last executing test programs: 1m54.673685691s ago: executing program 32 (id=184): getuid() fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x4, @vbi={0xb5, 0x0, 0x3, 0x31324d59, [0x0, 0x8000000], [0x8200, 0x1]}}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x23, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 59.543604426s ago: executing program 33 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921e2c194c, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r1, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = eventfd(0x7) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095", @ANYRES8, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000000000000001000000080000", @ANYRES32=r2, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000050006000f00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) 56.7699712s ago: executing program 5 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005200000008000300", @ANYRES32=r1, @ANYBLOB="06004800420000000a0006000802110000010000050088"], 0x44}}, 0x3000000) 56.694202509s ago: executing program 5 (id=621): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921e2c194c, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r1, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = eventfd(0x7) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000000000000001000000080000", @ANYRES32=r2, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000050006000f00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r3}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) 56.686874199s ago: executing program 5 (id=622): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000001d40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0xc, 0x0, 0x34}}], 0xc}}], 0x2, 0x0) 50.223847545s ago: executing program 34 (id=571): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x8d) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000000500)=""/225, 0xe1}], 0x3, &(0x7f0000000800)=[{&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/32, 0x20}, {0x0}], 0x4, 0x0) 43.881872631s ago: executing program 3 (id=712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket(0x28, 0x1, 0x0) connect$packet(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) vmsplice(r4, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) write(r2, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) close(r0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0x2098f907, 0x1}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r10, 0x0, 0x0, 0x800001, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000090000000000000000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x200404, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @multicast, @void, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "ed7e8d9f15655a3e02b8cbb88d14cbf56238f6b98ead656924fefce95e891429dc8c85375c76994a3c9713a5da847a39731c57f7acb0281440fb649c81546fec"}}}}, 0x0) 43.74270936s ago: executing program 3 (id=713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$inet(0x2, 0x800, 0x7) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x201e, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000000)) mprotect(&(0x7f0000bd3000/0x2000)=nil, 0x2000, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) 42.973761329s ago: executing program 3 (id=721): socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0x3, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="503c0dbdc0ebf9471656837a0010000104001600000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a140003006272696467655f736c6176655f3000001c001a801800028014000180080012000b00000008001d0002000000ff2595000549fde4c72f6005951be1449e1ff97ab6af52ed8e98221dc1125638d7f009da749bdfa8e8c292438c7b980ef99c3786b24bb6fc04b53a43ac9241f8459728268f5d71c78954394918fb6a0127d361daa663013a6347dc96bcd740974b9454dae89670ccb24c97a37e41d9d9573a5fcd144d51d3344e176626cacbfe8d0fe6e09e4963b72fe5dc325d82226cca80a190e0eb50a4d5380f2a4632e43b784156799db0a7f5737d32ff5ced3f9c8e9465"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c000780050015000000000005000100070000000000000900020073797a310000000011000300686173683a69702c6d61726b00"/88], 0x58}}, 0x20008000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) chdir(&(0x7f0000000100)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0/../file0\x00') sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 41.989231183s ago: executing program 3 (id=725): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000580)=0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f1f, 0x0, 0x0, 0x0, 0xf3ffffff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.677310915s ago: executing program 35 (id=622): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000001d40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0xc, 0x0, 0x34}}], 0xc}}], 0x2, 0x0) 41.575558012s ago: executing program 1 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x10, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0xfc}, 0x0) 41.513774824s ago: executing program 1 (id=729): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfe5d, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x3, 0x389001) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x40000001) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 41.091170654s ago: executing program 3 (id=731): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921e2c194c, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r1, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = eventfd(0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095", @ANYRES8, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000000000000001000000080000", @ANYRES32=r2, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000050006000f00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) 41.033852505s ago: executing program 3 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0xffffffc3}, 0x8000) 39.053992727s ago: executing program 1 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x3000000, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 39.05373036s ago: executing program 1 (id=738): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) 39.052979097s ago: executing program 1 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921e2c194c, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r1, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = eventfd(0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095", @ANYRES8, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000000000000001000000080000", @ANYRES32=r2, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000050006000f00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) 39.024171088s ago: executing program 1 (id=740): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @local, 0xffffffffffffffff, "c77f83ca438912a2d40ac4dce0ad8654c4e6eba669caa52e224885072fb9b860", 0x45, 0x7fffffff, 0x4550, 0x8}, 0x3c) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378eb, 0x70bd28, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x30}}, 0x0) 37.652835549s ago: executing program 7 (id=743): timer_create(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r4, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000480000f100000006"], 0x14}, {&(0x7f0000000380)={0x150, 0x1e, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x4, 0x88, 0x0, 0x1, [@generic]}, @nested={0xc, 0x135, 0x0, 0x1, [@typed={0x8, 0x143, 0x0, 0x0, @pid=r1}]}, @nested={0x1c, 0xda4, 0x0, 0x1, [@nested={0x4, 0x131}, @nested={0x4, 0xfb}, @typed={0x8, 0xf0, 0x0, 0x0, @str='GPL\x00'}, @typed={0x4, 0x83}, @nested={0x4, 0xd6}]}, @typed={0x8, 0x40, 0x0, 0x0, @pid}, @nested={0x6a, 0x44, 0x0, 0x1, [@generic="115d0e2b98c1e1ac5855ce968091fbebc194486e52a0068e446195c5f5dcf14759992851cc000be14161a3ac74d4b10010289307038add514d731bd6a91e308dd89d11563af622770c312814fa83a869910b30195ff16a9d811b45c6aeec67700cb7ccd8e978"]}, @typed={0x34, 0x30, 0x0, 0x0, @str='/sys/kernel/debug/binder/failed_transaction_log\x00'}, @nested={0x59, 0xdd, 0x0, 0x1, [@generic="ecbb9d3337903066894ffa63e081ba7ab3", @typed={0x22, 0x10, 0x0, 0x0, @str='\x00\x98Y\xbf\xc8O0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\xae\x9eQ\xaf\xd5\xe9\xe9'}, @nested={0x4, 0xbd}, @typed={0xc, 0xef, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0xab}, @nested={0x4, 0x10d}, @typed={0x8, 0xd0, 0x0, 0x0, @fd}]}, @nested={0x10, 0xa4, 0x0, 0x1, [@typed={0xc, 0x81, 0x0, 0x0, @u64=0x9}, @generic]}]}, 0x150}], 0x2, 0x0, 0x0, 0x400048c0}, 0x0) 37.141468826s ago: executing program 7 (id=744): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x2, 0x0, 0x0, 0x300}, 0x9c) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000080)=0xffff7b6e, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async, rerun: 64) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000700)=""/32, &(0x7f0000000680)=0x20) (rerun: 64) 37.141042624s ago: executing program 7 (id=745): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[], 0x12000) socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) socket(0x1d, 0x3, 0x3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0xa, 0x3) syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000340)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r4], 0x44}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0x5, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000180)=0x1e) 36.687181667s ago: executing program 7 (id=747): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x3ffff, {0xa, 0x9}}, 0x0) syz_io_uring_setup(0xb32, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000003000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 36.620991923s ago: executing program 7 (id=748): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921e2c194c, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r1, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = eventfd(0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095", @ANYRES8, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000000000000001000000080000", @ANYRES32=r2, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000050006000f00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) 36.605810454s ago: executing program 7 (id=749): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="1400010000400000000000000000000004000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 35.15351333s ago: executing program 6 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000900", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) 35.094134007s ago: executing program 6 (id=754): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400010000000000fddbdf25fe8800000000000000000000010001010000000000000000000000f0000000005a5bf65e5cbdfa070a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00'], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) 35.093641476s ago: executing program 6 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x4000014, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x13) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x7, 0x7f}, @sack_perm, @window={0x3, 0x0, 0x4}, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) connect$vsock_stream(r6, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r7, &(0x7f0000000040)="6469599e1752ca2e115603fb49ebd8211806dbb8e0051ff5fb0c7f487a0424df530fdbc2f5a17eb8a261903c00005ec6fd584c921fda023209c7f8971f82", 0x3e, 0x8080, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 34.153222596s ago: executing program 6 (id=756): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0xf0, 0x3}}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) pwrite64(r0, &(0x7f0000000200)="7bb2474a62ec01a2ccc326ffef6d69f453ecc99b2506640a1949b38322924f4388c942f623782caf02a8066e24b3fb1283e24ab02b94a095787ed9fe6a15b5922104833f12db1cf46547b27af2bb35391f6169516db3beea", 0x58, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002300)={0x1694, r2, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x538, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6f}]}, {0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x401, 0xdef, 0x8, 0x3000, 0x7, 0x9, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc, 0x3, 0x9f, 0x0, 0x4978, 0x7, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x8, 0x600, 0x6, 0x9, 0x0, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8c, 0x9, 0x1f, 0x4, 0x1, 0x8, 0x7, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x7ff, 0x6, 0x7, 0x7, 0x6, 0x1ff, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0xc, 0x9, 0x9, 0x200, 0x49d1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x4, 0x800, 0xa8, 0x4, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x8, 0x2, 0x7, 0x10, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x3}, {}, {0x4, 0x7}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0x6}, {0x6, 0x3}, {0x7, 0x3}, {0x7, 0x1}, {0x5, 0xa}, {0x0, 0x6}, {0x4, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0x5}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x5, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {0x5, 0x3}, {0x1}, {0x5, 0x9}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x4}, {0x7, 0x4}, {0x1, 0x6}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x9, 0x6, 0x8001, 0xc, 0x3]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x13, 0x6, 0x1b, 0x24, 0x60, 0x30, 0x1b, 0x9, 0x36, 0x12, 0x5, 0x6c, 0x1b, 0x5, 0xb, 0x2, 0x48, 0x1, 0x16, 0x6, 0x6, 