [ 160.421003][ T46] veth1_vlan: left promiscuous mode [ 160.422712][ T46] veth0_vlan: left promiscuous mode [ 160.645833][ T5303] Bluetooth: hci3: command tx timeout [ 161.593929][ T7899] loop6: detected capacity change from 0 to 8 [ 161.598728][ T7899] Dev loop6: unable to read RDB block 8 [ 161.600645][ T7899] loop6: unable to read partition table [ 161.603715][ T7899] loop6: partition table beyond EOD, truncated [ 161.606289][ T7899] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 161.618318][ T5303] Bluetooth: hci1: command tx timeout [ 161.768043][ T46] team0 (unregistering): Port device team_slave_1 removed [ 161.830271][ T46] team0 (unregistering): Port device team_slave_0 removed [ 162.540792][ T7911] loop6: detected capacity change from 0 to 8 [ 162.725361][ T5303] Bluetooth: hci3: command tx timeout [ 162.895637][ T7911] Dev loop6: unable to read RDB block 8 [ 162.897442][ T7911] loop6: unable to read partition table [ 162.899289][ T7911] loop6: partition table beyond EOD, truncated [ 162.901242][ T7911] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 163.063537][ T7921] bridge0: entered promiscuous mode [ 163.069554][ T7921] macvlan2: entered promiscuous mode [ 163.514942][ T7838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.519857][ T7944] loop6: detected capacity change from 0 to 8 [ 163.522575][ T7944] Dev loop6: unable to read RDB block 8 [ 163.524351][ T7944] loop6: unable to read partition table [ 163.526714][ T7944] loop6: partition table beyond EOD, truncated [ 163.528643][ T7944] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 163.538023][ T7838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.809360][ T7838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.825220][ T7838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.392454][ T7838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.402638][ T7838] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.409390][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.412196][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.422926][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.425944][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.570459][ T7838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.602814][ T7838] veth0_vlan: entered promiscuous mode [ 164.612149][ T7838] veth1_vlan: entered promiscuous mode [ 164.630836][ T7838] veth0_macvtap: entered promiscuous mode [ 164.634886][ T7838] veth1_macvtap: entered promiscuous mode [ 164.647521][ T7838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.653970][ T7838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.667795][ T7838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.670590][ T7838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.673496][ T7838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.678406][ T7838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.815408][ T5303] Bluetooth: hci3: command tx timeout [ 165.188959][ T7967] ALSA: mixer_oss: invalid OSS volume '' [ 165.845275][ T5303] Bluetooth: hci1: command 0x0406 tx timeout [ 166.346880][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.349490][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.382597][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.385661][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.054920][ T7996] loop6: detected capacity change from 0 to 8 [ 167.058496][ T7996] Dev loop6: unable to read RDB block 8 [ 167.060420][ T7996] loop6: unable to read partition table [ 167.062637][ T7996] loop6: partition table beyond EOD, truncated [ 167.065040][ T7996] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 167.492642][ T8000] netlink: zone id is out of range [ 167.494393][ T8000] netlink: zone id is out of range [ 167.496239][ T8000] netlink: zone id is out of range [ 167.498299][ T8000] netlink: zone id is out of range [ 167.500493][ T8000] netlink: zone id is out of range [ 167.502138][ T8000] netlink: zone id is out of range [ 167.504011][ T8000] netlink: zone id is out of range [ 167.506228][ T8000] netlink: zone id is out of range [ 167.509261][ T8000] netlink: del zone limit has 4 unknown bytes [ 167.656668][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 167.659854][ T8002] binder: 8001:8002 ioctl c00c620f 80000040 returned -22 [ 168.433877][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.796272][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 169.472648][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.931889][ T5303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.935110][ C1] sched: DL replenish lagged too much [ 169.935369][ T5303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.940323][ T5303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.943436][ T5303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.946881][ T5303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.966409][ T8004] virt_wifi0 speed is unknown, defaulting to 1000 [ 170.044117][ T8004] chnl_net:caif_netlink_parms(): no params data found [ 170.172812][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.831325][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.858180][ T8014] binder: BINDER_SET_CONTEXT_MGR already set [ 170.860804][ T8014] binder: 8012:8014 ioctl 4018620d 80000040 returned -16 [ 171.057114][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.059380][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.061547][ T8004] bridge_slave_0: entered allmulticast mode [ 171.067206][ T8004] bridge_slave_0: entered promiscuous mode [ 171.070289][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.072569][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.074832][ T8004] bridge_slave_1: entered allmulticast mode [ 171.077573][ T8004] bridge_slave_1: entered promiscuous mode [ 171.184209][ T8004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.189103][ T8004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.256450][ T8004] team0: Port device team_slave_0 added [ 171.260084][ T8004] team0: Port device team_slave_1 added [ 171.323411][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.326077][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.334366][ T8004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.349460][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.351740][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.360091][ T8004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.407567][ T13] bridge_slave_1: left allmulticast mode [ 171.409493][ T13] bridge_slave_1: left promiscuous mode [ 171.411425][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.423949][ T13] bridge_slave_0: left allmulticast mode [ 171.425830][ T13] bridge_slave_0: left promiscuous mode [ 171.427704][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.005424][ T5945] Bluetooth: hci3: command tx timeout [ 172.219548][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.252302][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.310896][ T13] bond0 (unregistering): Released all slaves [ 172.356365][ T8004] hsr_slave_0: entered promiscuous mode [ 172.359934][ T8004] hsr_slave_1: entered promiscuous mode [ 172.362757][ T8004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.376019][ T8004] Cannot create hsr debugfs directory [ 172.515619][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 174.085186][ T5945] Bluetooth: hci3: command tx timeout [ 174.583782][ T8060] loop6: detected capacity change from 0 to 8 [ 174.668840][ T8060] Dev loop6: unable to read RDB block 8 [ 174.670722][ T8060] loop6: unable to read partition table [ 174.672598][ T8060] loop6: partition table beyond EOD, truncated [ 174.674563][ T8060] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 175.092536][ T13] hsr_slave_0: left promiscuous mode [ 175.107947][ T13] hsr_slave_1: left promiscuous mode [ 175.110091][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.112588][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.127733][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.130114][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.158613][ T13] veth1_macvtap: left promiscuous mode [ 175.162056][ T13] veth0_macvtap: left promiscuous mode [ 175.163719][ T5945] Bluetooth: hci0: unexpected event for opcode 0x202f [ 175.163848][ T13] veth1_vlan: left promiscuous mode [ 175.167729][ T13] veth0_vlan: left promiscuous mode [ 175.958466][ T8073] FAULT_INJECTION: forcing a failure. [ 175.958466][ T8073] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 175.971429][ T8073] CPU: 1 UID: 0 PID: 8073 Comm: syz.0.374 Not tainted 6.15.0-syzkaller-10954-gd00a83477e7a #0 PREEMPT(full) [ 175.971457][ T8073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.971464][ T8073] Call Trace: [ 175.971468][ T8073] [ 175.971473][ T8073] dump_stack_lvl+0x16c/0x1f0 [ 175.971492][ T8073] should_fail_ex+0x512/0x640 [ 175.971513][ T8073] _copy_from_user+0x2e/0xd0 [ 175.971525][ T8073] memdup_user+0x6b/0xe0 [ 175.971540][ T8073] strndup_user+0x78/0xe0 [ 175.971555][ T8073] __ia32_sys_fsopen+0xa0/0x240 [ 175.971571][ T8073] __do_fast_syscall_32+0x7c/0x3a0 [ 175.971588][ T8073] do_fast_syscall_32+0x32/0x80 [ 175.971603][ T8073] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.971618][ T8073] RIP: 0023:0xf70be579 [ 175.971626][ T8073] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 175.971637][ T8073] RSP: 002b:00000000f506c55c EFLAGS: 00000296 ORIG_RAX: 00000000000001ae [ 175.971648][ T8073] RAX: ffffffffffffffda RBX: 0000000080000440 RCX: 0000000000000001 [ 175.971655][ T8073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.971661][ T8073] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.971667][ T8073] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 175.971673][ T8073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.971686][ T8073] [ 176.165250][ T5945] Bluetooth: hci3: command tx timeout [ 178.150608][ T13] team0 (unregistering): Port device team_slave_1 removed [ 178.245254][ T5945] Bluetooth: hci3: command tx timeout [ 179.095788][ T13] team0 (unregistering): Port device team_slave_0 removed [ 180.074513][ T8098] loop6: detected capacity change from 0 to 8 [ 180.092573][ T8098] Dev loop6: unable to read RDB block 8 [ 180.094465][ T8098] loop6: unable to read partition table [ 180.106066][ T8098] loop6: partition table beyond EOD, truncated [ 180.108146][ T8098] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 181.948486][ T8004] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.988236][ T8004] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.001326][ T8004] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.023315][ T8004] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.251292][ T8004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.306419][ T8004] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.330814][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.332937][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.341663][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.343711][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.978064][ T8004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.002471][ T8004] veth0_vlan: entered promiscuous mode [ 183.012421][ T8004] veth1_vlan: entered promiscuous mode [ 183.027338][ T8004] veth0_macvtap: entered promiscuous mode [ 183.031268][ T8004] veth1_macvtap: entered promiscuous mode [ 183.042515][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.050353][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.056184][ T8004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.059318][ T8004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.062104][ T8004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.064750][ T8004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.109494][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.114024][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.132380][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.135615][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.443060][ T8145] loop6: detected capacity change from 0 to 8 [ 183.454722][ T8145] Dev loop6: unable to read RDB block 8 [ 183.462403][ T8145] loop6: unable to read partition table [ 183.464632][ T8145] loop6: partition table beyond EOD, truncated [ 183.472515][ T8145] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 184.832278][ T8158] input: syz1 as /devices/virtual/input/input27 [ 185.187785][ T101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.515051][ T101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.635910][ T101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.638647][ T8169] hfs: unable to load iocharset "io#harset" [ 186.992281][ T5303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.995913][ T5303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.998759][ T5303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.001917][ T5303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.004571][ T5303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.040235][ T8175] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.226389][ T8185] rtc_cmos 00:05: Alarms can be up to one day in the future [ 187.486269][ T101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.543769][ T8175] chnl_net:caif_netlink_parms(): no params data found [ 187.685199][ T8198] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 188.009839][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.012169][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.014459][ T8175] bridge_slave_0: entered allmulticast mode [ 188.018030][ T8175] bridge_slave_0: entered promiscuous mode [ 188.021269][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.025451][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.027917][ T8175] bridge_slave_1: entered allmulticast mode [ 188.030594][ T8175] bridge_slave_1: entered promiscuous mode [ 188.213339][ T8175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.219843][ T8175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.325060][ T101] bridge_slave_1: left allmulticast mode [ 188.327542][ T101] bridge_slave_1: left promiscuous mode [ 188.329994][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.354824][ T101] bridge_slave_0: left allmulticast mode [ 188.357287][ T101] bridge_slave_0: left promiscuous mode [ 188.359761][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.793381][ T8210] loop6: detected capacity change from 0 to 8 [ 188.802932][ T8210] Dev loop6: unable to read RDB block 8 [ 188.804809][ T8210] loop6: unable to read partition table [ 188.812894][ T8210] loop6: partition table beyond EOD, truncated [ 188.814935][ T8210] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 189.046345][ T5303] Bluetooth: hci3: command tx timeout [ 189.486644][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.494371][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.499398][ T101] bond0 (unregistering): Released all slaves [ 189.541108][ T8219] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 189.545469][ T8219] overlayfs: missing 'lowerdir' [ 189.570526][ T8187] syzkaller0: entered promiscuous mode [ 189.575212][ T8187] syzkaller0: entered allmulticast mode [ 189.583467][ T8175] team0: Port device team_slave_0 added [ 189.590021][ T8175] team0: Port device team_slave_1 added [ 189.785191][ T54] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.937960][ T54] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.940706][ T54] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.944295][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.947401][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 189.950862][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 189.956358][ T54] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.959194][ T54] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.961857][ T54] usb 5-1: Product: syz [ 189.963174][ T54] usb 5-1: Manufacturer: syz [ 189.969654][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 189.971593][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 189.974288][ T54] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 189.976306][ T54] cdc_wdm 5-1:1.0: Unknown control protocol [ 191.190102][ T5303] Bluetooth: hci3: command tx timeout [ 192.498884][ T34] usb 5-1: USB disconnect, device number 5 [ 192.565274][ T8231] input: syz1 as /devices/virtual/input/input28 [ 193.205481][ T5303] Bluetooth: hci3: command tx timeout [ 193.688816][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.691431][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.074424][ T8240] loop6: detected capacity change from 0 to 8 [ 195.087684][ T8240] Dev loop6: unable to read RDB block 8 [ 195.089435][ T8240] loop6: unable to read partition table [ 195.091262][ T8240] loop6: partition table beyond EOD, truncated [ 195.093184][ T8240] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 195.285519][ T5353] Dev loop6: unable to read RDB block 8 [ 195.285987][ T5303] Bluetooth: hci3: command tx timeout [ 195.287877][ T5353] loop6: unable to read partition table [ 195.292812][ T5353] loop6: partition table beyond EOD, truncated [ 195.363638][ T8245] input: syz1 as /devices/virtual/input/input29 [ 202.760095][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.779956][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.784158][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.787937][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.791464][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.805413][ T5303] Bluetooth: hci4: command tx timeout [ 206.885238][ T5303] Bluetooth: hci4: command tx timeout [ 208.965339][ T5303] Bluetooth: hci4: command tx timeout [ 211.045307][ T5303] Bluetooth: hci4: command tx timeout [ 213.298833][ T5945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.306001][ T5945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.309024][ T5945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.311870][ T5945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.315149][ T5945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.500108][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.502901][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.513112][ T8175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.739531][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.741919][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.751921][ T8175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.229217][ T8284] virt_wifi0 speed is unknown, defaulting to 1000 [ 215.238787][ T8175] hsr_slave_0: entered promiscuous mode [ 215.242006][ T8175] hsr_slave_1: entered promiscuous mode [ 215.244897][ T8175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.248691][ T8175] Cannot create hsr debugfs directory [ 215.259883][ T8264] virt_wifi0 speed is unknown, defaulting to 1000 [ 215.312796][ T101] hsr_slave_0: left promiscuous mode [ 215.321034][ T101] hsr_slave_1: left promiscuous mode [ 215.323325][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.325924][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.330009][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.332517][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.356397][ T101] veth1_macvtap: left promiscuous mode [ 215.359105][ T101] veth0_macvtap: left promiscuous mode [ 215.361031][ T101] veth1_vlan: left promiscuous mode [ 215.362901][ T101] veth0_vlan: left promiscuous mode [ 215.365221][ T5945] Bluetooth: hci5: command tx timeout [ 215.386701][ T40] audit: type=1326 audit(1748923468.317:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.4.413" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e579 code=0x0 [ 216.711961][ T101] team0 (unregistering): Port device team_slave_1 removed [ 216.847695][ T101] team0 (unregistering): Port device team_slave_0 removed [ 217.445245][ T5945] Bluetooth: hci5: command tx timeout [ 219.525252][ T5945] Bluetooth: hci5: command tx timeout [ 221.605197][ T5945] Bluetooth: hci5: command tx timeout [ 227.354408][ T8284] chnl_net:caif_netlink_parms(): no params data found [ 227.411543][ T8264] chnl_net:caif_netlink_parms(): no params data found [ 227.523560][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.526131][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.528658][ T8284] bridge_slave_0: entered allmulticast mode [ 227.532104][ T8284] bridge_slave_0: entered promiscuous mode [ 227.600654][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.603094][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.605978][ T8284] bridge_slave_1: entered allmulticast mode [ 227.609064][ T8284] bridge_slave_1: entered promiscuous mode [ 227.674126][ T8284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.680588][ T8284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.837455][ T8284] team0: Port device team_slave_0 added [ 227.841134][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.844173][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.847607][ T8264] bridge_slave_0: entered allmulticast mode [ 227.851543][ T8264] bridge_slave_0: entered promiscuous mode [ 227.932141][ T8284] team0: Port device team_slave_1 added [ 227.964417][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.966751][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.969465][ T8264] bridge_slave_1: entered allmulticast mode [ 227.973408][ T8264] bridge_slave_1: entered promiscuous mode [ 228.034435][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.038391][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 228.073633][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.076147][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.090757][ T8284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.131298][ T8264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.136670][ T8264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.139892][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.142068][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.150288][ T8284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.197129][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.200359][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 228.241534][ T8264] team0: Port device team_slave_0 added [ 228.287191][ T8264] team0: Port device team_slave_1 added [ 228.329535][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.332870][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 228.343969][ T8284] hsr_slave_0: entered promiscuous mode [ 228.346361][ T8284] hsr_slave_1: entered promiscuous mode [ 228.348432][ T8284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.350782][ T8284] Cannot create hsr debugfs directory [ 228.379398][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.381677][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.391203][ T8264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.400856][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.403587][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.412105][ T8264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.509588][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.513819][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 228.524858][ T8175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.571372][ T8264] hsr_slave_0: entered promiscuous mode [ 228.573576][ T8264] hsr_slave_1: entered promiscuous mode [ 228.576158][ T8264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.578850][ T8264] Cannot create hsr debugfs directory [ 228.598811][ T8175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.646331][ T8175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.657893][ T8175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.880324][ T101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.883512][ T101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 228.915471][ T8284] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 228.928440][ T8284] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 228.936487][ T8284] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 228.951205][ T8284] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.962923][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.981039][ T101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.984332][ T101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 229.027420][ T8264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.064271][ T8264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.072855][ T8264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.087171][ T8175] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.107201][ T101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.111011][ T101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 229.121612][ T8264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.142124][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.144427][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.158308][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.160615][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.223682][ T101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.226982][ T101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 229.242423][ T8284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.268920][ T8284] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.281810][ T8264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.287445][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.289625][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.311346][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.314211][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.344682][ T8264] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.401771][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.403958][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.416688][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.418860][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.444182][ T8175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.473629][ T101] bridge_slave_1: left allmulticast mode [ 229.478424][ T101] bridge_slave_1: left promiscuous mode [ 229.480274][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.501182][ T101] bridge_slave_0: left allmulticast mode [ 229.502978][ T101] bridge_slave_0: left promiscuous mode [ 229.504792][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.521482][ T101] bridge_slave_1: left allmulticast mode [ 229.523341][ T101] bridge_slave_1: left promiscuous mode [ 229.528367][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.539421][ T101] bridge_slave_0: left allmulticast mode [ 229.541614][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.211529][ T5303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.216717][ T5303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.220527][ T5303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.229805][ T5303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.232654][ T5303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.347421][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.351987][ T101] bond_slave_0: left allmulticast mode [ 230.359681][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.365046][ T101] bond_slave_1: left allmulticast mode [ 230.367431][ T101] bond0 (unregistering): Released all slaves [ 230.373768][ T101] bond1 (unregistering): Released all slaves [ 230.973269][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.993142][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.019572][ T101] bond0 (unregistering): Released all slaves [ 231.057328][ T8264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.069573][ T8175] veth0_vlan: entered promiscuous mode [ 231.074350][ T8175] veth1_vlan: entered promiscuous mode [ 231.095005][ T8175] veth0_macvtap: entered promiscuous mode [ 231.101336][ T8175] veth1_macvtap: entered promiscuous mode [ 231.110358][ T8362] virt_wifi0 speed is unknown, defaulting to 1000 [ 231.169032][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.177570][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.181879][ T8284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.193550][ T8175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.198355][ T8175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.201062][ T8175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.203770][ T8175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.337485][ T101] IPVS: stopping master sync thread 7339 ... [ 231.413608][ T8264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.245249][ T5945] Bluetooth: hci0: command tx timeout [ 232.878987][ T8362] chnl_net:caif_netlink_parms(): no params data found [ 232.908799][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.912103][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.102656][ T8362] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.104934][ T8362] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.107506][ T8362] bridge_slave_0: entered allmulticast mode [ 233.110730][ T8362] bridge_slave_0: entered promiscuous mode [ 233.118371][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.120814][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.137625][ T8362] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.140484][ T8362] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.143259][ T8362] bridge_slave_1: entered allmulticast mode [ 233.147161][ T8362] bridge_slave_1: entered promiscuous mode [ 233.257296][ T8362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.265745][ T8362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.269000][ T8284] veth0_vlan: entered promiscuous mode [ 233.548454][ T8362] team0: Port device team_slave_0 added [ 233.569424][ T8284] veth1_vlan: entered promiscuous mode [ 234.169199][ T8264] veth0_vlan: entered promiscuous mode [ 234.172611][ T8362] team0: Port device team_slave_1 added [ 234.267525][ T8284] veth0_macvtap: entered promiscuous mode [ 234.271163][ T8264] veth1_vlan: entered promiscuous mode [ 234.302249][ T8362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.304500][ T8362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.313848][ T8362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.319372][ T8284] veth1_macvtap: entered promiscuous mode [ 234.325199][ T5945] Bluetooth: hci0: command tx timeout [ 234.346564][ T8362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.349066][ T8362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.358102][ T8362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.413348][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.446744][ T8362] hsr_slave_0: entered promiscuous mode [ 234.449024][ T8362] hsr_slave_1: entered promiscuous mode [ 234.451565][ T8362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.453912][ T8362] Cannot create hsr debugfs directory [ 234.463982][ T8264] veth0_macvtap: entered promiscuous mode [ 234.467822][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.501354][ T8284] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.504772][ T8284] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.509076][ T8284] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.512522][ T8284] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.588890][ T8264] veth1_macvtap: entered promiscuous mode [ 234.750750][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.800361][ T101] hsr_slave_0: left promiscuous mode [ 234.809066][ T101] hsr_slave_1: left promiscuous mode [ 234.811087][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.813422][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.826794][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.829144][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.861111][ T101] hsr_slave_0: left promiscuous mode [ 234.867437][ T101] hsr_slave_1: left promiscuous mode [ 234.869685][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.872052][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.888507][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.890848][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.926287][ T101] veth1_macvtap: left promiscuous mode [ 234.928071][ T101] veth0_macvtap: left promiscuous mode [ 234.929865][ T101] veth1_vlan: left promiscuous mode [ 234.931536][ T101] veth0_vlan: left promiscuous mode [ 234.962403][ T101] veth1_macvtap: left promiscuous mode [ 234.964221][ T101] veth0_macvtap: left promiscuous mode [ 234.966183][ T101] veth1_vlan: left promiscuous mode [ 234.967857][ T101] veth0_vlan: left promiscuous mode [ 235.989965][ T5303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.994273][ T5303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.999439][ T5303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.006756][ T5303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.009529][ T5303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.405232][ T5303] Bluetooth: hci0: command tx timeout [ 236.429300][ T101] team0 (unregistering): Port device team_slave_1 removed [ 236.570558][ T101] team0 (unregistering): Port device team_slave_0 removed [ 238.085732][ T5303] Bluetooth: hci2: command tx timeout [ 238.485462][ T5303] Bluetooth: hci0: command tx timeout [ 240.165335][ T5303] Bluetooth: hci2: command tx timeout [ 240.200138][ T101] team0 (unregistering): Port device team_slave_1 removed [ 240.313382][ T101] team0 (unregistering): Port device team_slave_0 removed [ 241.037885][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.245290][ T5303] Bluetooth: hci2: command tx timeout [ 244.325234][ T5303] Bluetooth: hci2: command tx timeout [ 249.048520][ T8264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.051315][ T8264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.054044][ T8264] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.057241][ T8264] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.079610][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.083067][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.146884][ T8362] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 249.154424][ T8362] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 249.176330][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.178133][ T8362] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 249.178963][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.197998][ T8362] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 249.300454][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.303828][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.420952][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.435696][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.472271][ T8362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.483971][ T8362] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.504997][ T8362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.508369][ T8362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.616453][ T8362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.764248][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.766583][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.770490][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.773550][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.900799][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 249.968241][ T8362] veth0_vlan: entered promiscuous mode [ 250.031901][ T8362] veth1_vlan: entered promiscuous mode [ 250.035494][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.037814][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.040154][ T8414] bridge_slave_0: entered allmulticast mode [ 250.043120][ T8414] bridge_slave_0: entered promiscuous mode [ 250.051431][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.054964][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.058537][ T8414] bridge_slave_1: entered allmulticast mode [ 250.063293][ T8414] bridge_slave_1: entered promiscuous mode [ 250.101997][ T8362] veth0_macvtap: entered promiscuous mode [ 250.150447][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.157884][ T8362] veth1_macvtap: entered promiscuous mode [ 250.169789][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.099776][ T8465] netlink: 'syz.6.412': attribute type 4 has an invalid length. [ 255.129513][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.132225][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.664389][ T8414] team0: Port device team_slave_0 added [ 263.668641][ T8414] team0: Port device team_slave_1 added [ 263.767520][ T8362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.777469][ T8362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.856712][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.859646][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.895381][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.913911][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.5.417'. [ 263.915676][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.919067][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.930503][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.988120][ T8362] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.991493][ T8362] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.996774][ T8362] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.999539][ T8362] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.013513][ T101] IPVS: stop unused estimator thread 0... [ 264.126952][ T8414] hsr_slave_0: entered promiscuous mode [ 264.129418][ T8414] hsr_slave_1: entered promiscuous mode [ 264.363082][ T8483] netlink: 'syz.6.418': attribute type 4 has an invalid length. [ 265.207641][ T101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.073004][ T8414] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.137933][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.140449][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.304025][ T101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.328005][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.338035][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.137908][ T8414] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.910057][ T8497] loop6: detected capacity change from 0 to 8 [ 271.918145][ T8496] Dev loop6: unable to read RDB block 8 [ 271.920228][ T8496] loop6: unable to read partition table [ 271.922472][ T8496] loop6: partition table beyond EOD, truncated [ 272.166500][ T101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.205678][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.7.414'. [ 272.208500][ T8513] netlink: 244 bytes leftover after parsing attributes in process `syz.7.414'. [ 272.225884][ T8414] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.574574][ T101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.622296][ T8414] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.266502][ T101] bridge_slave_1: left allmulticast mode [ 278.274843][ T101] bridge_slave_1: left promiscuous mode [ 278.276885][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.291324][ T101] bridge_slave_0: left allmulticast mode [ 278.293136][ T101] bridge_slave_0: left promiscuous mode [ 278.295021][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.345705][ T101] bridge_slave_1: left allmulticast mode [ 278.349767][ T101] bridge_slave_1: left promiscuous mode [ 278.351716][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.370389][ T101] bridge_slave_0: left allmulticast mode [ 278.372251][ T101] bridge_slave_0: left promiscuous mode [ 278.374202][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.288676][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.303292][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.311539][ T101] bond0 (unregistering): Released all slaves [ 279.443882][ T8614] loop6: detected capacity change from 0 to 8 [ 279.463956][ T8614] Dev loop6: unable to read RDB block 8 [ 279.483120][ T8614] loop6: unable to read partition table [ 279.484973][ T8614] loop6: partition table beyond EOD, truncated [ 279.498674][ T8614] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 279.650678][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.425'. [ 279.695842][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.707484][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.714917][ T101] bond0 (unregistering): Released all slaves [ 280.217394][ T101] IPVS: stopping master sync thread 8198 ... [ 281.010225][ T8619] syzkaller0: entered promiscuous mode [ 281.012674][ T8619] syzkaller0: entered allmulticast mode [ 281.323813][ T5353] Dev loop6: unable to read RDB block 8 [ 281.329770][ T5353] loop6: unable to read partition table [ 281.332375][ T5353] loop6: partition table beyond EOD, truncated [ 281.332864][ T8414] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 281.499605][ T8414] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.134661][ T8649] nfs4: Unknown parameter '' [ 286.005168][ T5945] Bluetooth: hci0: command 0x0406 tx timeout [ 292.532940][ T8656] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 292.535152][ T8656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 292.571187][ T8656] vhci_hcd vhci_hcd.0: Device attached [ 293.343755][ T8149] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 294.692028][ T8657] vhci_hcd: connection reset by peer [ 294.696676][ T1206] vhci_hcd: stop threads [ 294.698391][ T1206] vhci_hcd: release socket [ 294.700465][ T1206] vhci_hcd: disconnect device [ 298.774898][ T8149] vhci_hcd: vhci_device speed not set [ 304.952105][ T8414] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 305.231259][ T8655] netdevsim netdevsim6: Direct firmware load for @ failed with error -2 [ 305.234545][ T8655] netdevsim netdevsim6: Falling back to sysfs fallback for: @ [ 306.348935][ T5956] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.349708][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.352751][ T5956] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.358145][ T5956] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.361006][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.361702][ T5956] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.364660][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.366656][ T5956] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.372991][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.384642][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.387951][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.397616][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.400420][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.408346][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.422689][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.859434][ T101] hsr_slave_0: left promiscuous mode [ 306.865362][ T101] hsr_slave_1: left promiscuous mode [ 306.867391][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.869780][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.879859][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.882301][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.986983][ T101] hsr_slave_0: left promiscuous mode [ 307.011106][ T101] hsr_slave_1: left promiscuous mode [ 307.023377][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.026553][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.030876][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.033380][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.080362][ T101] veth1_macvtap: left promiscuous mode [ 307.082620][ T101] veth0_macvtap: left promiscuous mode [ 307.084542][ T101] veth1_vlan: left promiscuous mode [ 307.086355][ T101] veth0_vlan: left promiscuous mode [ 307.120043][ T101] veth1_macvtap: left promiscuous mode [ 307.121862][ T101] veth0_macvtap: left promiscuous mode [ 307.123607][ T101] veth1_vlan: left promiscuous mode [ 307.126855][ T101] veth0_vlan: left promiscuous mode [ 308.485234][ T5303] Bluetooth: hci3: command tx timeout [ 308.485506][ T5944] Bluetooth: hci1: command tx timeout [ 308.489795][ T5956] Bluetooth: hci6: command tx timeout [ 308.991669][ T101] team0 (unregistering): Port device team_slave_1 removed [ 309.111809][ T101] team0 (unregistering): Port device team_slave_0 removed [ 309.611066][ T8707] loop6: detected capacity change from 0 to 8 [ 309.624120][ T8707] Dev loop6: unable to read RDB block 8 [ 309.631759][ T8707] loop6: unable to read partition table [ 309.633930][ T8707] loop6: partition table beyond EOD, truncated [ 309.641809][ T8707] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 310.565342][ T5944] Bluetooth: hci3: command tx timeout [ 310.566612][ T5303] Bluetooth: hci1: command tx timeout [ 310.566984][ T5956] Bluetooth: hci6: command tx timeout [ 310.913044][ T8711] loop6: detected capacity change from 0 to 8 [ 310.929757][ T8711] Dev loop6: unable to read RDB block 8 [ 310.940777][ T8711] loop6: unable to read partition table [ 310.943075][ T8711] loop6: partition table beyond EOD, truncated [ 310.951373][ T8711] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 311.843281][ T101] team0 (unregistering): Port device team_slave_1 removed [ 311.978095][ T101] team0 (unregistering): Port device team_slave_0 removed [ 312.648638][ T5956] Bluetooth: hci6: command tx timeout [ 312.648668][ T5944] Bluetooth: hci3: command tx timeout [ 312.649238][ T5303] Bluetooth: hci1: command tx timeout [ 314.725216][ T5944] Bluetooth: hci3: command tx timeout [ 314.725374][ T5956] Bluetooth: hci1: command tx timeout [ 314.725395][ T5303] Bluetooth: hci6: command tx timeout [ 316.571110][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.573763][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.143881][ T8665] chnl_net:caif_netlink_parms(): no params data found [ 321.313222][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.440'. [ 321.990270][ T8663] chnl_net:caif_netlink_parms(): no params data found [ 322.184898][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.189754][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.195370][ T8665] bridge_slave_0: entered allmulticast mode [ 322.198148][ T8665] bridge_slave_0: entered promiscuous mode [ 322.200917][ T8660] chnl_net:caif_netlink_parms(): no params data found [ 322.234140][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.237324][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.239679][ T8665] bridge_slave_1: entered allmulticast mode [ 322.242338][ T8665] bridge_slave_1: entered promiscuous mode [ 322.318008][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.320282][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.325806][ T8663] bridge_slave_0: entered allmulticast mode [ 322.328487][ T8663] bridge_slave_0: entered promiscuous mode [ 322.332622][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.334862][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.337354][ T8663] bridge_slave_1: entered allmulticast mode [ 322.340006][ T8663] bridge_slave_1: entered promiscuous mode [ 322.364058][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.432691][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.518052][ T8665] team0: Port device team_slave_0 added [ 322.530441][ T8663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.536935][ T8665] team0: Port device team_slave_1 added [ 322.544152][ T8663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.710086][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.712340][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.723994][ T8665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.732546][ T8663] team0: Port device team_slave_0 added [ 322.734931][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.743074][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.746630][ T8660] bridge_slave_0: entered allmulticast mode [ 322.749306][ T8660] bridge_slave_0: entered promiscuous mode [ 322.752275][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.754979][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.767763][ T8665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.772410][ T8663] team0: Port device team_slave_1 added [ 322.774420][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.777210][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.783641][ T8660] bridge_slave_1: entered allmulticast mode [ 322.786647][ T8660] bridge_slave_1: entered promiscuous mode [ 322.860666][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.862889][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.877694][ T8663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.958516][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.961373][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.972937][ T8663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.999455][ T8665] hsr_slave_0: entered promiscuous mode [ 323.001735][ T8665] hsr_slave_1: entered promiscuous mode [ 323.003809][ T8665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.008560][ T8665] Cannot create hsr debugfs directory [ 323.027851][ T8660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.044197][ T8660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.261655][ T8660] team0: Port device team_slave_0 added [ 323.266958][ T8663] hsr_slave_0: entered promiscuous mode [ 323.269224][ T8663] hsr_slave_1: entered promiscuous mode [ 323.271348][ T8663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.273788][ T8663] Cannot create hsr debugfs directory [ 323.302070][ T8660] team0: Port device team_slave_1 added [ 323.397371][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.399426][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.407293][ T8660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.411905][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.414075][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.422727][ T8660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.621277][ T8660] hsr_slave_0: entered promiscuous mode [ 323.623531][ T8660] hsr_slave_1: entered promiscuous mode [ 323.626013][ T8660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.628386][ T8660] Cannot create hsr debugfs directory [ 323.665483][ T101] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.756801][ T101] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.833642][ T101] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.911081][ T8663] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 323.948611][ T101] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.970527][ T8663] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 324.052122][ T8663] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 324.056993][ T8663] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 324.218874][ T101] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.297958][ T101] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.324656][ T8663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.338717][ T8663] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.343947][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.346314][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.356936][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.359205][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.432711][ T101] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.489722][ T8665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 324.539742][ T101] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.546317][ T8665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 324.561637][ T8665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.579133][ T8665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.610659][ T8660] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 324.630607][ T8660] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 324.647232][ T8660] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 324.664828][ T8660] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 324.777913][ T8663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.810817][ T101] bridge_slave_1: left allmulticast mode [ 324.812625][ T101] bridge_slave_1: left promiscuous mode [ 324.814481][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.839046][ T101] bridge_slave_0: left allmulticast mode [ 324.840823][ T101] bridge_slave_0: left promiscuous mode [ 324.842645][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.858204][ T101] bridge_slave_1: left allmulticast mode [ 324.860214][ T101] bridge_slave_1: left promiscuous mode [ 324.862118][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.877755][ T101] bridge_slave_0: left allmulticast mode [ 324.879611][ T101] bridge_slave_0: left promiscuous mode [ 324.881499][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.892342][ T101] bridge_slave_1: left allmulticast mode [ 324.894139][ T101] bridge_slave_1: left promiscuous mode [ 324.896119][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.911006][ T101] bridge_slave_0: left allmulticast mode [ 324.912762][ T101] bridge_slave_0: left promiscuous mode [ 324.914567][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.316979][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.326902][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.334735][ T101] bond0 (unregistering): Released all slaves [ 325.672645][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.679077][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.684232][ T101] bond0 (unregistering): Released all slaves [ 325.787843][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.803569][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.812822][ T101] bond0 (unregistering): Released all slaves [ 325.874939][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.894903][ T8665] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.934932][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.938063][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.952193][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.955273][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.004326][ T8660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.033365][ T8660] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.037745][ T8663] veth0_vlan: entered promiscuous mode [ 326.042282][ T8663] veth1_vlan: entered promiscuous mode [ 326.059599][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.061888][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.126132][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.128350][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.156527][ T8663] veth0_macvtap: entered promiscuous mode [ 326.164302][ T8663] veth1_macvtap: entered promiscuous mode [ 326.181535][ T8663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.200802][ T8663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.204880][ T8665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.214610][ T8663] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.218876][ T8663] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.221713][ T8663] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.224461][ T8663] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.355210][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.357786][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.401314][ T8660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.406336][ T8665] veth0_vlan: entered promiscuous mode [ 326.414386][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.418875][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.435650][ T8665] veth1_vlan: entered promiscuous mode [ 326.469316][ T8665] veth0_macvtap: entered promiscuous mode [ 326.473280][ T8665] veth1_macvtap: entered promiscuous mode [ 326.494243][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.563516][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.573134][ T8665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.612778][ T8665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.616153][ T8665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.619392][ T8665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.801637][ T101] hsr_slave_0: left promiscuous mode [ 326.811717][ T101] hsr_slave_1: left promiscuous mode [ 326.813781][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.818412][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.361645][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.364274][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.489841][ T101] hsr_slave_0: left promiscuous mode [ 327.498451][ T101] hsr_slave_1: left promiscuous mode [ 327.500533][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.503064][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.516745][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.519212][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.576068][ T101] hsr_slave_0: left promiscuous mode [ 327.611626][ T101] hsr_slave_1: left promiscuous mode [ 327.622942][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.662297][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.966446][ T101] veth1_macvtap: left promiscuous mode [ 327.968660][ T101] veth0_macvtap: left promiscuous mode [ 327.971611][ T101] veth1_vlan: left promiscuous mode [ 327.973458][ T101] veth0_vlan: left promiscuous mode [ 328.012933][ T101] veth1_macvtap: left promiscuous mode [ 328.015555][ T101] veth0_macvtap: left promiscuous mode [ 328.018828][ T101] veth1_vlan: left promiscuous mode [ 328.020811][ T101] veth0_vlan: left promiscuous mode [ 329.923300][ T101] team0 (unregistering): Port device team_slave_1 removed [ 330.060723][ T101] team0 (unregistering): Port device team_slave_0 removed [ 332.144422][ T101] team0 (unregistering): Port device team_slave_1 removed [ 332.270166][ T101] team0 (unregistering): Port device team_slave_0 removed [ 333.345927][ T101] team0 (unregistering): Port device team_slave_1 removed [ 333.410562][ T101] team0 (unregistering): Port device team_slave_0 removed [ 333.858351][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.861351][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.928689][ T8660] veth0_vlan: entered promiscuous mode [ 333.930884][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.938671][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.963129][ T8660] veth1_vlan: entered promiscuous mode [ 334.005819][ T8660] veth0_macvtap: entered promiscuous mode [ 334.009448][ T8660] veth1_macvtap: entered promiscuous mode [ 334.019364][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.041813][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.049624][ T8660] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.052350][ T8660] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.055316][ T8660] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.058021][ T8660] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.255169][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.258157][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.336719][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.339534][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.110644][ T101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.367375][ T101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.720521][ T101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.095767][ T101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.189070][ T5303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.192554][ T5303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.195442][ T5303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.210204][ T5303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.212725][ T5303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.428422][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.435380][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.438863][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.443101][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.446440][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.515256][ T101] bridge_slave_1: left allmulticast mode [ 337.517076][ T101] bridge_slave_1: left promiscuous mode [ 337.524196][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.543552][ T101] bridge_slave_0: left allmulticast mode [ 337.545957][ T101] bridge_slave_0: left promiscuous mode [ 337.547833][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.258652][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.276829][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.291857][ T101] bond0 (unregistering): Released all slaves [ 339.125205][ T5303] Bluetooth: hci5: command 0x0406 tx timeout [ 339.285313][ T5303] Bluetooth: hci0: command tx timeout [ 339.525641][ T5303] Bluetooth: hci2: command tx timeout [ 341.366320][ T5956] Bluetooth: hci0: command tx timeout [ 341.605379][ T5956] Bluetooth: hci2: command tx timeout [ 342.479782][ T8976] syzkaller0: entered promiscuous mode [ 342.486921][ T8976] syzkaller0: entered allmulticast mode [ 342.925614][ T8978] chnl_net:caif_netlink_parms(): no params data found [ 343.445324][ T5956] Bluetooth: hci0: command tx timeout [ 343.685387][ T5956] Bluetooth: hci2: command tx timeout [ 345.525317][ T5956] Bluetooth: hci0: command tx timeout [ 345.765321][ T5956] Bluetooth: hci2: command tx timeout [ 352.424264][ T5303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 352.429121][ T5303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 352.432445][ T5303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.436824][ T5303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.439601][ T5303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.458528][ T5956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.466462][ T5956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.470086][ T5956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.473069][ T5956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.481388][ T5956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.485255][ T5956] Bluetooth: hci3: command tx timeout [ 355.525298][ T5956] Bluetooth: hci4: command tx timeout [ 356.565338][ T5956] Bluetooth: hci3: command tx timeout [ 357.605172][ T5956] Bluetooth: hci4: command tx timeout [ 358.651137][ T5956] Bluetooth: hci3: command tx timeout [ 359.685331][ T5956] Bluetooth: hci4: command tx timeout [ 360.733706][ T5956] Bluetooth: hci3: command tx timeout [ 361.765269][ T5956] Bluetooth: hci4: command tx timeout [ 363.118415][ T8984] chnl_net:caif_netlink_parms(): no params data found [ 363.183779][ T101] hsr_slave_0: left promiscuous mode [ 363.188595][ T101] hsr_slave_1: left promiscuous mode [ 363.190638][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.192907][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.200084][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.203087][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.230148][ T101] veth1_macvtap: left promiscuous mode [ 363.231962][ T101] veth0_macvtap: left promiscuous mode [ 363.233793][ T101] veth1_vlan: left promiscuous mode [ 363.237306][ T101] veth0_vlan: left promiscuous mode [ 364.129218][ T101] team0 (unregistering): Port device team_slave_1 removed [ 364.250441][ T101] team0 (unregistering): Port device team_slave_0 removed [ 365.070723][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.073100][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.080506][ T8978] bridge_slave_0: entered allmulticast mode [ 365.084476][ T8978] bridge_slave_0: entered promiscuous mode [ 365.089417][ T8978] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.092292][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.096593][ T8978] bridge_slave_1: entered allmulticast mode [ 365.099198][ T8978] bridge_slave_1: entered promiscuous mode [ 365.155674][ T8984] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.159918][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.162813][ T8984] bridge_slave_0: entered allmulticast mode [ 365.166506][ T8984] bridge_slave_0: entered promiscuous mode [ 365.238861][ T8978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.250814][ T8984] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.253069][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.255506][ T8984] bridge_slave_1: entered allmulticast mode [ 365.258191][ T8984] bridge_slave_1: entered promiscuous mode [ 365.299963][ T8978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.305873][ T8984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.352758][ T8984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.434537][ T8978] team0: Port device team_slave_0 added [ 365.442025][ T8984] team0: Port device team_slave_0 added [ 365.451664][ T8978] team0: Port device team_slave_1 added [ 365.499179][ T8984] team0: Port device team_slave_1 added [ 365.616027][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.618457][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.630666][ T8978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.639385][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.641753][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.649706][ T8978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.655676][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.658019][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.666462][ T8984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.674281][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.677791][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.685671][ T8984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.843420][ T8978] hsr_slave_0: entered promiscuous mode [ 365.846051][ T8978] hsr_slave_1: entered promiscuous mode [ 365.855782][ T8984] hsr_slave_0: entered promiscuous mode [ 365.858401][ T8984] hsr_slave_1: entered promiscuous mode [ 365.860515][ T8984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.862843][ T8984] Cannot create hsr debugfs directory [ 365.872939][ T9006] chnl_net:caif_netlink_parms(): no params data found [ 365.989292][ T9003] chnl_net:caif_netlink_parms(): no params data found [ 366.270511][ T101] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.348056][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.350670][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.353583][ T9006] bridge_slave_0: entered allmulticast mode [ 366.358040][ T9006] bridge_slave_0: entered promiscuous mode [ 366.363476][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.365811][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.368039][ T9006] bridge_slave_1: entered allmulticast mode [ 366.370599][ T9006] bridge_slave_1: entered promiscuous mode [ 366.437518][ T101] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.490040][ T9006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.493341][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.496769][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.499140][ T9003] bridge_slave_0: entered allmulticast mode [ 366.501738][ T9003] bridge_slave_0: entered promiscuous mode [ 366.517773][ T9006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.521781][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.524369][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.526947][ T9003] bridge_slave_1: entered allmulticast mode [ 366.529730][ T9003] bridge_slave_1: entered promiscuous mode [ 366.553378][ T101] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.637728][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.642478][ T9006] team0: Port device team_slave_0 added [ 366.658408][ T101] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.724809][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.730185][ T9006] team0: Port device team_slave_1 added [ 366.802042][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.804374][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.812523][ T9006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.821496][ T9003] team0: Port device team_slave_0 added [ 366.826741][ T9003] team0: Port device team_slave_1 added [ 366.829003][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.831370][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.839450][ T9006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.990562][ T9006] hsr_slave_0: entered promiscuous mode [ 366.993413][ T9006] hsr_slave_1: entered promiscuous mode [ 366.995784][ T9006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.998039][ T9006] Cannot create hsr debugfs directory [ 367.002939][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.005353][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.013164][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.018620][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.020745][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.028656][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.152184][ T9003] hsr_slave_0: entered promiscuous mode [ 367.154522][ T9003] hsr_slave_1: entered promiscuous mode [ 367.156964][ T9003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.159228][ T9003] Cannot create hsr debugfs directory [ 367.173884][ T101] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.287967][ T101] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.384552][ T101] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.464366][ T101] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.605290][ T101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.678065][ T101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.745794][ T101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.821141][ T101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.915826][ T101] bridge_slave_1: left allmulticast mode [ 367.917565][ T101] bridge_slave_1: left promiscuous mode [ 367.919356][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.923746][ T101] bridge_slave_0: left allmulticast mode [ 367.927379][ T101] bridge_slave_0: left promiscuous mode [ 367.929162][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.936718][ T101] bridge_slave_1: left allmulticast mode [ 367.938429][ T101] bridge_slave_1: left promiscuous mode [ 367.940201][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.944420][ T101] bridge_slave_0: left allmulticast mode [ 367.946398][ T101] bridge_slave_0: left promiscuous mode [ 367.948170][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.259094][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.263592][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.268634][ T101] bond0 (unregistering): Released all slaves [ 368.489765][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.493577][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.498089][ T101] bond0 (unregistering): Released all slaves [ 368.713963][ T101] bond0 (unregistering): Released all slaves [ 368.824644][ T101] tipc: Disabling bearer [ 368.834584][ T101] tipc: Left network mode [ 368.844375][ T101] IPVS: stopping master sync thread 6382 ... [ 369.558341][ T101] hsr_slave_0: left promiscuous mode [ 369.561081][ T101] hsr_slave_1: left promiscuous mode [ 369.563636][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.568094][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.573307][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.576498][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.582714][ T101] hsr_slave_0: left promiscuous mode [ 369.585829][ T101] hsr_slave_1: left promiscuous mode [ 369.588092][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.590373][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.593068][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.595447][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.598925][ T101] hsr_slave_0: left promiscuous mode [ 369.600958][ T101] hsr_slave_1: left promiscuous mode [ 369.653030][ T101] veth1_macvtap: left promiscuous mode [ 369.654787][ T101] veth0_macvtap: left promiscuous mode [ 369.656650][ T101] veth1_vlan: left promiscuous mode [ 369.658339][ T101] veth0_vlan: left promiscuous mode [ 369.660806][ T101] veth1_macvtap: left promiscuous mode [ 369.662535][ T101] veth0_macvtap: left promiscuous mode [ 369.664303][ T101] veth1_vlan: left promiscuous mode [ 369.666144][ T101] veth0_vlan: left promiscuous mode [ 369.668562][ T101] veth1_macvtap: left promiscuous mode [ 369.670336][ T101] veth0_macvtap: left promiscuous mode [ 370.300496][ T101] team0 (unregistering): Port device team_slave_1 removed [ 370.366267][ T101] team0 (unregistering): Port device team_slave_0 removed [ 371.362405][ T101] team0 (unregistering): Port device team_slave_1 removed [ 371.426844][ T101] team0 (unregistering): Port device team_slave_0 removed [ 373.245007][ T8984] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.259396][ T8984] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.263504][ T8984] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.274057][ T8984] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.335237][ T8984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.361658][ T8984] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.371342][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.374160][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.396129][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.399002][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.527715][ T8984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.549165][ T8984] veth0_vlan: entered promiscuous mode [ 373.553803][ T8984] veth1_vlan: entered promiscuous mode [ 373.567032][ T8984] veth0_macvtap: entered promiscuous mode [ 373.577370][ T8984] veth1_macvtap: entered promiscuous mode [ 373.592069][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.597964][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.602756][ T8984] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.605860][ T8984] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.608524][ T8984] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.611233][ T8984] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.686819][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.689258][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.704466][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.707252][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.211393][ T8978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.217257][ T8978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.222025][ T8978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.240309][ T8978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.291019][ T9006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.295757][ T9006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.302176][ T9006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.307071][ T9006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.381451][ T9003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.389301][ T9003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 374.406330][ T9003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.415268][ T9003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 374.437003][ T101] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.451189][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.480572][ T8978] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.491677][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.493851][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.502429][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.504676][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.522331][ T101] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.543130][ T9006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.569186][ T9006] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.584254][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.587160][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.597672][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.600467][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.617573][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.636625][ T101] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.672741][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.699215][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.701817][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.707675][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.710627][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.728625][ T101] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.741250][ T8978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.775770][ T8978] veth0_vlan: entered promiscuous mode [ 374.780570][ T8978] veth1_vlan: entered promiscuous mode [ 374.803109][ T8978] veth0_macvtap: entered promiscuous mode [ 374.811624][ T8978] veth1_macvtap: entered promiscuous mode [ 374.823671][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.834142][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.868479][ T8978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.871641][ T8978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.874368][ T8978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.877297][ T8978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.917815][ T101] bridge_slave_1: left allmulticast mode [ 374.920470][ T101] bridge_slave_1: left promiscuous mode [ 374.922466][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.927455][ T101] bridge_slave_0: left allmulticast mode [ 374.929250][ T101] bridge_slave_0: left promiscuous mode [ 374.931120][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.226808][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.230790][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.234165][ T101] bond0 (unregistering): Released all slaves [ 375.245809][ T9006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.268813][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.271278][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.278852][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.332403][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.334798][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.350357][ T9006] veth0_vlan: entered promiscuous mode [ 375.367696][ T9006] veth1_vlan: entered promiscuous mode [ 375.376905][ T9003] veth0_vlan: entered promiscuous mode [ 375.388339][ T9003] veth1_vlan: entered promiscuous mode [ 375.400034][ T9006] veth0_macvtap: entered promiscuous mode [ 375.404410][ T9006] veth1_macvtap: entered promiscuous mode [ 375.416484][ T9006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.431256][ T9003] veth0_macvtap: entered promiscuous mode [ 375.435661][ T9006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.440454][ T9003] veth1_macvtap: entered promiscuous mode [ 375.443982][ T9006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.449506][ T9006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.452423][ T9006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.455022][ T9006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.494059][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.508540][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.519687][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.520982][ T9003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.522185][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.524837][ T9003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.531249][ T9003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.534784][ T9003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.550484][ T101] hsr_slave_0: left promiscuous mode [ 375.552521][ T101] hsr_slave_1: left promiscuous mode [ 375.554487][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.557954][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.560546][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.562805][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.577354][ T101] veth1_macvtap: left promiscuous mode [ 375.579084][ T101] veth0_macvtap: left promiscuous mode [ 376.053800][ T101] team0 (unregistering): Port device team_slave_1 removed [ 376.118145][ T101] team0 (unregistering): Port device team_slave_0 removed [ 376.609709][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.612332][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.612482][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.617362][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.630519][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.633173][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.962087][ T101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.619899][ T101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.699459][ T101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.777660][ T101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.862468][ T101] bridge_slave_1: left allmulticast mode [ 377.864286][ T101] bridge_slave_1: left promiscuous mode [ 377.866396][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.870289][ T101] bridge_slave_0: left allmulticast mode [ 377.872093][ T101] bridge_slave_0: left promiscuous mode [ 377.873931][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.019228][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.021278][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.097880][ T5303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.101450][ T5303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.104431][ T5303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.107673][ T5303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.110212][ T5303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.191667][ T9256] loop6: detected capacity change from 0 to 8 [ 378.198475][ T9256] Dev loop6: unable to read RDB block 8 [ 378.200334][ T9256] loop6: unable to read partition table [ 378.200553][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.202184][ T9256] loop6: partition table beyond EOD, truncated [ 378.207414][ T9256] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 378.210542][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.216775][ T101] bond0 (unregistering): Released all slaves [ 378.368946][ T9259] chnl_net:caif_netlink_parms(): no params data found [ 378.482105][ T9259] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.498588][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.501962][ T9259] bridge_slave_0: entered allmulticast mode [ 378.506997][ T9251] tmpfs: Bad value for 'mpol' [ 378.508890][ T9259] bridge_slave_0: entered promiscuous mode [ 378.529092][ T9259] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.532139][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.535651][ T9259] bridge_slave_1: entered allmulticast mode [ 378.538372][ T9259] bridge_slave_1: entered promiscuous mode [ 378.607694][ T9259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.613161][ T9259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.658934][ T9259] team0: Port device team_slave_0 added [ 378.662962][ T9259] team0: Port device team_slave_1 added [ 378.684661][ T101] hsr_slave_0: left promiscuous mode [ 378.687799][ T101] hsr_slave_1: left promiscuous mode [ 378.690640][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.693743][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.697912][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.700707][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.716110][ T101] veth1_macvtap: left promiscuous mode [ 378.718011][ T101] veth0_macvtap: left promiscuous mode [ 378.720366][ T101] veth1_vlan: left promiscuous mode [ 378.722655][ T101] veth0_vlan: left promiscuous mode [ 378.849267][ T5353] Dev loop6: unable to read RDB block 8 [ 378.851142][ T5353] loop6: unable to read partition table [ 378.862186][ T5353] loop6: partition table beyond EOD, truncated [ 378.972655][ T9297] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 378.975590][ T9297] overlayfs: missing 'lowerdir' [ 379.275166][ T8811] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 379.447251][ T8811] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 379.450577][ T8811] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 379.453813][ T8811] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.457413][ T8811] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 379.467561][ T8811] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 379.474829][ T8811] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.484124][ T8811] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.487738][ T8811] usb 6-1: Product: syz [ 379.489777][ T8811] usb 6-1: Manufacturer: syz [ 379.505851][ T8811] cdc_wdm 6-1:1.0: skipping garbage [ 379.507535][ T8811] cdc_wdm 6-1:1.0: skipping garbage [ 379.511388][ T8811] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 379.513260][ T8811] cdc_wdm 6-1:1.0: Unknown control protocol [ 379.761230][ T101] team0 (unregistering): Port device team_slave_1 removed [ 379.830526][ T101] team0 (unregistering): Port device team_slave_0 removed [ 380.167178][ T5956] Bluetooth: hci1: command tx timeout [ 380.390754][ T9259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.393606][ T9259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.403933][ T9259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.411193][ T9311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.414741][ T9311] batadv_slave_0: entered promiscuous mode [ 380.455304][ T9259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.457511][ T9259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.474098][ T9259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.512169][ T9325] input: syz1 as /devices/virtual/input/input30 [ 380.573067][ T9259] hsr_slave_0: entered promiscuous mode [ 380.577641][ T9259] hsr_slave_1: entered promiscuous mode [ 380.579925][ T9259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.583208][ T9259] Cannot create hsr debugfs directory [ 380.668258][ T9331] input: syz1 as /devices/virtual/input/input31 [ 381.144909][ T9259] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 381.155593][ T9259] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 381.161686][ T9259] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 381.167795][ T9259] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 381.210555][ T9259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.225687][ T9259] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.231562][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.233796][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.240058][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.242345][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.401551][ T9259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.426529][ T9259] veth0_vlan: entered promiscuous mode [ 381.432657][ T9259] veth1_vlan: entered promiscuous mode [ 381.448659][ T9259] veth0_macvtap: entered promiscuous mode [ 381.452713][ T9259] veth1_macvtap: entered promiscuous mode [ 381.460294][ T9370] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 381.463208][ T9370] overlayfs: missing 'lowerdir' [ 381.479722][ T9259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.486148][ T9259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.490884][ T9259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.493766][ T9259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.496629][ T9259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.499484][ T9259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.533295][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.537326][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.552626][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.557181][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.694812][ T9382] loop6: detected capacity change from 0 to 8 [ 381.699869][ T9382] Dev loop6: unable to read RDB block 8 [ 381.701708][ T9382] loop6: unable to read partition table [ 381.703940][ T9382] loop6: partition table beyond EOD, truncated [ 381.706090][ T9382] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 381.735431][ T3335] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 381.906464][ T3335] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 381.909454][ T3335] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 381.912909][ T3335] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 381.916143][ T3335] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 381.920164][ T3335] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 381.925435][ T3335] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.928888][ T3335] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.931566][ T3335] usb 8-1: Product: syz [ 381.933069][ T3335] usb 8-1: Manufacturer: syz [ 381.937089][ T60] usb 6-1: USB disconnect, device number 7 [ 381.938991][ T3335] cdc_wdm 8-1:1.0: skipping garbage [ 381.941560][ T3335] cdc_wdm 8-1:1.0: skipping garbage [ 381.949119][ T3335] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 381.953452][ T3335] cdc_wdm 8-1:1.0: Unknown control protocol [ 382.031595][ T9398] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 382.035404][ T9398] overlayfs: missing 'lowerdir' [ 382.365196][ T60] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 382.415170][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 382.517166][ T60] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 382.521993][ T60] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 382.527383][ T60] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 382.530346][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 382.533808][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 382.538626][ T60] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 382.541551][ T60] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 382.544103][ T60] usb 6-1: Product: syz [ 382.546639][ T60] usb 6-1: Manufacturer: syz [ 382.562198][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 382.567217][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 382.571220][ T60] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 382.573087][ T60] cdc_wdm 6-1:1.0: Unknown control protocol [ 383.790680][ T97] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.403847][ T8811] usb 8-1: USB disconnect, device number 6 [ 384.983493][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 384.983648][ T8149] usb 6-1: USB disconnect, device number 8 [ 384.985681][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 384.990060][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 385.725187][ T5981] ================================================================== [ 385.727690][ T5981] BUG: KASAN: slab-out-of-bounds in cache_clean+0x8bd/0x9a0 [ 385.729942][ T5981] Read of size 8 at addr ffff88806b3c0800 by task kworker/3:3/5981 [ 385.733813][ T5981] [ 385.734581][ T5981] CPU: 3 UID: 0 PID: 5981 Comm: kworker/3:3 Not tainted 6.15.0-syzkaller-10954-gd00a83477e7a #0 PREEMPT(full) [ 385.734596][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 385.734603][ T5981] Workqueue: events_power_efficient do_cache_clean [ 385.734617][ T5981] Call Trace: [ 385.734621][ T5981] [ 385.734625][ T5981] dump_stack_lvl+0x116/0x1f0 [ 385.734641][ T5981] print_report+0xcd/0x680 [ 385.734656][ T5981] ? __virt_addr_valid+0x81/0x610 [ 385.734672][ T5981] ? __phys_addr+0xe8/0x180 [ 385.734688][ T5981] ? cache_clean+0x8bd/0x9a0 [ 385.734696][ T5981] kasan_report+0xe0/0x110 [ 385.734710][ T5981] ? cache_clean+0x8bd/0x9a0 [ 385.734721][ T5981] cache_clean+0x8bd/0x9a0 [ 385.734730][ T5981] ? __pfx_cache_clean+0x10/0x10 [ 385.734749][ T5981] do_cache_clean+0x29/0xa0 [ 385.734758][ T5981] process_one_work+0x9cf/0x1b70 [ 385.734774][ T5981] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 385.734789][ T5981] ? __pfx_process_one_work+0x10/0x10 [ 385.734822][ T5981] ? assign_work+0x1a0/0x250 [ 385.734835][ T5981] worker_thread+0x6c8/0xf10 [ 385.734850][ T5981] ? __kthread_parkme+0x19e/0x250 [ 385.734867][ T5981] ? __pfx_worker_thread+0x10/0x10 [ 385.734880][ T5981] kthread+0x3c2/0x780 [ 385.734892][ T5981] ? __pfx_kthread+0x10/0x10 [ 385.734903][ T5981] ? rcu_is_watching+0x12/0xc0 [ 385.734919][ T5981] ? __pfx_kthread+0x10/0x10 [ 385.734931][ T5981] ret_from_fork+0x5d4/0x6f0 [ 385.734942][ T5981] ? __pfx_kthread+0x10/0x10 [ 385.734954][ T5981] ret_from_fork_asm+0x1a/0x30 [ 385.734968][ T5981] [ 385.734971][ T5981] [ 385.786219][ T5981] Allocated by task 9006: [ 385.787531][ T5981] kasan_save_stack+0x33/0x60 [ 385.788977][ T5981] kasan_save_track+0x14/0x30 [ 385.790415][ T5981] __kasan_kmalloc+0xaa/0xb0 [ 385.791853][ T5981] __kmalloc_noprof+0x223/0x510 [ 385.793358][ T5981] cache_create_net+0x9d/0x220 [ 385.794830][ T5981] unix_gid_cache_create+0x60/0x130 [ 385.796405][ T5981] sunrpc_init_net+0x71/0x190 [ 385.797860][ T5981] ops_init+0x1e2/0x5f0 [ 385.799157][ T5981] setup_net+0x1ff/0x510 [ 385.800499][ T5981] copy_net_ns+0x2a6/0x5f0 [ 385.801850][ T5981] create_new_namespaces+0x3ea/0xa90 [ 385.803451][ T5981] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 385.805163][ T5981] ksys_unshare+0x45b/0xa40 [ 385.806604][ T5981] __ia32_sys_unshare+0x30/0x40 [ 385.808158][ T5981] __do_fast_syscall_32+0x7c/0x3a0 [ 385.809781][ T5981] do_fast_syscall_32+0x32/0x80 [ 385.811522][ T5981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.813535][ T5981] [ 385.814324][ T5981] The buggy address belongs to the object at ffff88806b3c0000 [ 385.814324][ T5981] which belongs to the cache kmalloc-2k of size 2048 [ 385.818622][ T5981] The buggy address is located 0 bytes to the right of [ 385.818622][ T5981] allocated 2048-byte region [ffff88806b3c0000, ffff88806b3c0800) [ 385.823127][ T5981] [ 385.823908][ T5981] The buggy address belongs to the physical page: [ 385.825920][ T5981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806b3c1000 pfn:0x6b3c0 [ 385.829062][ T5981] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 385.831703][ T5981] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 385.834378][ T5981] page_type: f5(slab) [ 385.835663][ T5981] raw: 04fff00000000240 ffff88801b442f00 ffffea000130d810 ffff888040400948 [ 385.838322][ T5981] raw: ffff88806b3c1000 0000000000080005 00000000f5000000 0000000000000000 [ 385.841009][ T5981] head: 04fff00000000240 ffff88801b442f00 ffffea000130d810 ffff888040400948 [ 385.843707][ T5981] head: ffff88806b3c1000 0000000000080005 00000000f5000000 0000000000000000 [ 385.846388][ T5981] head: 04fff00000000003 ffffea0001acf001 00000000ffffffff 00000000ffffffff [ 385.849077][ T5981] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 385.851786][ T5981] page dumped because: kasan: bad access detected [ 385.853780][ T5981] page_owner tracks the page as allocated [ 385.855562][ T5981] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5940, tgid 5940 (syz-executor), ts 45846546709, free_ts 0 [ 385.861607][ T5981] post_alloc_hook+0x1c0/0x230 [ 385.863148][ T5981] get_page_from_freelist+0x1321/0x3890 [ 385.864896][ T5981] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 385.866759][ T5981] alloc_pages_mpol+0x1fb/0x550 [ 385.868332][ T5981] new_slab+0x23b/0x330 [ 385.869651][ T5981] ___slab_alloc+0xd9c/0x1940 [ 385.871171][ T5981] __slab_alloc.constprop.0+0x56/0xb0 [ 385.872872][ T5981] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 385.874988][ T5981] kmalloc_reserve+0xef/0x2c0 [ 385.876487][ T5981] pskb_expand_head+0x238/0x1030 [ 385.878060][ T5981] netlink_trim+0x22d/0x310 [ 385.879518][ T5981] netlink_broadcast_filtered+0xca/0xf10 [ 385.881314][ T5981] nlmsg_notify+0x9e/0x220 [ 385.882740][ T5981] rtmsg_ifinfo+0x174/0x1a0 [ 385.884194][ T5981] __dev_notify_flags+0x24c/0x2e0 [ 385.885795][ T5981] rtnl_configure_link+0x1b5/0x280 [ 385.887419][ T5981] page_owner free stack trace missing [ 385.889111][ T5981] [ 385.889911][ T5981] Memory state around the buggy address: [ 385.891686][ T5981] ffff88806b3c0700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.894173][ T5981] ffff88806b3c0780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.896669][ T5981] >ffff88806b3c0800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 385.899172][ T5981] ^ [ 385.900481][ T5981] ffff88806b3c0880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 385.902983][ T5981] ffff88806b3c0900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 385.905463][ T5981] ================================================================== [ 385.908319][ T5981] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 385.910588][ T5981] CPU: 3 UID: 0 PID: 5981 Comm: kworker/3:3 Not tainted 6.15.0-syzkaller-10954-gd00a83477e7a #0 PREEMPT(full) [ 385.914192][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 385.917533][ T5981] Workqueue: events_power_efficient do_cache_clean [ 385.919580][ T5981] Call Trace: [ 385.920676][ T5981] [ 385.921622][ T5981] dump_stack_lvl+0x3d/0x1f0 [ 385.923092][ T5981] panic+0x71c/0x800 [ 385.924339][ T5981] ? __pfx_panic+0x10/0x10 [ 385.925749][ T5981] ? irqentry_exit+0x3b/0x90 [ 385.927215][ T5981] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.928867][ T5981] ? cache_clean+0x8bd/0x9a0 [ 385.930353][ T5981] ? check_panic_on_warn+0x1f/0xb0 [ 385.931971][ T5981] ? cache_clean+0x8bd/0x9a0 [ 385.933432][ T5981] check_panic_on_warn+0xab/0xb0 [ 385.935012][ T5981] end_report+0x107/0x170 [ 385.936381][ T5981] kasan_report+0xee/0x110 [ 385.937793][ T5981] ? cache_clean+0x8bd/0x9a0 [ 385.939268][ T5981] cache_clean+0x8bd/0x9a0 [ 385.940710][ T5981] ? __pfx_cache_clean+0x10/0x10 [ 385.942280][ T5981] do_cache_clean+0x29/0xa0 [ 385.943728][ T5981] process_one_work+0x9cf/0x1b70 [ 385.945292][ T5981] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 385.947336][ T5981] ? __pfx_process_one_work+0x10/0x10 [ 385.949029][ T5981] ? assign_work+0x1a0/0x250 [ 385.950512][ T5981] worker_thread+0x6c8/0xf10 [ 385.951983][ T5981] ? __kthread_parkme+0x19e/0x250 [ 385.953576][ T5981] ? __pfx_worker_thread+0x10/0x10 [ 385.955192][ T5981] kthread+0x3c2/0x780 [ 385.956485][ T5981] ? __pfx_kthread+0x10/0x10 [ 385.957943][ T5981] ? rcu_is_watching+0x12/0xc0 [ 385.959461][ T5981] ? __pfx_kthread+0x10/0x10 [ 385.960954][ T5981] ret_from_fork+0x5d4/0x6f0 [ 385.962415][ T5981] ? __pfx_kthread+0x10/0x10 [ 385.963887][ T5981] ret_from_fork_asm+0x1a/0x30 [ 385.965412][ T5981] [ 385.967078][ T5981] Kernel Offset: disabled [ 385.968457][ T5981] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:07:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000497f01 RBX=0000000000000000 RCX=ffffffff8b799c79 RDX=0000000000000000 RSI=ffffffff8dc02fb2 RDI=ffffffff8bf52ee0 RBP=fffffbfff1c12ef0 RSP=ffffffff8e007e08 R8 =0000000000000001 R9 =ffffed100564663d R10=ffff88802b2331eb R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097780 R14=ffffffff9087b250 R15=0000000000000000 RIP=ffffffff8b7987df RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097775000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056320d7ae950 CR3=0000000064c87000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fff800 Opmask01=000000000000001c Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadac2f2b20 00007fadac2f2b20 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000075676f008685 898884828183873a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000843d7365 6361667265746e69 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 34353930312d7265 00007fadac1b9d48 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000613765373734 000056320d7af7a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65722f6574617473 2d6b6f6f682f6463 706368642f6e7572 2f7261762f3d6663 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00706368642e3268 74652e666e6f632e 766c6f7365722f65 746174732d6b6f6f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 524e584f01828700 00000084004e585e 5c5b4f5849535400 870058505c535b54 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056320d7bb2f8 0000000000000000 000000000000000f 000056320d00873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056320d7b5b58 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000081ae8b RBX=0000000000000001 RCX=ffffffff8b799c79 RDX=0000000000000000 RSI=ffffffff8dc02fb2 RDI=ffffffff8bf52ee0 RBP=ffffed1003b5d488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed100566663d R10=ffff88802b3331eb R11=0000000000000001 R12=0000000000000001 R13=ffff88801daea440 R14=ffffffff9087b250 R15=0000000000000000 RIP=ffffffff8b7987df RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097875000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056320d7ae950 CR3=0000000064c87000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4c0c004 Opmask01=0000000000000001 Opmask02=000000003b3f3ffb Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000622f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002a2e 2573257325003a25 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0f0e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d646970006e6962 2f7273752f3a6e69 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff00ff ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056320d00662d 000056320d7bf048 000056320d7bf068 6c69665f70006d72 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056320d00662d 000056320d7bf048 000056320d7bf068 6c69665f70006d72 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561d0d004902 0000561d0d54df48 0000561d0d54df47 4346495f5f00425d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056320d7bb2f8 0000000000000000 000000000000000f 000056320d00873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056320d7b5b58 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000010 RCX=ffffffff84dd77a4 RDX=ffff88802418a440 RSI=0000000000000020 RDI=0000000000000001 RBP=ffffc90003837330 RSP=ffffc90003837198 R8 =0000000000000001 R9 =0000000000000020 R10=0000000000000012 R11=0000000000000001 R12=0000000000000012 R13=ffffc90003837310 R14=ffff888028a0c480 R15=00000000000006f0 RIP=ffffffff81bb6db0 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f874e198300 ffffffff 00c00000 GS =0000 ffff888097975000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555e709c3000 CR3=000000004712d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001d5 0000001800000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6fc0020800020800 30080006006ffa36 000006ce00000014 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080ee0030008000e d8030008000ed003 0fffffffff040ec0 030008000eb80300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000eb003004c50 4701ffffffffffff fffff70802800302 80040ea003950000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000000850000 006d000000850000 0000000000000fff 0018000000184208 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0180030180040e90 030a08000e880330 08000e8003000800 0408001408000601 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080006015b800008 000ab0030008000a a8030008000aa003 0208000a980302d0 ZMM25=9ba81e3d9ba81e3d 9ba81e3d9ba81e3d 9ba81e3d9ba81e3d 9ba81e3d9ba81e3d 9ba81e3d9ba81e3d 9ba81e3d9ba81e3d 9ba81e3d9ba81e3d 9ba81e3d9ba81e3d ZMM26=22fe29b822fe29b8 22fe29b822fe29b8 22fe29b822fe29b8 22fe29b822fe29b8 22fe29b822fe29b8 22fe29b822fe29b8 22fe29b822fe29b8 22fe29b822fe29b8 ZMM27=80c8606580c86065 80c8606580c86065 80c8606580c86065 80c8606580c86065 80c8606580c86065 80c8606580c86065 80c8606580c86065 80c8606580c86065 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5b0600005b060000 5b0600005b060000 5b0600005b060000 5b0600005b060000 5b0600005b060000 5b0600005b060000 5b0600005b060000 5b0600005b060000 info registers vcpu 3 CPU#3 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85562565 RDI=ffffffff9ae599c0 RBP=ffffffff9ae59980 RSP=ffffc90004777608 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9ae59980 R15=ffffffff85562500 RIP=ffffffff8556258f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a75000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb3ab1c4e9c CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080001 Opmask01=0000000000000001 Opmask02=00000000fff7ffdf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e6e2615323 000055e6e2615323 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ab4f5050 00007fb3ab4f40c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ab4f5580 00007fb3ab4f4b20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ab1f70c0 00007fb3ab4f5ab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ab533da0 00007fb3ab4f45f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ab1f76b0 00007fb3ab1f70c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ab4f5ab0 00007fb3ab4f5580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ab4f4b20 00007fb3ab4f5050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692074616d726f66 2064616200707865 6765722073756f69 76657270206f6e00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 450c584d415e434a 0c484d4e005c5449 4b495e0c5f594345 5a495e5c0c434200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000