0xdb224e16deb57c05]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xe7e6, 0x2, 0x100, 0x9, 0x400, 0x9, 0x4]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xa2, 0x9, 0x1, 0xa, 0x0, 0x8, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x17}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x2, 0x1, 0x5, 0x8, 0xa, 0x1]}}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x4, 0x60, 0x6c, 0x3, 0x1, 0x56, 0x3, 0x1, 0x24, 0xd, 0x24, 0x30, 0x1, 0x1e, 0x1b, 0x12, 0x12, 0x16, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {}, {0x2, 0x1}, {0x1, 0x4}, {}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x5}, {0x2, 0x6}, {0x4, 0x5}, {0x7}, {0x5, 0x4}, {0x6, 0x4}, {0x4, 0x4}, {0x3, 0x8}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x5, 0x5}, {}, {0x1, 0x2}, {0x2}, {0x1}, {0x3}, {0x6, 0x3}, {0x4, 0x7}, {0x1, 0x6}, {0x3, 0x3}, {0x3, 0x4}, {}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x5, 0x5}, {0x7, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x7, 0x5}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x2, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x6, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf9, 0x2, 0x1, 0x0, 0x6, 0x1400, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0xb, 0xd9d9a1f11f80cf45, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x6}, {0x7, 0x4}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x6}, {0x5, 0x6}, {0x2, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x4, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x6, 0x9}, {0x4, 0x5}, {0x1, 0x5}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x6, 0x4}, {0x7, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x5}, {0x1, 0x3}, {0x1, 0xe}, {0x6, 0x8}, {0x5, 0x5}, {0x6}, {0x6, 0x9}, {0x6, 0x5}, {0x1, 0x5}, {0x6, 0x5}, {0x5, 0x8}, {0x4, 0x4}, {0x3, 0x9}, {0x6, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0xffff, 0x7, 0x401, 0x5, 0x101, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x7fff, 0x0, 0x2, 0x2, 0x8, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x1, 0x4, 0xffff, 0x3, 0x60c, 0x1]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x5}, {0x7, 0x9}, {0x7, 0x4}, {0x6, 0x5}, {0x3, 0x7}, {0x3, 0x1}, {0x5, 0x9}, {0x3, 0x8}, {0x1, 0x2}, {0x4}, {0x1, 0x6}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x6}, {0x7, 0x3}, {0x1, 0x4}, {0x6, 0x6}, {0x6, 0x7}, {0x4, 0x8}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x3}, {0x5, 0x6}, {0x5, 0x3}]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff7, 0x8001, 0x8, 0x4, 0x5, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x77c, 0x6, 0x4, 0x8000, 0x5, 0x8, 0x8, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x36, 0x60]}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x9, 0x5, 0x7, 0x401, 0xcdd, 0x401]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0xa}, {0x0, 0x4}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x6}, {0x5, 0x2}, {0x2, 0xa}, {0x7, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x3, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x8}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0xa}, {0x6, 0x1}, {0x6, 0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x1}, {0x3, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbdb8, 0x5, 0x0, 0x101, 0x400, 0xb05, 0x6, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x8}, {0x2, 0x7}, {0x4, 0xa}, {0x7}, {0x6, 0x3}, {0x7, 0x1}, {0x7, 0x1}, {0x5, 0x4}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x6}, {0x7, 0x6}, {0x6, 0x1}, {0x1, 0x6}, {0x4, 0x8}, {0x4, 0x5}, {0x1, 0xa}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x8}, {0x3, 0x1}, {0x6, 0x5}, {0x7, 0x1}, {0x3, 0x1}, {0x1, 0x8}, {0x2, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x1}, {0x3, 0x6}, {0x6, 0x2}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x9}, {0x4}, {0x6, 0x6}, {0x6, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x1}, {0x5, 0x8}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x9}, {0x4}, {0x5, 0x6}, {0x0, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x66}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x59e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x31}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0xc20, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0xfffd, 0x10, 0x3, 0x5, 0xfff8, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xb1, 0x1ff, 0x7, 0x7, 0x7, 0xb, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x4, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x7, 0x6}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x4}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x2}, {0x3, 0x1}, {0x0, 0x4}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x4}, {0x5, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x5, 0x5}, {0x2, 0x3}, {0x3}, {0x7, 0x3}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0xa}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xf80, 0x7, 0x8, 0x9, 0x3, 0x1400, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x3, 0x30, 0x16, 0xb, 0x30, 0x16, 0x1b, 0x6c, 0x0, 0x1b, 0x48, 0x60, 0x60, 0x3, 0x6, 0xc, 0x3, 0x6, 0x3, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe8ce, 0x1, 0x0, 0x0, 0x1c66, 0xeab5, 0x9, 0x1]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x3}, {0x2, 0x6}, {0x6, 0x7}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x4, 0x9}, {0x7, 0x1}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x6}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x3}, {}, {0x1, 0x6}, {0x2, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x6, 0x4}, {0x2, 0xa}, {0x4, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {}, {0x5, 0x6}, {0x7, 0x8}, {0x3, 0x7}, {0x1, 0x7}, {0x2, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x2}, {0x7, 0xa}, {0x2, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x0, 0x7}, {0x3}, {0x2, 0x6}, {0x1, 0x3}, {0x7}, {0x0, 0x9}, {0x4, 0x8}, {0x6, 0x3}, {0x5, 0x4}, {0x0, 0x2}, {0x6, 0x9}, {0x2, 0x1}, {0x2, 0x3}, {0x6, 0x6}, {0x3, 0x3}, {0x2, 0x7}, {0x4, 0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x4, 0x2}, {0x4, 0x8}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9a11, 0x1, 0x9, 0x2, 0x3, 0x81, 0x3]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x4}, {0x0, 0xa}, {0x4, 0x1}, {0x3, 0x8}, {0x1, 0x2}, {0x2, 0x4}, {0x7, 0x8}, {0x2, 0x6}, {0x4, 0x9}, {0x3, 0x8}, {0x3}, {0x5, 0x2}, {}, {0x0, 0x3}, {}, {0x6, 0x4}, {0x1, 0x4}, {}, {0x1, 0x5}, {0x0, 0x8}, {0x6, 0xa}, {0x5, 0x4}, {0x6, 0x6}, {0x2, 0x6}, {0x6, 0x3}, {0x3, 0x8}, {0x4, 0x2}, {0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x5, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x5, 0x8}, {0x7, 0x1}, {0x2, 0x9}, {0x3, 0x8}, {0x3, 0xd}, {}, {0x7, 0x4}, {0x6, 0x2}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x36, 0x6c, 0x36, 0x3, 0x9, 0x0, 0x0, 0x16, 0x6, 0xc, 0xb, 0x24, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x64, 0x8e, 0x8001, 0xa6, 0x101, 0xd, 0x7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x99, 0x1, 0x7fff, 0x6, 0x10, 0xcb]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x30, 0x69, 0x36, 0xd, 0x1b, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x0, 0x2, 0x6, 0x1]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x530, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x14, 0x6, 0x5, 0x6, 0x5b, 0xfff3, 0x1, 0x58b3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0xd02d, 0x87, 0x9, 0x7, 0x1, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x18, 0x1b, 0x9, 0x5, 0x16, 0xc, 0x3, 0x9]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff1, 0x6, 0x621a, 0x1, 0x9, 0x0, 0xd7, 0xba5f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd7, 0x5, 0x51, 0xd, 0x6, 0xfff, 0x6c5, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x12, 0x6, 0x60, 0x4, 0xb, 0x3, 0x16, 0x4, 0x60, 0x9, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7fff, 0x5, 0x3, 0x6d, 0x9, 0x81, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x4}, {0x4, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x7, 0x7}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x5, 0x2}, {0x4}, {0x3, 0x3}, {0x1, 0xa}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x9}, {0x2, 0x9}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0x7}, {0x3, 0x1}, {0x6, 0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xffff, 0x8, 0x7, 0x3, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xb6, 0xee10, 0x5, 0x7, 0x3ff, 0xa581, 0xf09d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7ff, 0xb0dd, 0x7, 0xc5a, 0x69, 0xfc01, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x6, 0xd, 0x6, 0x35, 0x9, 0x480]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0x3}, {0x6, 0x7}, {0x2, 0x9}, {0x5, 0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x7, 0x2}, {0x2, 0x9}, {0x1}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x4}, {0x6, 0xa}, {}, {0x6}, {0x3, 0x8}, {0x1}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x2}, {0x2, 0x1}, {0x6, 0x7}, {0x5, 0x8}, {0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x7}, {0x3, 0x4}, {0x1, 0x4}, {0x2, 0x5}, {0x2, 0x7}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x5, 0xb, 0x30, 0x3, 0xb, 0x18, 0x12, 0x1b, 0x5, 0x4, 0x6, 0x5, 0x48, 0x24, 0x3, 0xb, 0x2, 0x48, 0x6c, 0x5, 0x1, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x3, 0x3}, {0x2, 0x5}, {0x6, 0x3}, {0x3, 0x5}, {0x3}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {0x4, 0x2}, {0x4, 0x8}, {0x3, 0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x7, 0xa}, {0x5, 0xa}, {0x5, 0x3}, {0x6}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x76}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x338, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x6}, {0x6, 0x2}, {0x1, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x6, 0x8}, {0x6, 0x2}, {0x5, 0x1}, {0x7, 0x3}, {0x7, 0x5}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0x6}, {}, {0x0, 0x2}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0x4}, {0x1, 0x8}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0x6}, {0x0, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd, 0x81, 0x9f, 0x6, 0x6, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x4}, {0x3, 0x9}, {0x2, 0x7}, {0x3}, {0x2, 0x1}, {0x4}, {0x5, 0x6}, {0x2, 0x9}, {0x3, 0x4}, {0x4, 0x8}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x6, 0xa}, {0x3, 0x2}, {0x4, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x2, 0x3}, {0x7, 0x4}, {0x6}, {0x7, 0x9}, {0x4, 0x4}, {0x7, 0x3}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x2}, {0x3, 0x1}, {0x5, 0x7}, {0x4, 0xa}, {0x0, 0x3}, {0x4, 0x9}, {0x3, 0x5}, {0x2, 0x3}, {0x4}, {0x2, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x4fe, 0x6, 0x40, 0x400, 0xf349, 0xcf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x3, 0x4, 0x6, 0x6, 0xfffe, 0xc, 0x5]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0xa}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0xa}, {}, {0x0, 0xa}, {0x4, 0x7}, {}, {0x1, 0x1}, {0x5, 0x3}, {0x3, 0x4}, {0x6, 0x9}, {0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x4, 0x4}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0xa}, {0x4, 0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x2, 0x16}, {0x1, 0x1}, {0x6}, {0x3, 0x2}, {0x4, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x1, 0x7}, {0x5}, {0x2, 0x2}, {0x5, 0xa}, {0x7, 0x8}, {0x2}, {0x2, 0x3}, {}, {0x4, 0xa}, {0x5, 0x5}, {0x4, 0x1}, {0x5, 0x3}, {0x5}, {0x5, 0x7}]}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x8}, {0x3, 0x7}, {0x3}, {0x2, 0x8}, {0x7, 0xa}, {0x1, 0x1}, {0x6}, {0x4, 0x8}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x8}, {0x0, 0x1}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x7, 0x5}, {0x5, 0xa}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x6, 0x8}, {}, {}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x5}, {0x4, 0x4}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x9}, {0x7, 0x5}, {0x6}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x3}, {0x4, 0x5}, {0x0, 0x4}, {0x2, 0x6}, {0x1, 0x4}, {0x4, 0xa}, {0x5, 0x8}, {0x5, 0xa}, {}, {0x0, 0x3}, {0x2}, {0x1}, {0x2, 0x2}, {0x7, 0x1}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0x8}, {0x2}, {0x3, 0x1}, {0x4, 0x2}, {0x5, 0x8}, {0x0, 0x4}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0x9}, {0x4}, {0x7, 0x9}, {0x5, 0x7}, {0x6, 0x2}, {0x1, 0x7}, {0x2, 0x1}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x8}, {0x3, 0x3}, {0x2, 0x2}, {0x2, 0x4}, {0x7, 0x5}, {0x5, 0x4}, {0x6, 0xb}, {0x5, 0x3}, {0x3, 0x4}, {0x7, 0x2}, {0x6, 0x3}, {0x5, 0x1}, {0x5, 0x5}, {0x3, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x5, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x1}, {0x3, 0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0x5}, {0x3, 0x1}, {0x6, 0x9}, {0x4, 0x7}, {0x4, 0x7}, {0x7, 0x2}, {0x0, 0xa}, {0x1, 0x9}, {0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x2}, {0x3, 0x9}, {0x7, 0x7}, {0x3, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x8}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9e2e, 0xf5b2, 0xd, 0x6, 0x5, 0xe55, 0x2, 0x7]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x2}, {0x2, 0x9}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x7}, {0x3, 0x3}, {0x1, 0x5}, {0x7}, {0x2, 0xa}, {0x1, 0x3}, {0x4, 0xa}, {0x6, 0x1d}, {0x4, 0x2}, {0x5, 0x8}, {0x2, 0x1}, {0x7, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0x5, 0x8}, {0x3, 0x8}, {0x6, 0x9}, {0x5, 0x5}, {0x7, 0x1}, {0x6}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x4, 0x1}, {0x3, 0x2}, {0x0, 0x8}, {0x3, 0x5}, {}, {0x1, 0x6}, {0x5}, {0x3, 0x6}, {0x3, 0xa}, {0x3}, {0x7, 0x2}, {0x2, 0x6}, {0x6, 0x7}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3e2b, 0x7fff, 0x1, 0x6, 0x4, 0x6aa4, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4000, 0x5, 0x1000, 0x8, 0x3, 0x7, 0x1]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x5db610051308934f, 0x18, 0x4, 0x6, 0xc, 0x24, 0x60, 0x5, 0x36, 0x24]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x5, 0x16, 0x63, 0xc, 0x5, 0x60, 0x12, 0x1b, 0x0, 0x3, 0x18, 0x48, 0x60, 0x5, 0xb, 0x24, 0x9, 0x6, 0x6, 0x48, 0xc, 0x5, 0x574862b62193d723, 0x3]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x4, 0x3}, {0x3, 0x4}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x1, 0x3}, {0x1, 0x9}, {}, {0x4, 0x4}, {0x4, 0x7}, {0x2, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x2}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x3, 0x4, 0x7, 0x2, 0x800, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x5, 0xfff, 0x91bb, 0x5, 0x8, 0x1, 0x101]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfffb, 0x1, 0x0, 0x5, 0x7, 0x7, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x55, 0x9, 0x7, 0xcdcf, 0x1, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0x30, 0x1b, 0x6c, 0x16, 0x30, 0x3, 0x4, 0x48, 0x16, 0x1, 0x18, 0x36, 0x43, 0x1d]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x60, 0x24, 0xb, 0x30, 0x48, 0x60, 0x6, 0x12, 0x60, 0x16, 0x76, 0x48, 0x18, 0x36, 0x3, 0x6, 0x9, 0x4, 0xc, 0x3ca13663c28043d0, 0x12, 0x1b, 0x24, 0x2e, 0xc, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xba2e, 0x9, 0x0, 0x3, 0x1, 0x6, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0xd, 0x80, 0x2b63, 0x5, 0x5, 0x58b]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x57d, 0xe8, 0x5, 0xfff, 0x8, 0x0, 0x6, 0x4]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x328, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8000, 0x3, 0x75, 0x1, 0x7, 0x9, 0x2168]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfc6, 0x5, 0x9, 0xa, 0x6, 0x8d, 0xff01]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8e, 0xfffd, 0xb, 0x5aa3, 0x1ff, 0x3, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xa7b, 0x1, 0x9fb, 0x5, 0x6, 0x6, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x784, 0x8, 0x100, 0x6, 0x6, 0xa, 0x8]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x5}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x2}, {0x6, 0x2}, {0x0, 0xa}, {0x4, 0x8}, {0x4, 0x5}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x4, 0xa}, {0x4, 0x4}, {0x1}, {0x2, 0xa}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x9}, {0x6}, {0x0, 0x1}, {0x3, 0x4}, {0x2, 0x3}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0x8}, {0x7, 0x6}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x6, 0xa}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x6, 0x9}, {0x6, 0x8}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x7, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x1, 0x7}, {0x4, 0x10}, {0x6, 0x1}, {0x3, 0x9}, {0x7, 0x4}, {0x0, 0x4}, {0x4, 0x6}, {0x1}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x9, 0x5, 0x0, 0x48, 0x2, 0x30, 0x18, 0x9, 0x6c, 0x1d, 0x60, 0x36, 0x60, 0x60, 0x5, 0x36, 0x6, 0x36, 0x1, 0x1b, 0x4, 0x2c, 0x30, 0x48, 0x9, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x7}, {0x6, 0x7}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x2}, {0x0, 0xa}, {0x2, 0x6}, {0x6, 0x6}, {0x6, 0x3}, {0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x1}, {0x0, 0x3}, {0x4, 0x8}, {}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x2}, {0x4, 0x4}, {0x3, 0xa}, {0x3, 0xa}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x3, 0x7}, {0x1, 0x6}, {0x4, 0x2}, {0x5, 0x8}, {0x1, 0x5}, {0x3, 0xa}, {0x2, 0x8}, {0x5, 0x6}, {0x0, 0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x8}, {0x7}, {0x6, 0x1}, {0x3, 0x8}, {0x6}, {0x4, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x7, 0x9}, {0x6, 0x8}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x8}, {0x4, 0xa}, {0x7, 0x8}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0x9}, {0x3, 0x8}, {0x6, 0x8}, {0x5, 0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x70, 0x5, 0x1, 0x81, 0x3, 0x5]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x8, 0x4, 0x5, 0x401, 0x4, 0x101, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x100, 0xf, 0x1000, 0x7, 0x1, 0xb, 0x3ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x8}, {0x2, 0x8}, {0x5, 0x4}, {0x5, 0x6}, {0x5, 0x3}, {0x5, 0x2}, {0x3, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x3}, {0x2, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x4}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0x4}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xc, 0x60, 0x12, 0x4e, 0x6c, 0x30, 0x2, 0x5a, 0x36, 0x60, 0x24, 0x4, 0x6c, 0x4, 0x16, 0xb, 0x6, 0x12, 0x76, 0x4, 0x60, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x48, 0x18, 0x24, 0x5e, 0x78, 0x48, 0x5, 0x12, 0x6, 0x9, 0x60, 0x16, 0x1, 0x3, 0x36, 0x16, 0x3, 0x60, 0x2]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x4, 0x400, 0x2, 0x24, 0x5, 0x3ff, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xaab, 0x100, 0x24, 0xff, 0x5, 0x7, 0x0, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3ff, 0xffff, 0x4, 0x5, 0xdc, 0x7, 0x8001]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x5, 0x30, 0x6c, 0x30, 0x1b, 0x60, 0x48, 0x16, 0x60, 0x1, 0x4]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x4}, {0x2, 0x8}, {0x2, 0xa}, {0x3, 0x2}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x4}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x6, 0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x4}, {0x6, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xe4, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffff7fff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1aa}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x210, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}]}, {0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x198, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x1b, 0x9, 0x4, 0x6c, 0x5, 0x5, 0x6c, 0x1b, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x3, 0x7, 0x1, 0x9, 0x8, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x2]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x1, 0x101, 0x1, 0xfff7, 0x3, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x1, 0x4, 0x9, 0x12, 0x1b, 0x6c, 0x18, 0x2, 0x5, 0x4, 0xb, 0x4, 0x1b, 0x1, 0x48, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x80, 0xfffe, 0xa9, 0x9, 0x5, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x0, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x6, 0x6, 0x3, 0x7f, 0x0, 0x8e]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x1b, 0x5]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0xa}, {0x2}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x3}, {0x2}, {0x0, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x6, 0x8}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x2, 0xa}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x5, 0xc, 0x4, 0x0, 0x2]}}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7ff, 0x41a, 0x5, 0x2, 0x2, 0x1, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x30, 0x36, 0x9, 0x1b, 0x60, 0x4, 0x1b, 0x6c, 0xb, 0x16, 0x12, 0xa, 0x2, 0x19, 0x24, 0x9, 0x2, 0x48, 0x60, 0x18, 0x5, 0x1b, 0x60, 0x12, 0x12, 0x1e, 0x30, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0xa}, {0x3, 0x6}, {0x3, 0x1}, {0x6}, {0x4, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x1}, {0x3, 0x6}, {0x6}, {0x0, 0x2}, {0x7, 0x2}, {0x0, 0x8}, {0x2, 0x4}, {0x4, 0x5}, {0x6, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0x8}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x2}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x7}, {0x7, 0x5}, {0x3, 0x7}, {0x2, 0x8}, {0x2, 0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0x4}, {0x5, 0x5}, {0x6}, {0x6, 0x9}, {0x7, 0x5}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x164, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x75}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x66}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x243d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x98}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x1694}, 0x1, 0x0, 0x0, 0x60000040}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') sendfile(r4, r5, 0x0, 0x80000000) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB="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"]) 34.152370197s ago: executing program 6 (id=757): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921e2c194c, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r1, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = eventfd(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095", @ANYRES8, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000000000000001000000080000", @ANYRES32=r2, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000050006000f00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) 34.083240202s ago: executing program 6 (id=758): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000008c0)=0x1, 0x0, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0xffffffff, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x10000007, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x10001, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x804, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x4, 0x0, 0x27f}, &(0x7f0000000280), 0x0) r7 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r9) memfd_secret(0x0) 26.003041168s ago: executing program 36 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0xffffffc3}, 0x8000) 23.90289292s ago: executing program 37 (id=740): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @local, 0xffffffffffffffff, "c77f83ca438912a2d40ac4dce0ad8654c4e6eba669caa52e224885072fb9b860", 0x45, 0x7fffffff, 0x4550, 0x8}, 0x3c) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378eb, 0x70bd28, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x30}}, 0x0) 21.354227065s ago: executing program 38 (id=749): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="1400010000400000000000000000000004000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 19.092596209s ago: executing program 39 (id=758): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000008c0)=0x1, 0x0, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0xffffffff, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x10000007, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x10001, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x804, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x4, 0x0, 0x27f}, &(0x7f0000000280), 0x0) r7 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r9) memfd_secret(0x0) 12.611563086s ago: executing program 4 (id=794): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f00000006c0)=0x80000000) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x42e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x200000c4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:setrans_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0xb4}}, 0x4000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000003480)) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/133, 0x85}], 0x1, &(0x7f00000001c0)=""/36, 0x24}, 0x10001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0xa}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x20}]}}]}, 0x48}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000680), 0x1, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x4000001) r11 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r11, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x400e802, 0x1, 0x7, 0xfff}}) syz_emit_ethernet(0x2b, &(0x7f0000024140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xf, 0x7, '>'}}}}}, 0x0) 12.545404733s ago: executing program 4 (id=796): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x5, "fa67bd8d81000d00212e278e74ca61470000009a0f00"}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000001380)) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c00050004000002000002000800010003000000050002000300000005000200080000002400"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) getdents(r1, &(0x7f0000002000)=""/4096, 0x1000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2}) 12.508247851s ago: executing program 4 (id=797): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettfilter={0x34, 0x2e, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xfff1, 0xffff}, {0xffff, 0xb}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000000), 0x0, 0x12140, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 10.632286367s ago: executing program 4 (id=811): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newtfilter={0x928, 0x2c, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x3, 0xa}, {0x8, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8f4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x40, 0x1, 0x8, 0x1}, {0xff84, 0x6, 0xff, 0x7}, {0x9, 0xbf, 0x7}, {0x6, 0x8, 0xf, 0x9}, {0x9, 0x3, 0x9, 0x2}, {0xec9, 0x66, 0x1, 0x6}]}}, @TCA_BPF_POLICE={0x8ac, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0xfffffffe, 0xfffffffb, 0x4, {0x0, 0x1, 0x2, 0xfff3, 0xfc, 0x2}, {0xce, 0x2, 0xd6d1, 0x6, 0x3, 0xb2000000}, 0x3, 0xa, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x21a7, {0x9, 0x1, 0x101, 0xd, 0x9, 0x9}, {0x6b, 0x0, 0xaf1e, 0x0, 0x81, 0x2ef7df6}, 0x7, 0x8, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x4, 0x5, 0x7, 0x7fffffff, 0x4, 0x2, 0x80000000, 0x38000000, 0x2, 0x5, 0x5, 0x2, 0xa8, 0x0, 0x9, 0x2, 0x127, 0xfffffffe, 0x1, 0x8, 0xfffffffa, 0x2, 0x8, 0x1, 0x9, 0x1, 0x5, 0x4, 0xfffffffb, 0x8, 0x1ff, 0xb2, 0x4, 0x5, 0x5, 0x9b, 0x9, 0x8, 0x3792, 0x7, 0x1, 0xfffffffe, 0x62, 0x83, 0x100, 0x7, 0x0, 0x97, 0xbdb, 0x3, 0x698e9981, 0x7, 0x5, 0x610, 0xfffffff7, 0x5045, 0x2, 0x400, 0x8, 0xf9, 0x3, 0x3, 0x0, 0x0, 0xd95b, 0x101, 0x5, 0x0, 0x7f, 0xfffffffa, 0xc, 0xc93, 0x2, 0x5, 0x8, 0xfffffe9d, 0x3, 0x7, 0x11, 0x81, 0x6, 0x3, 0x9, 0xffffffff, 0x8b, 0x4, 0x9, 0x2, 0x101, 0x6c, 0x7, 0x8c2, 0x2, 0xa5, 0x8, 0xffffffff, 0xa, 0x6, 0xff, 0x9, 0x100, 0x1, 0x7, 0x0, 0x7, 0x3, 0x8, 0xaf09, 0x9, 0x4, 0x3, 0xfffffffe, 0x4, 0x8, 0x4, 0x3, 0x1d4, 0x6, 0x615, 0x4, 0x5, 0x2, 0x7, 0x2, 0x5, 0x9, 0x5, 0x8, 0x101, 0x7, 0x7, 0x3, 0xb, 0x7406, 0xfe, 0xffffffff, 0x40, 0x9, 0x5, 0x6, 0x0, 0x7bf9, 0x4c91, 0x3, 0x79, 0x0, 0x6, 0xcbf, 0x1, 0x2, 0x3, 0x7, 0x2, 0x9, 0xbd73, 0x6, 0xffffffff, 0x100, 0x1, 0x3, 0x9a, 0x2, 0x2, 0x9, 0x1, 0x5e9a, 0xfffffffb, 0x7, 0x7ff, 0x9, 0x5, 0x40, 0x3, 0xfffffff7, 0x8, 0x7, 0x2, 0x1, 0x6, 0x10, 0x40, 0x4, 0x5, 0x200, 0x9, 0x7063, 0x7fff, 0x6f52, 0x8, 0x1, 0x5f, 0x7, 0x2, 0x5aee, 0xa9, 0x2, 0x40, 0x81, 0x8001, 0x5, 0x5, 0x987, 0x400, 0x0, 0x1ff, 0x6, 0x2, 0xfffffff9, 0x8, 0x401, 0xd3, 0x80000000, 0xb5, 0x6, 0xfffffff7, 0xc92, 0x1, 0x4, 0x1, 0x7, 0x7, 0xc, 0x9, 0x1, 0x5, 0x5, 0x9, 0x80, 0x1, 0x2, 0x8, 0x3, 0x899, 0x6, 0x0, 0x238, 0x3, 0x3, 0x9, 0x8a, 0x5, 0x7fffffff, 0x1, 0x6, 0x9, 0xfffffffd, 0xffffffff, 0x4b, 0xf55, 0x8, 0xffffffff, 0x0, 0x57, 0xff, 0xfffffff8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x9, 0x400, 0x2, 0x1000, 0x2, 0x9f9, 0x1, 0xe3, 0x800, 0x4, 0x1, 0x8, 0x2, 0x4, 0x6, 0x10000, 0x1d, 0x0, 0x54c, 0x81, 0x8000, 0x2, 0xf7, 0x9c3, 0x80, 0xfffffff7, 0x8001, 0x80000001, 0x3, 0xfffffff9, 0x3, 0x6c7, 0x80, 0xb0e, 0x63, 0x8, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1, 0x5, 0x1, 0x1000, 0x1, 0x7, 0xc8a, 0x4, 0x7, 0x7fffffff, 0xfa5, 0x5, 0x80000001, 0x2, 0x1ab, 0x4, 0x6, 0xee4d, 0x4, 0xffffff6d, 0x0, 0xff, 0x10, 0x101, 0xb40, 0x1, 0x0, 0xb, 0x4b0, 0x3, 0x0, 0x3, 0x7fffffff, 0xc, 0x0, 0x200, 0x9, 0x0, 0x8, 0x1, 0xfffffff6, 0xfffffe00, 0x400, 0x2, 0x1, 0x80000001, 0xac9, 0x9, 0x3, 0x3, 0x0, 0x9, 0xdd4a, 0x2, 0x722b, 0xb, 0x7, 0x5, 0x1, 0x5, 0xfffffffb, 0x9, 0xfffffffd, 0x9000, 0x0, 0x5, 0x0, 0x1, 0xc50f, 0x8001, 0x6, 0x200, 0x5, 0x0, 0x5, 0x2, 0x9, 0x0, 0x10, 0xffffff0d, 0x6, 0x6, 0x7f, 0xfffffff9, 0xffffffff, 0x5, 0xb, 0xfdb, 0xc1f, 0x9, 0x7, 0x981, 0xc48a, 0x8, 0x7, 0xbb, 0x9, 0xbcf, 0x2, 0x10, 0x200, 0x2, 0x6, 0xe85, 0x5, 0x8, 0x3b32, 0x10001, 0x10001, 0x6, 0xfffffffc, 0x9, 0x1, 0xb1d3, 0x9, 0x4, 0x7, 0x6, 0xbfa6, 0x10001, 0x7, 0x77e, 0x9, 0x7, 0x480, 0x0, 0x9c65, 0x4, 0x4, 0xf, 0x4, 0x1000, 0x49, 0x4, 0x4, 0x601, 0x2, 0xfffffd51, 0x44e, 0xee6, 0x10000, 0x0, 0x7, 0x7fff, 0x34a, 0x3, 0x7ff, 0x4, 0x2, 0x9, 0x0, 0x9, 0x6, 0x15, 0xdfab, 0x9, 0x5, 0x9, 0x8, 0xf, 0x7a, 0x1, 0x8, 0x7, 0x9, 0x5, 0x9, 0x6, 0x3, 0x5a2b, 0x100, 0x4, 0x4, 0x7fffffff, 0xffffffff, 0x6, 0x7fffffff, 0xfffffffe, 0xb3b, 0x8, 0x40, 0x269, 0x7, 0x6, 0x4, 0xfffffffb, 0x2, 0x8, 0x4, 0x5, 0x2, 0x0, 0x6, 0xfffffff6, 0x4, 0xad8, 0xffffffff, 0x2, 0x3, 0x6, 0x1, 0x0, 0x58, 0xf, 0x7, 0x8, 0xfffffffb, 0x4, 0x1424, 0x4, 0x80000000, 0xa5d, 0x9, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x928}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYBLOB="4001000010003306000000000400000000000000000000000000000000000001fe8000"/56, @ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x185a1f45f0c2f68c, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000280)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) syz_clone3(0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'team_slave_1\x00', @multicast}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000009400000051e2ee3ccef08d095935c8e3e39a886480304a2ed0b5deabf43462e49c3b03e4487d671b1eda4b9b4633c44656350bdf6f074fc5e7fc3378fdc4a7da14fa34d644bc345f779ad0cd819120839b5cd9b6f5aa709b4a9f281631da1ea2ee9746ec78f98f3c3c0da6fb95f601"]) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{'fsc,ntext'}]}) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)=0xc) syz_clone(0x20304000, 0x0, 0x1e, 0x0, 0x0, 0x0) 9.847707949s ago: executing program 8 (id=814): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd, @flat=@weak_binder={0x77622a85, 0x1000}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 9.845459076s ago: executing program 8 (id=815): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x20000000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000002000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) 9.824975389s ago: executing program 4 (id=816): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000001010400000000141a0000020000001c0017000000000600000006000000040000000400000006000000012000028006000340000400000c000280050001000000000006000340002100040800074000000001"], 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x4000000) syz_open_dev$sndmidi(&(0x7f0000000100), 0xd0, 0x18ba80) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0xd0, 0x18ba80) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r3 = socket$inet6(0xa, 0x4, 0x5) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bbcd9807ffbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="0c91c373d5d37d3a6b571d43a54a793554f7056125746142e575b940f09236144fe3c25ac5dfb1fadf134e77240b0e216501a4693887b4c57a957fd1d4257f18220d84dc0015f767392b7930b8ff33ffe52dca2c75fe40d2bbc70049323b5af14ab1b88b1abf707513ab0209c752e3172a22ed0fb46eb045af94fc992c1474172d02b7ec0a6c98744891965a6e33", @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650026"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e000000d3008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800400121fe248d68ae2b2f37f154ec343b0e1f41f60b7abd39bfc0337ce66e8", 0x49}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e000000d3008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800400121fe248d68ae2b2f37f154ec343b0e1f41f60b7abd39bfc0337ce66e8", 0x49}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newtclass={0x1480, 0x28, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xd, 0xb}, {0x8, 0x3}, {0xe, 0xfff7}}, [@tclass_kind_options=@c_htb={{0x8}, {0x1448, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x6, 0x140, 0xfffffff8, 0xb, 0x1, 0x9, 0xfffffff8, 0xf2c7, 0xfffff1ff, 0x3e48, 0x6f1a9eea, 0x7, 0x80000001, 0x7, 0x5, 0x5, 0x1000, 0x0, 0x1, 0x8, 0x380, 0x268fa02a, 0x7f, 0x2, 0x0, 0x0, 0x9, 0x4, 0x3, 0x82a5, 0x80000000, 0x0, 0x81ce, 0x560, 0x8, 0x3, 0x8001, 0x4, 0x0, 0x7fffffff, 0xab0fc3f, 0x1, 0x1, 0x2, 0x5, 0x2, 0xf86, 0x7, 0x9, 0x7fff, 0x9783, 0x10, 0xffff, 0x3, 0x10, 0xd6, 0x4, 0x10, 0x6, 0x7fff, 0x2, 0x1, 0x100, 0x40d3, 0x0, 0x1, 0x4, 0x28000, 0x3, 0x3ff, 0x2, 0x3, 0x3, 0xee, 0x3, 0x8000, 0x10000, 0x4, 0xb, 0x200, 0x6f4f, 0x3, 0x2, 0x3, 0x4, 0x0, 0x31, 0x5, 0x6, 0x5, 0x3, 0xe, 0x10001, 0x7ff, 0x9, 0x4, 0x3, 0x9, 0xffff, 0xfff, 0x9, 0xff, 0x7, 0x3, 0x9, 0x1, 0x100, 0x4, 0x1148, 0x0, 0xd9e, 0x3, 0xcc1, 0x7ff, 0x4, 0x5, 0x8, 0x7, 0x4, 0x4, 0xffff, 0x400, 0x9, 0x0, 0x5, 0x7, 0x4, 0xbe, 0x4, 0x6, 0x7, 0x8, 0x401, 0x2, 0x0, 0x5, 0x3, 0x5, 0x207, 0x7, 0x1, 0x3, 0x1, 0x1, 0x63b, 0x9, 0x40, 0x3, 0x7fffffff, 0x0, 0x0, 0xe12, 0x92d, 0x0, 0x4, 0x8, 0x63, 0x9, 0x0, 0x4, 0x5, 0x2, 0x1, 0x1000, 0x86, 0x0, 0x9, 0xfffffff9, 0x9d6e, 0x777, 0x6, 0x9, 0xffffffff, 0x101, 0xb, 0x34f7, 0x400, 0x4, 0x3, 0x8, 0x0, 0xb, 0x0, 0x9b6, 0x4, 0x8, 0x1, 0x8000, 0x0, 0x6be, 0x10, 0xa0, 0x7f, 0x4, 0x3ce, 0x213, 0x3b1, 0x66, 0xc, 0x5, 0x7, 0xe04, 0x800, 0x7fffffff, 0x0, 0x4, 0x1, 0x8, 0x54c, 0x80, 0x7, 0x4, 0x800, 0x7f, 0x7, 0x2, 0x8, 0x8, 0x3edd52b4, 0x5, 0x3, 0x80000001, 0x4, 0x0, 0xee, 0xfff, 0x6, 0x10000, 0x7ff, 0x4, 0x0, 0x7, 0x1, 0x6, 0x1000, 0x3, 0x9, 0x10, 0x8001, 0x10000, 0x0, 0x5, 0xe949, 0xfff, 0x7, 0x8, 0x6, 0xf45, 0x1, 0x197e, 0x4e5e, 0x3, 0x7f, 0x7, 0x1]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x6, 0x2, 0xffff, 0x6, 0x81, 0x7fff}, {0xd, 0x2, 0x0, 0x3, 0x8001, 0x4}, 0x1, 0x4, 0x81, 0x4, 0x6759}}, @TCA_HTB_CTAB={0x404, 0x3, [0x1e, 0x8, 0xffffd815, 0x9, 0x8000, 0x4, 0x4, 0x6, 0x8, 0x5, 0x8, 0x3, 0x7fff, 0x4, 0x8000, 0x7, 0x81, 0x8, 0xffff8001, 0x0, 0x81, 0x7d40, 0x65e, 0x80000001, 0xbb, 0x6, 0x9, 0x1, 0xfffffff7, 0x0, 0x4, 0x863a, 0x4, 0x5, 0x5, 0x8, 0x2, 0x7, 0x1, 0x6, 0x3, 0x9, 0x40, 0xf9f, 0x0, 0x479c, 0x60, 0x7, 0x0, 0xffff, 0xef, 0x80000000, 0x5, 0xb23, 0x100, 0x1, 0x3, 0x5, 0x9, 0xffffffff, 0x80, 0x4, 0xa, 0x9, 0x94, 0x5f, 0x2, 0x0, 0xc, 0x0, 0x8001, 0x4f7, 0x9, 0x5, 0x3, 0x8, 0xa000, 0x2, 0x0, 0x8001, 0x18ce9cfd, 0x3, 0x9, 0x1, 0x21, 0x0, 0x5, 0x4, 0x2, 0x29c, 0x7, 0x9, 0x1, 0x6, 0x6, 0x80, 0x4, 0x80000001, 0x0, 0x26f6, 0x7, 0xe, 0x5, 0x7, 0x1ff, 0xbdf8, 0x3, 0x5, 0x4, 0xfffffff0, 0x7fff, 0x7, 0x0, 0x6, 0x1, 0xc00, 0x1, 0x9, 0x8, 0x4, 0x7fff, 0x4, 0xcb1c, 0x29, 0x924, 0x1800, 0x6, 0x1, 0x9, 0x10001, 0x7, 0x0, 0x5, 0x80, 0xa75, 0x779f, 0x7, 0x7, 0x8, 0x9, 0x5a2, 0x2, 0x8, 0x1000, 0x9, 0x9, 0x9, 0x7, 0x1, 0x10001, 0xfffffff7, 0x0, 0xfffffff9, 0x6, 0x10, 0x3, 0xfffffffd, 0xcbd0, 0xfffffffd, 0x400, 0x1000, 0x5, 0x7f, 0x5, 0x4ba0d33b, 0x7ff, 0xf, 0x0, 0x40, 0x8, 0x7fffffff, 0xfe0, 0x6, 0x8, 0x686f0201, 0x4, 0xa85, 0x400, 0x80000000, 0x6, 0x6, 0x8f, 0x9, 0xff, 0x1ea2, 0x6, 0x4, 0x4bdd, 0x5b, 0xe8f2, 0x10, 0x2, 0xfa1, 0x4, 0x214, 0xb2, 0x2, 0x693, 0xffff183e, 0x56, 0xb8, 0x6, 0x8, 0x0, 0x4, 0x3e, 0x3fe0, 0x800, 0x80000000, 0x3ff, 0x2, 0x1, 0x9, 0x0, 0x0, 0x403, 0x8, 0x1ccc, 0xff, 0x200, 0x3c, 0x3, 0x8001, 0x1, 0x7, 0x3, 0x7ff, 0xffff1e6e, 0x9, 0x1, 0x3, 0x1, 0x4, 0x7, 0x8, 0x1, 0x9c12, 0x1, 0x3, 0x9, 0xfe9, 0x10000, 0x80, 0x7ff, 0xe, 0x0, 0x5, 0xaad093ed, 0x5, 0x8000, 0x2, 0xa, 0x2, 0xf22e, 0x3, 0x5]}, @TCA_HTB_CTAB={0x404, 0x3, [0x2, 0x434a, 0x4, 0xd64, 0xcc80, 0x2, 0xfffffffe, 0x0, 0x100, 0x3, 0x4, 0x81, 0x264d9df5, 0x4, 0xfffffff9, 0x4, 0x4, 0xb, 0x6, 0x3, 0xb98, 0x9, 0x40, 0xd1, 0x3ff, 0x2, 0xb2, 0x2, 0x101, 0x7, 0x3, 0x4, 0x9, 0x3, 0x3ff, 0x0, 0xf7c, 0xf, 0x400, 0x6, 0xd, 0x7, 0xb, 0x1, 0x1ff, 0xb, 0x8, 0x6, 0x4, 0xe, 0x2, 0x9, 0x5, 0x13, 0x3, 0x8, 0x5, 0x800, 0x7fffffff, 0x9, 0x5, 0x9, 0xbab, 0xe, 0x3, 0x7, 0x8f, 0x8001, 0x3, 0x80000001, 0x3, 0x6eb, 0x73, 0x6, 0x8, 0x8, 0x800, 0x7, 0x1, 0x9, 0x80e, 0x7, 0xffffff00, 0x2264, 0x0, 0x5d, 0x9648, 0x80, 0xa, 0x1d, 0x2, 0x8b6, 0x6c6, 0x7, 0x40, 0x1, 0x0, 0x6, 0x6, 0x3, 0x5, 0x1, 0x1, 0x4, 0x9, 0x33bcdcbc, 0xfffeffff, 0x7ff, 0x7, 0x4, 0x4, 0x1, 0x2, 0x8, 0x7, 0x9, 0x4, 0x76, 0x7df1, 0x6, 0x0, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x50, 0x8, 0x3, 0x40, 0x3, 0xb, 0x1, 0x7, 0x3, 0x7, 0x141, 0x200, 0x40, 0x8882, 0x6c7, 0x1000, 0x594783bc, 0x9, 0x4, 0x2, 0x0, 0x0, 0x8, 0xe, 0x2, 0x1, 0x7, 0x10000, 0x69b, 0x0, 0x44, 0x6, 0xc2e3, 0xa, 0x1, 0x7, 0x101, 0x65, 0x2, 0x0, 0x4, 0x0, 0x5, 0x5, 0x56, 0x7, 0x1, 0x4, 0x7a64, 0x6, 0x7fff, 0x3, 0x7f, 0x6, 0x6, 0x7fff, 0x1, 0x9, 0x3, 0x9, 0x5, 0x0, 0x4dcb, 0x4efb1643, 0xfffffff9, 0x40, 0xfffffffb, 0x10001, 0x6, 0x2, 0x3, 0x200000, 0x1, 0x7, 0x1, 0x5, 0x8, 0xf8a0, 0x3, 0x437, 0x7, 0x8, 0x8, 0x8, 0xfffffff7, 0xd, 0x2, 0x1000, 0x10001, 0x6, 0x4, 0x6, 0xb558000, 0x3ff, 0x0, 0x8000, 0x4, 0x93, 0x8001, 0x2, 0x80, 0x3, 0x2, 0x9, 0x9, 0x7, 0x4, 0xffffffff, 0xfffffff7, 0xa, 0x6, 0xfffffffc, 0x7ff, 0x7fff, 0x5, 0x9c0, 0x3, 0x5, 0x0, 0x6, 0x8000, 0x4, 0x6, 0x5, 0x8d0, 0x81, 0x0, 0x7, 0x7, 0x7]}, @TCA_HTB_RTAB={0x404, 0x4, [0x100, 0x5, 0x2, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x7ff, 0x0, 0x401, 0x5, 0x7, 0x72, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x8, 0x6, 0x9, 0x80, 0x1, 0x30c2aa75, 0x80, 0x8, 0x3, 0x9bc5, 0x2, 0x1, 0xffffffff, 0x80000000, 0x7fffffff, 0x80, 0x8000000, 0xd, 0x140, 0x9, 0x7, 0x400, 0x3, 0x5, 0x8, 0x6, 0x3, 0x401, 0xffff0000, 0x0, 0xbb5, 0x9, 0x0, 0x7ff, 0x4, 0xfffffff7, 0xffffffff, 0x744, 0x3, 0x3, 0xfff, 0x3, 0x6e4, 0xb, 0x7ff, 0x8, 0xb, 0x8, 0x3, 0x2, 0x4, 0x3ab, 0x2, 0x7, 0x7, 0x81, 0xd4, 0x4, 0x0, 0xe6, 0x3, 0xe5, 0x401, 0x3, 0x5eb, 0x1c000, 0x10000000, 0x4, 0x200, 0x8, 0x4, 0x5, 0xf, 0x4, 0x1, 0x5, 0x0, 0x126, 0x7, 0x0, 0x7, 0x8, 0x4, 0x2, 0x2, 0x7, 0x5, 0x4, 0xe, 0x8, 0x2, 0x4, 0x9, 0x3, 0x20, 0x81, 0x7, 0x8, 0xffffffff, 0x8, 0xb, 0x9, 0x0, 0x3, 0xb, 0x5, 0xcf1, 0xffff0000, 0x2, 0x6, 0x5, 0x7fff, 0x5, 0x80, 0x1, 0x0, 0x7, 0x7, 0x23e, 0xa0d, 0x9, 0x0, 0x1ff, 0x8, 0x0, 0x5bb, 0x4, 0x1, 0x9, 0x6666, 0x8, 0x6ea3, 0x1, 0x6, 0x1, 0x8d, 0xc70, 0x8, 0x400, 0x6, 0x9, 0x3e03335c, 0x0, 0xc, 0x865, 0x3, 0x4, 0x4, 0x100, 0xae6, 0x7, 0x101, 0x13, 0x1, 0x5, 0x7, 0xffffb905, 0x0, 0x7ff, 0x40, 0x9, 0xffffffff, 0x7, 0x4, 0x1, 0x9, 0xbc29, 0x9, 0xfffffffb, 0x4fd79e87, 0x7, 0x8, 0x0, 0x3ff, 0x8, 0x3, 0x8d2, 0x5, 0xffff, 0x200, 0x5, 0x3, 0x1ff, 0x2, 0x6, 0x5, 0x7, 0x1, 0xec, 0xffff494b, 0x6, 0x80000000, 0x4, 0x5, 0x5, 0x7fffffff, 0x7, 0x7, 0x83, 0x7, 0x7, 0x2, 0x7fff, 0x9, 0x1, 0xfffffff0, 0xfffffffd, 0x1, 0xffffffff, 0x0, 0x31a, 0x7, 0x7, 0x44, 0x4, 0x6, 0x4, 0x8, 0x10000, 0x2, 0x8a, 0x7, 0x0, 0x244c, 0x6, 0x2, 0x848, 0x89, 0xe, 0x9, 0x5, 0xfffff800]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3577, 0x8, 0x8aa, 0xe97, 0x1, 0x4, 0x8000, 0x5, 0x2, 0x9, 0x6, 0x10, 0x1, 0xf592, 0x80000000, 0x3, 0x7fffffff, 0x101, 0x12b, 0x0, 0x8, 0x81, 0x3, 0x100, 0xbefd, 0x2, 0x9, 0xfffffffe, 0x3, 0x7fffffff, 0x3, 0x80000000, 0x2, 0x10, 0x2, 0x7, 0x2, 0x3, 0x9, 0xffff, 0x5, 0x7, 0x7d, 0x0, 0x4, 0x9, 0x8, 0x1, 0x0, 0x6, 0x5, 0x0, 0x5, 0x6, 0x3, 0xe9, 0x7, 0xc66a, 0x4, 0x600, 0xff, 0x8, 0x4, 0x4, 0x82f, 0x9, 0x2, 0x6, 0x7, 0x0, 0x6, 0x800, 0x3, 0x8, 0x2, 0xfffffff7, 0x101, 0x9, 0x1, 0x9, 0x3, 0x9f19, 0x409a, 0x4, 0xb, 0x6, 0xfffffe01, 0x9, 0xaf, 0x10000, 0x6, 0x9, 0xa2, 0x0, 0x1, 0x3, 0x6, 0x7, 0x7, 0x5, 0x4, 0x1, 0x2, 0x5, 0x5, 0x2b, 0x7, 0x80000001, 0xffffff9a, 0x6, 0xffffffff, 0x400, 0x7216000, 0x2, 0x401, 0x1, 0x1, 0x6, 0x80000000, 0x7, 0x8, 0x80, 0x80000001, 0xe, 0x3ff, 0x3ff, 0xa, 0x8, 0x1, 0x3, 0x2, 0x674, 0x2, 0x8000, 0x9, 0x1, 0x4c2a, 0x80, 0xa, 0x2, 0x2, 0x2d, 0xf, 0xd, 0x1000, 0x2, 0xffffffff, 0x7, 0x4, 0x61d2, 0xff, 0x3, 0x100, 0x0, 0x1, 0x0, 0x10, 0xfffffffc, 0x9, 0x0, 0xa28, 0x2, 0xfffffff9, 0x1ff, 0x1, 0x0, 0x3, 0x401, 0xffff8001, 0x0, 0x38d, 0x88, 0x800, 0x4, 0xf00, 0x2, 0x5, 0x0, 0x7, 0x96, 0x5, 0x0, 0x8, 0x3, 0x4c, 0xa, 0x2, 0x8001, 0xffffd988, 0xc002, 0x401, 0xde, 0x7, 0x9, 0x8, 0xa679, 0x45d3, 0x8, 0x0, 0x1, 0x7fff, 0x9, 0x5, 0xc, 0x7f, 0x589d, 0xfffffffc, 0x647, 0x0, 0x10001, 0x0, 0x35, 0x3cce9c5, 0x0, 0xfff, 0x4, 0x6, 0xae, 0x3ab, 0x9, 0xffffffff, 0xe8d4, 0x6, 0x2, 0x81, 0x6, 0x3, 0x5, 0x4, 0x0, 0xfffffffd, 0x800, 0xffc00000, 0x9, 0xfffffff5, 0x5, 0x385c, 0x5, 0x0, 0x80000000, 0x1, 0x5, 0x1, 0x3, 0x80, 0xbe21, 0x1ff, 0x401, 0x3, 0x1ff, 0x7fffffff, 0x44d0618f, 0xfffffff8, 0x80000000, 0x7, 0x8]}]}}, @tclass_kind_options=@c_prio={0x9}]}, 0x1480}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newtclass={0x1480, 0x28, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xd, 0xb}, {0x8, 0x3}, {0xe, 0xfff7}}, [@tclass_kind_options=@c_htb={{0x8}, {0x1448, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x6, 0x140, 0xfffffff8, 0xb, 0x1, 0x9, 0xfffffff8, 0xf2c7, 0xfffff1ff, 0x3e48, 0x6f1a9eea, 0x7, 0x80000001, 0x7, 0x5, 0x5, 0x1000, 0x0, 0x1, 0x8, 0x380, 0x268fa02a, 0x7f, 0x2, 0x0, 0x0, 0x9, 0x4, 0x3, 0x82a5, 0x80000000, 0x0, 0x81ce, 0x560, 0x8, 0x3, 0x8001, 0x4, 0x0, 0x7fffffff, 0xab0fc3f, 0x1, 0x1, 0x2, 0x5, 0x2, 0xf86, 0x7, 0x9, 0x7fff, 0x9783, 0x10, 0xffff, 0x3, 0x10, 0xd6, 0x4, 0x10, 0x6, 0x7fff, 0x2, 0x1, 0x100, 0x40d3, 0x0, 0x1, 0x4, 0x28000, 0x3, 0x3ff, 0x2, 0x3, 0x3, 0xee, 0x3, 0x8000, 0x10000, 0x4, 0xb, 0x200, 0x6f4f, 0x3, 0x2, 0x3, 0x4, 0x0, 0x31, 0x5, 0x6, 0x5, 0x3, 0xe, 0x10001, 0x7ff, 0x9, 0x4, 0x3, 0x9, 0xffff, 0xfff, 0x9, 0xff, 0x7, 0x3, 0x9, 0x1, 0x100, 0x4, 0x1148, 0x0, 0xd9e, 0x3, 0xcc1, 0x7ff, 0x4, 0x5, 0x8, 0x7, 0x4, 0x4, 0xffff, 0x400, 0x9, 0x0, 0x5, 0x7, 0x4, 0xbe, 0x4, 0x6, 0x7, 0x8, 0x401, 0x2, 0x0, 0x5, 0x3, 0x5, 0x207, 0x7, 0x1, 0x3, 0x1, 0x1, 0x63b, 0x9, 0x40, 0x3, 0x7fffffff, 0x0, 0x0, 0xe12, 0x92d, 0x0, 0x4, 0x8, 0x63, 0x9, 0x0, 0x4, 0x5, 0x2, 0x1, 0x1000, 0x86, 0x0, 0x9, 0xfffffff9, 0x9d6e, 0x777, 0x6, 0x9, 0xffffffff, 0x101, 0xb, 0x34f7, 0x400, 0x4, 0x3, 0x8, 0x0, 0xb, 0x0, 0x9b6, 0x4, 0x8, 0x1, 0x8000, 0x0, 0x6be, 0x10, 0xa0, 0x7f, 0x4, 0x3ce, 0x213, 0x3b1, 0x66, 0xc, 0x5, 0x7, 0xe04, 0x800, 0x7fffffff, 0x0, 0x4, 0x1, 0x8, 0x54c, 0x80, 0x7, 0x4, 0x800, 0x7f, 0x7, 0x2, 0x8, 0x8, 0x3edd52b4, 0x5, 0x3, 0x80000001, 0x4, 0x0, 0xee, 0xfff, 0x6, 0x10000, 0x7ff, 0x4, 0x0, 0x7, 0x1, 0x6, 0x1000, 0x3, 0x9, 0x10, 0x8001, 0x10000, 0x0, 0x5, 0xe949, 0xfff, 0x7, 0x8, 0x6, 0xf45, 0x1, 0x197e, 0x4e5e, 0x3, 0x7f, 0x7, 0x1]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x6, 0x2, 0xffff, 0x6, 0x81, 0x7fff}, {0xd, 0x2, 0x0, 0x3, 0x8001, 0x4}, 0x1, 0x4, 0x81, 0x4, 0x6759}}, @TCA_HTB_CTAB={0x404, 0x3, [0x1e, 0x8, 0xffffd815, 0x9, 0x8000, 0x4, 0x4, 0x6, 0x8, 0x5, 0x8, 0x3, 0x7fff, 0x4, 0x8000, 0x7, 0x81, 0x8, 0xffff8001, 0x0, 0x81, 0x7d40, 0x65e, 0x80000001, 0xbb, 0x6, 0x9, 0x1, 0xfffffff7, 0x0, 0x4, 0x863a, 0x4, 0x5, 0x5, 0x8, 0x2, 0x7, 0x1, 0x6, 0x3, 0x9, 0x40, 0xf9f, 0x0, 0x479c, 0x60, 0x7, 0x0, 0xffff, 0xef, 0x80000000, 0x5, 0xb23, 0x100, 0x1, 0x3, 0x5, 0x9, 0xffffffff, 0x80, 0x4, 0xa, 0x9, 0x94, 0x5f, 0x2, 0x0, 0xc, 0x0, 0x8001, 0x4f7, 0x9, 0x5, 0x3, 0x8, 0xa000, 0x2, 0x0, 0x8001, 0x18ce9cfd, 0x3, 0x9, 0x1, 0x21, 0x0, 0x5, 0x4, 0x2, 0x29c, 0x7, 0x9, 0x1, 0x6, 0x6, 0x80, 0x4, 0x80000001, 0x0, 0x26f6, 0x7, 0xe, 0x5, 0x7, 0x1ff, 0xbdf8, 0x3, 0x5, 0x4, 0xfffffff0, 0x7fff, 0x7, 0x0, 0x6, 0x1, 0xc00, 0x1, 0x9, 0x8, 0x4, 0x7fff, 0x4, 0xcb1c, 0x29, 0x924, 0x1800, 0x6, 0x1, 0x9, 0x10001, 0x7, 0x0, 0x5, 0x80, 0xa75, 0x779f, 0x7, 0x7, 0x8, 0x9, 0x5a2, 0x2, 0x8, 0x1000, 0x9, 0x9, 0x9, 0x7, 0x1, 0x10001, 0xfffffff7, 0x0, 0xfffffff9, 0x6, 0x10, 0x3, 0xfffffffd, 0xcbd0, 0xfffffffd, 0x400, 0x1000, 0x5, 0x7f, 0x5, 0x4ba0d33b, 0x7ff, 0xf, 0x0, 0x40, 0x8, 0x7fffffff, 0xfe0, 0x6, 0x8, 0x686f0201, 0x4, 0xa85, 0x400, 0x80000000, 0x6, 0x6, 0x8f, 0x9, 0xff, 0x1ea2, 0x6, 0x4, 0x4bdd, 0x5b, 0xe8f2, 0x10, 0x2, 0xfa1, 0x4, 0x214, 0xb2, 0x2, 0x693, 0xffff183e, 0x56, 0xb8, 0x6, 0x8, 0x0, 0x4, 0x3e, 0x3fe0, 0x800, 0x80000000, 0x3ff, 0x2, 0x1, 0x9, 0x0, 0x0, 0x403, 0x8, 0x1ccc, 0xff, 0x200, 0x3c, 0x3, 0x8001, 0x1, 0x7, 0x3, 0x7ff, 0xffff1e6e, 0x9, 0x1, 0x3, 0x1, 0x4, 0x7, 0x8, 0x1, 0x9c12, 0x1, 0x3, 0x9, 0xfe9, 0x10000, 0x80, 0x7ff, 0xe, 0x0, 0x5, 0xaad093ed, 0x5, 0x8000, 0x2, 0xa, 0x2, 0xf22e, 0x3, 0x5]}, @TCA_HTB_CTAB={0x404, 0x3, [0x2, 0x434a, 0x4, 0xd64, 0xcc80, 0x2, 0xfffffffe, 0x0, 0x100, 0x3, 0x4, 0x81, 0x264d9df5, 0x4, 0xfffffff9, 0x4, 0x4, 0xb, 0x6, 0x3, 0xb98, 0x9, 0x40, 0xd1, 0x3ff, 0x2, 0xb2, 0x2, 0x101, 0x7, 0x3, 0x4, 0x9, 0x3, 0x3ff, 0x0, 0xf7c, 0xf, 0x400, 0x6, 0xd, 0x7, 0xb, 0x1, 0x1ff, 0xb, 0x8, 0x6, 0x4, 0xe, 0x2, 0x9, 0x5, 0x13, 0x3, 0x8, 0x5, 0x800, 0x7fffffff, 0x9, 0x5, 0x9, 0xbab, 0xe, 0x3, 0x7, 0x8f, 0x8001, 0x3, 0x80000001, 0x3, 0x6eb, 0x73, 0x6, 0x8, 0x8, 0x800, 0x7, 0x1, 0x9, 0x80e, 0x7, 0xffffff00, 0x2264, 0x0, 0x5d, 0x9648, 0x80, 0xa, 0x1d, 0x2, 0x8b6, 0x6c6, 0x7, 0x40, 0x1, 0x0, 0x6, 0x6, 0x3, 0x5, 0x1, 0x1, 0x4, 0x9, 0x33bcdcbc, 0xfffeffff, 0x7ff, 0x7, 0x4, 0x4, 0x1, 0x2, 0x8, 0x7, 0x9, 0x4, 0x76, 0x7df1, 0x6, 0x0, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x50, 0x8, 0x3, 0x40, 0x3, 0xb, 0x1, 0x7, 0x3, 0x7, 0x141, 0x200, 0x40, 0x8882, 0x6c7, 0x1000, 0x594783bc, 0x9, 0x4, 0x2, 0x0, 0x0, 0x8, 0xe, 0x2, 0x1, 0x7, 0x10000, 0x69b, 0x0, 0x44, 0x6, 0xc2e3, 0xa, 0x1, 0x7, 0x101, 0x65, 0x2, 0x0, 0x4, 0x0, 0x5, 0x5, 0x56, 0x7, 0x1, 0x4, 0x7a64, 0x6, 0x7fff, 0x3, 0x7f, 0x6, 0x6, 0x7fff, 0x1, 0x9, 0x3, 0x9, 0x5, 0x0, 0x4dcb, 0x4efb1643, 0xfffffff9, 0x40, 0xfffffffb, 0x10001, 0x6, 0x2, 0x3, 0x200000, 0x1, 0x7, 0x1, 0x5, 0x8, 0xf8a0, 0x3, 0x437, 0x7, 0x8, 0x8, 0x8, 0xfffffff7, 0xd, 0x2, 0x1000, 0x10001, 0x6, 0x4, 0x6, 0xb558000, 0x3ff, 0x0, 0x8000, 0x4, 0x93, 0x8001, 0x2, 0x80, 0x3, 0x2, 0x9, 0x9, 0x7, 0x4, 0xffffffff, 0xfffffff7, 0xa, 0x6, 0xfffffffc, 0x7ff, 0x7fff, 0x5, 0x9c0, 0x3, 0x5, 0x0, 0x6, 0x8000, 0x4, 0x6, 0x5, 0x8d0, 0x81, 0x0, 0x7, 0x7, 0x7]}, @TCA_HTB_RTAB={0x404, 0x4, [0x100, 0x5, 0x2, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x7ff, 0x0, 0x401, 0x5, 0x7, 0x72, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x8, 0x6, 0x9, 0x80, 0x1, 0x30c2aa75, 0x80, 0x8, 0x3, 0x9bc5, 0x2, 0x1, 0xffffffff, 0x80000000, 0x7fffffff, 0x80, 0x8000000, 0xd, 0x140, 0x9, 0x7, 0x400, 0x3, 0x5, 0x8, 0x6, 0x3, 0x401, 0xffff0000, 0x0, 0xbb5, 0x9, 0x0, 0x7ff, 0x4, 0xfffffff7, 0xffffffff, 0x744, 0x3, 0x3, 0xfff, 0x3, 0x6e4, 0xb, 0x7ff, 0x8, 0xb, 0x8, 0x3, 0x2, 0x4, 0x3ab, 0x2, 0x7, 0x7, 0x81, 0xd4, 0x4, 0x0, 0xe6, 0x3, 0xe5, 0x401, 0x3, 0x5eb, 0x1c000, 0x10000000, 0x4, 0x200, 0x8, 0x4, 0x5, 0xf, 0x4, 0x1, 0x5, 0x0, 0x126, 0x7, 0x0, 0x7, 0x8, 0x4, 0x2, 0x2, 0x7, 0x5, 0x4, 0xe, 0x8, 0x2, 0x4, 0x9, 0x3, 0x20, 0x81, 0x7, 0x8, 0xffffffff, 0x8, 0xb, 0x9, 0x0, 0x3, 0xb, 0x5, 0xcf1, 0xffff0000, 0x2, 0x6, 0x5, 0x7fff, 0x5, 0x80, 0x1, 0x0, 0x7, 0x7, 0x23e, 0xa0d, 0x9, 0x0, 0x1ff, 0x8, 0x0, 0x5bb, 0x4, 0x1, 0x9, 0x6666, 0x8, 0x6ea3, 0x1, 0x6, 0x1, 0x8d, 0xc70, 0x8, 0x400, 0x6, 0x9, 0x3e03335c, 0x0, 0xc, 0x865, 0x3, 0x4, 0x4, 0x100, 0xae6, 0x7, 0x101, 0x13, 0x1, 0x5, 0x7, 0xffffb905, 0x0, 0x7ff, 0x40, 0x9, 0xffffffff, 0x7, 0x4, 0x1, 0x9, 0xbc29, 0x9, 0xfffffffb, 0x4fd79e87, 0x7, 0x8, 0x0, 0x3ff, 0x8, 0x3, 0x8d2, 0x5, 0xffff, 0x200, 0x5, 0x3, 0x1ff, 0x2, 0x6, 0x5, 0x7, 0x1, 0xec, 0xffff494b, 0x6, 0x80000000, 0x4, 0x5, 0x5, 0x7fffffff, 0x7, 0x7, 0x83, 0x7, 0x7, 0x2, 0x7fff, 0x9, 0x1, 0xfffffff0, 0xfffffffd, 0x1, 0xffffffff, 0x0, 0x31a, 0x7, 0x7, 0x44, 0x4, 0x6, 0x4, 0x8, 0x10000, 0x2, 0x8a, 0x7, 0x0, 0x244c, 0x6, 0x2, 0x848, 0x89, 0xe, 0x9, 0x5, 0xfffff800]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3577, 0x8, 0x8aa, 0xe97, 0x1, 0x4, 0x8000, 0x5, 0x2, 0x9, 0x6, 0x10, 0x1, 0xf592, 0x80000000, 0x3, 0x7fffffff, 0x101, 0x12b, 0x0, 0x8, 0x81, 0x3, 0x100, 0xbefd, 0x2, 0x9, 0xfffffffe, 0x3, 0x7fffffff, 0x3, 0x80000000, 0x2, 0x10, 0x2, 0x7, 0x2, 0x3, 0x9, 0xffff, 0x5, 0x7, 0x7d, 0x0, 0x4, 0x9, 0x8, 0x1, 0x0, 0x6, 0x5, 0x0, 0x5, 0x6, 0x3, 0xe9, 0x7, 0xc66a, 0x4, 0x600, 0xff, 0x8, 0x4, 0x4, 0x82f, 0x9, 0x2, 0x6, 0x7, 0x0, 0x6, 0x800, 0x3, 0x8, 0x2, 0xfffffff7, 0x101, 0x9, 0x1, 0x9, 0x3, 0x9f19, 0x409a, 0x4, 0xb, 0x6, 0xfffffe01, 0x9, 0xaf, 0x10000, 0x6, 0x9, 0xa2, 0x0, 0x1, 0x3, 0x6, 0x7, 0x7, 0x5, 0x4, 0x1, 0x2, 0x5, 0x5, 0x2b, 0x7, 0x80000001, 0xffffff9a, 0x6, 0xffffffff, 0x400, 0x7216000, 0x2, 0x401, 0x1, 0x1, 0x6, 0x80000000, 0x7, 0x8, 0x80, 0x80000001, 0xe, 0x3ff, 0x3ff, 0xa, 0x8, 0x1, 0x3, 0x2, 0x674, 0x2, 0x8000, 0x9, 0x1, 0x4c2a, 0x80, 0xa, 0x2, 0x2, 0x2d, 0xf, 0xd, 0x1000, 0x2, 0xffffffff, 0x7, 0x4, 0x61d2, 0xff, 0x3, 0x100, 0x0, 0x1, 0x0, 0x10, 0xfffffffc, 0x9, 0x0, 0xa28, 0x2, 0xfffffff9, 0x1ff, 0x1, 0x0, 0x3, 0x401, 0xffff8001, 0x0, 0x38d, 0x88, 0x800, 0x4, 0xf00, 0x2, 0x5, 0x0, 0x7, 0x96, 0x5, 0x0, 0x8, 0x3, 0x4c, 0xa, 0x2, 0x8001, 0xffffd988, 0xc002, 0x401, 0xde, 0x7, 0x9, 0x8, 0xa679, 0x45d3, 0x8, 0x0, 0x1, 0x7fff, 0x9, 0x5, 0xc, 0x7f, 0x589d, 0xfffffffc, 0x647, 0x0, 0x10001, 0x0, 0x35, 0x3cce9c5, 0x0, 0xfff, 0x4, 0x6, 0xae, 0x3ab, 0x9, 0xffffffff, 0xe8d4, 0x6, 0x2, 0x81, 0x6, 0x3, 0x5, 0x4, 0x0, 0xfffffffd, 0x800, 0xffc00000, 0x9, 0xfffffff5, 0x5, 0x385c, 0x5, 0x0, 0x80000000, 0x1, 0x5, 0x1, 0x3, 0x80, 0xbe21, 0x1ff, 0x401, 0x3, 0x1ff, 0x7fffffff, 0x44d0618f, 0xfffffff8, 0x80000000, 0x7, 0x8]}]}}, @tclass_kind_options=@c_prio={0x9}]}, 0x1480}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r9 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000040ae4b01a1d4c2359f5f8a92082cb9aa97eae7835c29a870c618f0f9c7b4c21274ce6647406496b56776e8f32d6ecff9cca536f2802f18ab8e7956cec65b4ee7a307126f463b98e2d594825932b9bb406987123bea1f2ed6a043e9e3e579f7a95097d63ded374776fd97348412cf64474159f614789f34b859e83c700e6551ee07d5fe1d23b5a51ebbe6c96c45e9b7cfc34e0fd1f5dfda5fd79f94ad6b629fedc821fc272d213db24b42c7e563443420172c012cbb031d5b3447db42d3a12d2c9221fd1ee7d85723158290d104", @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 9.653648743s ago: executing program 8 (id=818): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000078000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 9.648340366s ago: executing program 8 (id=820): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x95ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x88}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.604492071s ago: executing program 8 (id=821): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921e2c194c, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r1, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095", @ANYRES8, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000000000000001000000080000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000050006000f00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r3}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) 9.549231831s ago: executing program 8 (id=824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x300}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 8.543768042s ago: executing program 4 (id=825): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000480)='./file0\x00', 0x115) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) getsockname(r4, &(0x7f0000000300)=@hci, &(0x7f00000003c0)=0x80) chdir(&(0x7f0000000440)='./bus\x00') (async) chdir(&(0x7f0000000440)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 8.470083699s ago: executing program 40 (id=825): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000480)='./file0\x00', 0x115) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) getsockname(r4, &(0x7f0000000300)=@hci, &(0x7f00000003c0)=0x80) chdir(&(0x7f0000000440)='./bus\x00') (async) chdir(&(0x7f0000000440)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 6.666656485s ago: executing program 9 (id=847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xffffffffffffff64, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0xffffffffffffffff, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014003300776c616e300000000000000000000000e116bf7d78f9a366c293d4cb8191da794a40d3b6d2d5d11c8b9a5d1c77811ee6971c87e2bc960ea8c15207cf49a069af69223ec70ce57dc58d883499ef55a4c1538b22585dd08656146ae5915ddf4e806b4257d1605e3f60750455edd6ea99c2d6fa7fff438ab1bf5f2ace9f81ca86de7edbbd6178e8d35860931e212da825084d1cb49f6a56bd32625ef2684b19e061b6eebf48015fef1d44dfef5f140793cc3e50edd64fe013ef885f7c97373230c7de937706153616c0f151b4"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0x4}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0) sendto$inet(r6, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6", 0x34, 0x11, 0x0, 0x0) getgroups(0x44, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x1000000}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 5.521086087s ago: executing program 9 (id=854): openat$hpet(0xffffff9c, &(0x7f0000000000), 0x42482, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0), 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000011c0)=""/4080, 0xff67}, {&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000140)=""/70, 0x46}], 0x3}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) 5.367640489s ago: executing program 9 (id=857): lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1740) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000009c0)={0x2, 0x0, @ioapic={0x100000, 0x1, 0x202, 0x0, 0x0, [{0x0, 0x3, 0x4, '\x00', 0x6}, {0x5, 0xfc, 0xc0}, {0x2, 0xec, 0x8, '\x00', 0x6}, {0xf7, 0xbb, 0x0, '\x00', 0xff}, {0xf, 0x5, 0x9}, {0xff, 0x5, 0x3b, '\x00', 0x7e}, {0x60, 0xc7, 0xaa, '\x00', 0x6}, {0x4, 0x0, 0xe9, '\x00', 0x8}, {0x85, 0x1, 0x4, '\x00', 0xff}, {0xfc, 0xf8, 0x8, '\x00', 0x2}, {0x7, 0xf, 0x7, '\x00', 0x3}, {0x6, 0x7, 0xea, '\x00', 0x99}, {0x2, 0x0, 0x7, '\x00', 0x2}, {0xd7, 0x8, 0x1, '\x00', 0x5}, {0x6a, 0x9, 0x0, '\x00', 0x7f}, {0x8, 0x8, 0x8, '\x00', 0x5}, {0xb, 0x41, 0xf, '\x00', 0x7}, {0x0, 0xfd, 0xff, '\x00', 0x3}, {0x0, 0x3, 0xf, '\x00', 0x7}, {0x5, 0x81, 0x6, '\x00', 0x1}, {0x7f, 0x7, 0x9, '\x00', 0x5}, {0x8, 0x7, 0xe6, '\x00', 0x8}, {0x7, 0x5, 0x5, '\x00', 0x6}, {0xb, 0x5, 0x7f, '\x00', 0x7}]}}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000000)={0x8, 0xc4c}) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='p', 0x1}], 0x1) 5.238467417s ago: executing program 9 (id=859): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x7000000, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) syz_io_uring_setup(0x466, &(0x7f0000000440)={0x0, 0x86ed, 0x80, 0x2, 0x804}, &(0x7f0000000280), &(0x7f0000000040)) 4.346222713s ago: executing program 9 (id=863): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921e2c194c, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r1, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095", @ANYRES8, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000000000000001000000080000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000050006000f00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r3}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) 4.309082422s ago: executing program 9 (id=864): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) 3.57288205s ago: executing program 0 (id=871): r0 = syz_io_uring_setup(0x8e, &(0x7f0000000280)={0x0, 0xd146, 0x1000, 0x2, 0x222}, &(0x7f0000000380), &(0x7f0000000100)) io_uring_setup(0x5990, &(0x7f0000000300)={0x0, 0xeae0, 0x2, 0x2, 0x385, 0x0, r0}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000040)=[0xf, 0x6], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r4, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100002f00000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3.504512942s ago: executing program 0 (id=872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xa}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x101) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0xffffffff, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mount$9p_virtio(0x0, 0x0, &(0x7f00000003c0), 0x814004, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) symlink(&(0x7f00000049c0)='.\x00', 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) 2.444851998s ago: executing program 0 (id=874): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000200)={0x34, 0x1, 0x7, 0x7, 0x270}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @dev, 0x0}, &(0x7f0000000280)=0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x8, '\x00', r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500"], 0x74}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, &(0x7f00000001c0)={{0x0}, 0x0, 0x12}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x7b39, 0x0, 0xfffffffe, 0x27f}, &(0x7f00000002c0), &(0x7f0000000000)) 1.540959017s ago: executing program 0 (id=875): openat$hpet(0xffffff9c, &(0x7f0000000000), 0x42482, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0), 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000011c0)=""/4080, 0xff67}, {&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000140)=""/70, 0x46}], 0x3}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) 1.399452774s ago: executing program 2 (id=876): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x79}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.343355212s ago: executing program 2 (id=877): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10700}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.307494927s ago: executing program 2 (id=878): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0xc, 0x0, 0x34}}], 0xc}}], 0x2, 0x0) 1.233539037s ago: executing program 2 (id=879): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x0, 0x10000, {0xa, 0x0, 0x18}}, 0x1c}}, 0x0) r5 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r5) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x48, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x6, 0x0, 0x400000000000000, 0x2}, {0x0, 0x4, 0x400, 0xa78d}, 0xfffffffe, 0x6e6bb8, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 692.302069ms ago: executing program 0 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x800) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b000000000000fffcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x1ee) unshare(0x2040600) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0xfffffffffffffee0, 0x4a0f0000}, 0x4048803) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x3c, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) 90.453338ms ago: executing program 0 (id=881): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x11, 0x3, 0x8d) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000000500)=""/225, 0xe1}], 0x3, &(0x7f0000000800)=[{&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/32, 0x20}, {0x0}], 0x4, 0x0) 69.689945ms ago: executing program 2 (id=882): syz_emit_ethernet(0x7e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2e, 0x70, 0x69, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @time_exceeded={0xb, 0x2, 0x0, 0x0, 0x11, 0x0, {0x15, 0x4, 0x0, 0x4, 0x8, 0x66, 0x1, 0xc, 0x6, 0xdd32, @multicast1, @remote, {[@timestamp={0x44, 0x24, 0x2e, 0x0, 0x2, [0x80, 0xfffffc01, 0x67, 0x5, 0x5, 0x0, 0x100, 0x53]}, @timestamp_addr={0x44, 0x14, 0x44, 0x1, 0xf, [{@multicast1, 0x8}, {@empty=0x600, 0xfffffff2}]}, @rr={0x7, 0x7, 0x27, [@multicast1]}]}}}}}}}, 0x0) 0s ago: executing program 2 (id=883): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000032c0)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x7}, [@nested={0xc, 0xba, 0x0, 0x1, [@nested={0x7, 0x3, 0x0, 0x1, [@generic="893ec0"]}]}]}, 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921e2c194c, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2, 0xf, 0x10}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setpgid(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000480)={0x0, 0x4, 0x3000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x7ffe}) setpgid(0x0, r1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file1\x00', r7, &(0x7f0000000240)='./file1\x00') kernel console output (not intermixed with test programs): request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 76.898496][ T6798] tipc: Enabled bearer , priority 0 [ 76.901360][ T6798] syzkaller0: entered promiscuous mode [ 76.903082][ T6798] syzkaller0: entered allmulticast mode [ 76.908220][ T6798] tipc: Resetting bearer [ 76.911986][ T6797] tipc: Resetting bearer [ 76.915391][ T6797] tipc: Disabling bearer [ 77.401108][ T6805] cgroup: fork rejected by pids controller in /syz3 [ 77.452696][ T6835] netlink: 'syz.1.173': attribute type 32 has an invalid length. [ 77.455667][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 77.458932][ T6835] netlink: 'syz.1.173': attribute type 32 has an invalid length. [ 77.658359][ T6847] futex_wake_op: syz.2.177 tries to shift op by -1; fix this program [ 77.738100][ T6865] FAULT_INJECTION: forcing a failure. [ 77.738100][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 77.743482][ T6865] CPU: 0 UID: 0 PID: 6865 Comm: syz.0.178 Not tainted syzkaller #0 PREEMPT(full) [ 77.743499][ T6865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.743505][ T6865] Call Trace: [ 77.743508][ T6865] [ 77.743513][ T6865] dump_stack_lvl+0x16c/0x1f0 [ 77.743530][ T6865] should_fail_ex+0x512/0x640 [ 77.743546][ T6865] should_failslab+0xc2/0x120 [ 77.743560][ T6865] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 77.743572][ T6865] ? getname_flags.part.0+0x4c/0x550 [ 77.743588][ T6865] getname_flags.part.0+0x4c/0x550 [ 77.743603][ T6865] ? __pfx_ksys_write+0x10/0x10 [ 77.743615][ T6865] getname_flags+0x93/0xf0 [ 77.743626][ T6865] __ia32_sys_symlinkat+0x79/0xc0 [ 77.743639][ T6865] __do_fast_syscall_32+0x7c/0x3a0 [ 77.743653][ T6865] do_fast_syscall_32+0x32/0x80 [ 77.743666][ T6865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.743680][ T6865] RIP: 0023:0xf708e579 [ 77.743688][ T6865] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 77.743698][ T6865] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000130 [ 77.743708][ T6865] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000003 [ 77.743714][ T6865] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.743720][ T6865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.743725][ T6865] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 77.743731][ T6865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.743739][ T6865] [ 77.964418][ T6872] input: syz0 as /devices/virtual/input/input7 [ 78.323100][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 78.326494][ T6893] netlink: 104 bytes leftover after parsing attributes in process `syz.1.182'. [ 78.329816][ T6893] netlink: 104 bytes leftover after parsing attributes in process `syz.1.182'. [ 78.374186][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.512609][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.554739][ T6903] netlink: 'syz.0.187': attribute type 1 has an invalid length. [ 78.558057][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 78.600369][ T5985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.605104][ T5985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.608273][ T5985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.615256][ T5985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.618642][ T5985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.636526][ T5971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.647996][ T5971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.651338][ T5971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.654991][ T5971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.658382][ T5971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.677815][ T6906] lo speed is unknown, defaulting to 1000 [ 78.683102][ T6906] wlan0 speed is unknown, defaulting to 1000 [ 78.688687][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.738108][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.804690][ T6906] chnl_net:caif_netlink_parms(): no params data found [ 78.888556][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 78.940735][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.945512][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.956170][ T46] bond0 (unregistering): Released all slaves [ 78.988740][ T6922] warning: `syz.0.188' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.029676][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.032874][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.036038][ T6906] bridge_slave_0: entered allmulticast mode [ 79.097146][ T6906] bridge_slave_0: entered promiscuous mode [ 79.113392][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.116413][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.131692][ T6906] bridge_slave_1: entered allmulticast mode [ 79.134956][ T6906] bridge_slave_1: entered promiscuous mode [ 79.150229][ T46] tipc: Disabling bearer [ 79.286743][ T46] tipc: Left network mode [ 79.340006][ T6906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.345918][ T6906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.399411][ T6906] team0: Port device team_slave_0 added [ 79.403798][ T6906] team0: Port device team_slave_1 added [ 79.433573][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.435815][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.446864][ T6906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.454790][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.457347][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.468562][ T6906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.509737][ T6906] hsr_slave_0: entered promiscuous mode [ 79.512391][ T6906] hsr_slave_1: entered promiscuous mode [ 79.515033][ T6906] debugfs: 'hsr0' already exists in 'hsr' [ 79.517668][ T6906] Cannot create hsr debugfs directory [ 79.543020][ T6951] syz.3.195 uses obsolete (PF_INET,SOCK_PACKET) [ 79.558345][ T46] hsr_slave_0: left promiscuous mode [ 79.561937][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.564598][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.567675][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.571755][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.576389][ T46] veth1_macvtap: left promiscuous mode [ 79.578593][ T46] veth0_macvtap: left promiscuous mode [ 79.581407][ T46] veth1_vlan: left promiscuous mode [ 79.583737][ T46] veth0_vlan: left promiscuous mode [ 79.713237][ T46] team_slave_1 (unregistering): left promiscuous mode [ 79.716633][ T46] team0 (unregistering): Port device team_slave_1 removed [ 79.728245][ T46] team_slave_0 (unregistering): left promiscuous mode [ 79.736205][ T46] team0 (unregistering): Port device team_slave_0 removed [ 79.881937][ T6906] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.887959][ T6906] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.894952][ T6906] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.898899][ T6906] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.934156][ T6906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.006284][ T6906] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.115411][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.118408][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.145333][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.147989][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.679697][ T5985] Bluetooth: hci1: command tx timeout [ 80.769117][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.201'. [ 80.864112][ T6906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.075491][ T6906] veth0_vlan: entered promiscuous mode [ 81.080130][ T6906] veth1_vlan: entered promiscuous mode [ 81.091461][ T6906] veth0_macvtap: entered promiscuous mode [ 81.095037][ T6906] veth1_macvtap: entered promiscuous mode [ 81.102336][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.106839][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.112468][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.115209][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.117857][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.128155][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.140639][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.143129][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.155544][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.158795][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.244924][ T34] cfg80211: failed to load regulatory.db [ 81.561450][ T7019] netlink: 104 bytes leftover after parsing attributes in process `syz.4.205'. [ 81.564976][ T7019] netlink: 104 bytes leftover after parsing attributes in process `syz.4.205'. [ 81.778570][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 81.802803][ T7040] netlink: 'syz.3.213': attribute type 1 has an invalid length. [ 81.816590][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.213'. [ 82.735733][ T7073] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 82.759411][ T5985] Bluetooth: hci1: command tx timeout [ 82.763749][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.221'. [ 82.819945][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 82.837278][ T7080] netlink: 'syz.1.220': attribute type 4 has an invalid length. [ 82.846325][ T7080] netlink: 'syz.1.220': attribute type 4 has an invalid length. [ 83.028977][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 83.741583][ T7108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.842425][ T7110] dvmrp9: entered allmulticast mode [ 84.375298][ T7125] netlink: 'syz.4.239': attribute type 23 has an invalid length. [ 84.422644][ T7110] syz.1.232 (7110) used greatest stack depth: 19608 bytes left [ 84.840221][ T5985] Bluetooth: hci1: command tx timeout [ 84.943830][ T7138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.947758][ T7138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.001610][ T7164] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 86.004599][ T7164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.249'. [ 86.010094][ T7164] batman_adv: batadv0: Adding interface: virt_wifi0 [ 86.012302][ T7164] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.023190][ T7164] batman_adv: batadv0: Interface activated: virt_wifi0 [ 86.057272][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 86.063242][ T7168] mkiss: ax0: crc mode is auto. [ 86.218637][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 86.218653][ T40] audit: type=1326 audit(1755674850.598:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.3.258" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ee579 code=0x0 [ 86.555475][ T7201] wg2: entered allmulticast mode [ 86.919878][ T5985] Bluetooth: hci1: command tx timeout [ 87.428794][ T7209] FAULT_INJECTION: forcing a failure. [ 87.428794][ T7209] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 87.433149][ T7209] CPU: 3 UID: 0 PID: 7209 Comm: syz.1.266 Not tainted syzkaller #0 PREEMPT(full) [ 87.433164][ T7209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.433170][ T7209] Call Trace: [ 87.433173][ T7209] [ 87.433177][ T7209] dump_stack_lvl+0x16c/0x1f0 [ 87.433211][ T7209] should_fail_ex+0x512/0x640 [ 87.433235][ T7209] should_fail_alloc_page+0xe7/0x130 [ 87.433249][ T7209] prepare_alloc_pages+0x3c2/0x610 [ 87.433264][ T7209] ? rcu_is_watching+0x12/0xc0 [ 87.433276][ T7209] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 87.433290][ T7209] ? rcu_is_watching+0x12/0xc0 [ 87.433300][ T7209] ? trace_mm_page_alloc+0x11f/0x1a0 [ 87.433315][ T7209] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 87.433328][ T7209] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 87.433340][ T7209] ? stack_depot_save_flags+0x3de/0x9c0 [ 87.433356][ T7209] ? alloc_vmap_area+0xdc8/0x29c0 [ 87.433370][ T7209] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 87.433380][ T7209] ? array_map_alloc+0x3b0/0x760 [ 87.433393][ T7209] ? map_create+0x592/0x1f80 [ 87.433406][ T7209] ? __sys_bpf+0x44d2/0x4de0 [ 87.433419][ T7209] ? __ia32_sys_bpf+0x76/0xe0 [ 87.433434][ T7209] ? __do_fast_syscall_32+0x7c/0x3a0 [ 87.433447][ T7209] ? do_fast_syscall_32+0x32/0x80 [ 87.433459][ T7209] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.433474][ T7209] alloc_pages_bulk_noprof+0x71c/0x1410 [ 87.433487][ T7209] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.433503][ T7209] ? policy_nodemask+0xea/0x4e0 [ 87.433517][ T7209] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 87.433529][ T7209] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 87.433545][ T7209] kasan_populate_vmalloc+0xf1/0x1f0 [ 87.433557][ T7209] alloc_vmap_area+0x959/0x29c0 [ 87.433574][ T7209] ? __pfx_alloc_vmap_area+0x10/0x10 [ 87.433589][ T7209] __get_vm_area_node+0x1ca/0x330 [ 87.433605][ T7209] __vmalloc_node_range_noprof+0x271/0x14b0 [ 87.433615][ T7209] ? array_map_alloc+0x3b0/0x760 [ 87.433628][ T7209] ? is_bpf_text_address+0x94/0x1a0 [ 87.433640][ T7209] ? kernel_text_address+0x8d/0x100 [ 87.433650][ T7209] ? __kernel_text_address+0xd/0x40 [ 87.433658][ T7209] ? unwind_get_return_address+0x59/0xa0 [ 87.433670][ T7209] ? array_map_alloc+0x3b0/0x760 [ 87.433684][ T7209] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 87.433694][ T7209] ? aa_get_newest_label+0xd2/0x250 [ 87.433705][ T7209] ? apparmor_capable+0x114/0x1d0 [ 87.433717][ T7209] ? array_map_alloc+0x3b0/0x760 [ 87.433729][ T7209] __bpf_map_area_alloc+0x12e/0x200 [ 87.433744][ T7209] ? array_map_alloc+0x3b0/0x760 [ 87.433758][ T7209] array_map_alloc+0x3b0/0x760 [ 87.433771][ T7209] map_create+0x592/0x1f80 [ 87.433785][ T7209] ? kstrtouint_from_user+0x13c/0x1d0 [ 87.433799][ T7209] ? __pfx_map_create+0x10/0x10 [ 87.433811][ T7209] ? __might_fault+0x13b/0x190 [ 87.433822][ T7209] ? rcu_is_watching+0x12/0xc0 [ 87.433832][ T7209] ? __might_fault+0xe3/0x190 [ 87.433842][ T7209] ? lock_release+0x201/0x2f0 [ 87.433858][ T7209] __sys_bpf+0x44d2/0x4de0 [ 87.433919][ T7209] ? lock_release+0x201/0x2f0 [ 87.433937][ T7209] ? __pfx___sys_bpf+0x10/0x10 [ 87.433958][ T7209] ? ksys_write+0x190/0x250 [ 87.433974][ T7209] ? rcu_is_watching+0x12/0xc0 [ 87.433990][ T7209] ? lock_release+0x201/0x2f0 [ 87.434008][ T7209] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 87.434025][ T7209] ? fput+0x9b/0xd0 [ 87.434042][ T7209] ? ksys_write+0x1ac/0x250 [ 87.434053][ T7209] ? __pfx_ksys_write+0x10/0x10 [ 87.434065][ T7209] __ia32_sys_bpf+0x76/0xe0 [ 87.434080][ T7209] __do_fast_syscall_32+0x7c/0x3a0 [ 87.434094][ T7209] do_fast_syscall_32+0x32/0x80 [ 87.434106][ T7209] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.434119][ T7209] RIP: 0023:0xf7fd6579 [ 87.434127][ T7209] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 87.434137][ T7209] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 87.434153][ T7209] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080004080 [ 87.434159][ T7209] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.434165][ T7209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.434170][ T7209] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 87.434176][ T7209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.434185][ T7209] [ 88.055399][ T7225] can0: slcan on pty20. [ 88.422700][ T7234] team0: Port device team_slave_0 removed [ 88.515344][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 88.520637][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 88.643270][ T7253] FAULT_INJECTION: forcing a failure. [ 88.643270][ T7253] name failslab, interval 1, probability 0, space 0, times 0 [ 88.648338][ T7253] CPU: 2 UID: 0 PID: 7253 Comm: syz.3.276 Not tainted syzkaller #0 PREEMPT(full) [ 88.648353][ T7253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.648359][ T7253] Call Trace: [ 88.648363][ T7253] [ 88.648367][ T7253] dump_stack_lvl+0x16c/0x1f0 [ 88.648396][ T7253] should_fail_ex+0x512/0x640 [ 88.648412][ T7253] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 88.648429][ T7253] should_failslab+0xc2/0x120 [ 88.648442][ T7253] __kmalloc_noprof+0xd2/0x510 [ 88.648455][ T7253] ? __pfx___might_resched+0x10/0x10 [ 88.648466][ T7253] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 88.648483][ T7253] ? __mutex_lock+0x1c5/0x1060 [ 88.648496][ T7253] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 88.648512][ T7253] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 88.648526][ T7253] ? rcu_is_watching+0x12/0xc0 [ 88.648551][ T7253] ? bpf_lsm_capable+0x9/0x10 [ 88.648560][ T7253] ? security_capable+0x7e/0x260 [ 88.648572][ T7253] genl_rcv_msg+0x55c/0x800 [ 88.648588][ T7253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.648602][ T7253] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 88.648618][ T7253] netlink_rcv_skb+0x155/0x420 [ 88.648631][ T7253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.648646][ T7253] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.648662][ T7253] ? netlink_deliver_tap+0x1ae/0xd30 [ 88.648674][ T7253] ? is_vmalloc_addr+0x86/0xa0 [ 88.648686][ T7253] genl_rcv+0x28/0x40 [ 88.648699][ T7253] netlink_unicast+0x5aa/0x870 [ 88.648713][ T7253] ? __pfx_netlink_unicast+0x10/0x10 [ 88.648726][ T7253] ? __pfx___might_resched+0x10/0x10 [ 88.648737][ T7253] netlink_sendmsg+0x8d1/0xdd0 [ 88.648751][ T7253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.648765][ T7253] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 88.648777][ T7253] ____sys_sendmsg+0xa95/0xc70 [ 88.648793][ T7253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.648808][ T7253] ? get_compat_msghdr+0x11a/0x170 [ 88.648821][ T7253] ? kstrtouint_from_user+0x13c/0x1d0 [ 88.648834][ T7253] ___sys_sendmsg+0x134/0x1d0 [ 88.648847][ T7253] ? get_pid_task+0xfc/0x250 [ 88.648860][ T7253] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.648875][ T7253] ? rcu_is_watching+0x12/0xc0 [ 88.648889][ T7253] __sys_sendmsg+0x16d/0x220 [ 88.648901][ T7253] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.648916][ T7253] ? rcu_is_watching+0x12/0xc0 [ 88.648927][ T7253] __do_fast_syscall_32+0x7c/0x3a0 [ 88.648941][ T7253] do_fast_syscall_32+0x32/0x80 [ 88.648954][ T7253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.648967][ T7253] RIP: 0023:0xf70ee579 [ 88.648975][ T7253] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.648985][ T7253] RSP: 002b:00000000f54de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 88.648995][ T7253] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 88.649001][ T7253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.649007][ T7253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.649012][ T7253] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.649018][ T7253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.649028][ T7253] [ 88.753589][ C2] vkms_vblank_simulate: vblank timer overrun [ 88.841039][ T7221] can0 (unregistered): slcan off pty20. [ 89.146184][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 89.148971][ T7258] bridge_slave_1: left allmulticast mode [ 89.150943][ T7258] bridge_slave_1: left promiscuous mode [ 89.153105][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.195289][ T7258] bridge_slave_0: left allmulticast mode [ 89.198370][ T7258] bridge_slave_0: left promiscuous mode [ 89.200655][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.488219][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.280'. [ 89.602149][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 89.606918][ T7283] netlink: 104 bytes leftover after parsing attributes in process `syz.1.282'. [ 89.610162][ T7283] netlink: 104 bytes leftover after parsing attributes in process `syz.1.282'. [ 89.678492][ T7293] netlink: 196 bytes leftover after parsing attributes in process `syz.1.284'. [ 89.692589][ T7296] siw: device registration error -23 [ 89.711909][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 89.719566][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 89.722278][ T7298] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 89.769256][ T7298] nbd: socks must be embedded in a SOCK_ITEM attr [ 89.771550][ T7298] block nbd0: shutting down sockets [ 90.930329][ T40] audit: type=1326 audit(1755674855.318:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 90.937360][ T40] audit: type=1326 audit(1755674855.318:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 90.944987][ T40] audit: type=1326 audit(1755674855.318:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.296" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 90.952522][ T40] audit: type=1326 audit(1755674855.318:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 90.960434][ T40] audit: type=1326 audit(1755674855.318:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 90.967363][ T40] audit: type=1326 audit(1755674855.328:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.296" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 90.974147][ T40] audit: type=1326 audit(1755674855.328:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 90.980956][ T40] audit: type=1326 audit(1755674855.328:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 90.988395][ T40] audit: type=1326 audit(1755674855.328:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.296" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 91.656901][ T7352] siw: device registration error -23 [ 92.841750][ T7365] Set syz1 is full, maxelem 65536 reached [ 92.866193][ T7393] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 93.123251][ T7398] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 93.331246][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 93.331261][ T40] audit: type=1326 audit(1755674857.718:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.3.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 93.341262][ T40] audit: type=1326 audit(1755674857.718:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.3.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 93.347960][ T40] audit: type=1326 audit(1755674857.718:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.3.309" exe="/syz-executor" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 93.354862][ T40] audit: type=1326 audit(1755674857.718:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.3.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 93.363315][ T40] audit: type=1326 audit(1755674857.718:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.3.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 93.370937][ T40] audit: type=1326 audit(1755674857.718:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.3.309" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 93.379577][ T40] audit: type=1326 audit(1755674857.718:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.3.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 93.388182][ T40] audit: type=1326 audit(1755674857.718:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.3.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 93.395768][ T40] audit: type=1326 audit(1755674857.718:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.3.309" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 93.403200][ T40] audit: type=1326 audit(1755674857.718:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.3.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 93.436287][ T7407] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 93.931659][ T7427] __nla_validate_parse: 4 callbacks suppressed [ 93.931669][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.316'. [ 93.955935][ T7429] fuse: blksize only supported for fuseblk [ 94.494299][ T7462] binder_alloc: 7461: binder_alloc_buf size 50343936 failed, no address space [ 94.498400][ T7462] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 94.731935][ T841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 94.899255][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 94.902908][ T841] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.906367][ T841] usb 6-1: config 0 has no interface number 0 [ 94.912171][ T841] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.917596][ T841] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.924827][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.933280][ T841] usb 6-1: config 0 descriptor?? [ 94.946509][ T841] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 95.140450][ T7459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.326'. [ 95.143796][ T7459] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 95.153535][ T841] usb 6-1: USB disconnect, device number 3 [ 96.522940][ T7487] netlink: 96 bytes leftover after parsing attributes in process `syz.3.334'. [ 96.976638][ T7503] siw: device registration error -23 [ 97.443585][ T7510] syz.0.341 (7510): drop_caches: 2 [ 97.458763][ T7510] syz.0.341 (7510): drop_caches: 2 [ 97.746513][ T7523] FAULT_INJECTION: forcing a failure. [ 97.746513][ T7523] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.752275][ T7523] CPU: 2 UID: 0 PID: 7523 Comm: syz.4.344 Not tainted syzkaller #0 PREEMPT(full) [ 97.752292][ T7523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.752299][ T7523] Call Trace: [ 97.752303][ T7523] [ 97.752308][ T7523] dump_stack_lvl+0x16c/0x1f0 [ 97.752325][ T7523] should_fail_ex+0x512/0x640 [ 97.752342][ T7523] strncpy_from_user+0x3b/0x2e0 [ 97.752356][ T7523] getname_flags.part.0+0x8f/0x550 [ 97.752373][ T7523] ? __pfx_ksys_write+0x10/0x10 [ 97.752433][ T7523] getname_flags+0x93/0xf0 [ 97.752446][ T7523] __ia32_sys_symlinkat+0x86/0xc0 [ 97.752460][ T7523] __do_fast_syscall_32+0x7c/0x3a0 [ 97.752476][ T7523] do_fast_syscall_32+0x32/0x80 [ 97.752490][ T7523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.752504][ T7523] RIP: 0023:0xf70ee579 [ 97.752513][ T7523] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 97.752523][ T7523] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000130 [ 97.752534][ T7523] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000003 [ 97.752544][ T7523] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.752550][ T7523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.752556][ T7523] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 97.752562][ T7523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.752571][ T7523] [ 97.828078][ T7525] lo speed is unknown, defaulting to 1000 [ 97.831391][ T7525] wlan0 speed is unknown, defaulting to 1000 [ 97.905493][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.346'. [ 98.725214][ T7543] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 98.745859][ T7543] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.764181][ T7543] bond3: (slave vlan2): making interface the new active one [ 98.767324][ T7543] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 99.240169][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 99.402536][ T34] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.406411][ T34] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.414717][ T34] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.418196][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.432167][ T7547] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.455166][ T34] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.645521][ T34] usb 8-1: USB disconnect, device number 2 [ 99.701393][ T7554] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 99.936837][ T7547] netlink: 'syz.3.351': attribute type 1 has an invalid length. [ 100.380479][ T7563] netlink: 5 bytes leftover after parsing attributes in process `syz.1.354'. [ 100.383865][ T7563] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 100.390602][ T7563] 0ªX¹¦D: entered allmulticast mode [ 100.392768][ T7563] veth0_macvtap: entered allmulticast mode [ 100.395410][ T7563] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 100.455335][ T7563] hub 1-0:1.0: USB hub found [ 100.457318][ T7563] hub 1-0:1.0: 6 ports detected [ 100.619908][ T24] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 100.729411][ T67] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.804235][ T24] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 100.808062][ T24] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 100.812873][ T24] usb 1-1: Product: QEMU USB Tablet [ 100.815538][ T24] usb 1-1: Manufacturer: QEMU [ 100.817601][ T24] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 100.855229][ T24] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0003/input/input8 [ 100.889207][ T67] usb 5-1: Using ep0 maxpacket: 8 [ 100.892588][ T67] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 100.896077][ T67] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 100.899459][ T67] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.902552][ T67] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.906953][ T67] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.910028][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.931049][ T24] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 101.122428][ T67] usb 5-1: GET_CAPABILITIES returned 0 [ 101.124236][ T67] usbtmc 5-1:16.0: can't read capabilities [ 101.318132][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 101.322195][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 101.326485][ T7605] bridge0: port 3(erspan0) entered blocking state [ 101.329428][ T7605] bridge0: port 3(erspan0) entered disabled state [ 101.330834][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 101.330842][ T40] audit: type=1326 audit(1755674865.718:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.355" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 101.331572][ T7605] erspan0: entered allmulticast mode [ 101.342527][ T7605] erspan0: entered promiscuous mode [ 101.344391][ T7605] bridge0: port 3(erspan0) entered blocking state [ 101.346470][ T7605] bridge0: port 3(erspan0) entered forwarding state [ 101.961087][ T7613] cgroup: fork rejected by pids controller in /syz4 [ 102.022153][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 102.052089][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 103.180115][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 103.183055][T10090] erspan0: left allmulticast mode [ 103.184743][T10090] erspan0: left promiscuous mode [ 103.187814][T10090] bridge0: port 3(erspan0) entered disabled state [ 103.224732][T10090] bridge_slave_1: left allmulticast mode [ 103.226477][T10090] bridge_slave_1: left promiscuous mode [ 103.228290][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.232961][T10090] bridge_slave_0: left allmulticast mode [ 103.235160][T10090] bridge_slave_0: left promiscuous mode [ 103.237300][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.382625][T10098] netlink: 56 bytes leftover after parsing attributes in process `syz.3.369'. [ 103.538308][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 103.545305][ T29] usb 5-1: USB disconnect, device number 3 [ 103.614583][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 104.838542][T10126] netlink: 'syz.0.375': attribute type 2 has an invalid length. [ 104.841147][T10126] netlink: 'syz.0.375': attribute type 3 has an invalid length. [ 106.668244][T10175] lo speed is unknown, defaulting to 1000 [ 106.670510][T10175] wlan0 speed is unknown, defaulting to 1000 [ 107.077179][T10185] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 107.079953][T10185] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 107.083695][T10185] vhci_hcd vhci_hcd.0: Device attached [ 107.110080][T10185] fuse: Unknown parameter 'fd?/i$ö 4•îùpŸz{m›{(T¼@/ëç¿6' [ 107.142376][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 107.354827][T10186] vhci_hcd: connection closed [ 107.355098][ T13] vhci_hcd: stop threads [ 107.358888][ T13] vhci_hcd: release socket [ 107.361672][ T13] vhci_hcd: disconnect device [ 107.399237][ T67] usb 44-1: enqueue for inactive port 0 [ 107.899893][ T67] usb usb44-port1: attempt power cycle [ 108.381192][T10229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.401'. [ 108.582128][ T67] usb usb44-port1: unable to enumerate USB device [ 108.965077][T10240] afs: Unknown parameter '00000000000000000000004' [ 109.440720][T10249] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 110.047415][T10269] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.049998][T10269] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 110.441481][T10282] netlink: 40 bytes leftover after parsing attributes in process `syz.4.418'. [ 110.732534][T10301] netlink: 256 bytes leftover after parsing attributes in process `syz.0.424'. [ 110.736300][T10301] netlink: 72 bytes leftover after parsing attributes in process `syz.0.424'. [ 110.741267][T10301] FAULT_INJECTION: forcing a failure. [ 110.741267][T10301] name failslab, interval 1, probability 0, space 0, times 0 [ 110.757502][T10301] CPU: 0 UID: 0 PID: 10301 Comm: syz.0.424 Not tainted syzkaller #0 PREEMPT(full) [ 110.757523][T10301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.757534][T10301] Call Trace: [ 110.757540][T10301] [ 110.757545][T10301] dump_stack_lvl+0x16c/0x1f0 [ 110.757585][T10301] should_fail_ex+0x512/0x640 [ 110.757610][T10301] should_failslab+0xc2/0x120 [ 110.757633][T10301] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 110.757653][T10301] ? __alloc_skb+0x2b2/0x380 [ 110.757674][T10301] __alloc_skb+0x2b2/0x380 [ 110.757693][T10301] ? __pfx___alloc_skb+0x10/0x10 [ 110.757712][T10301] ? genl_rcv_msg+0x4bb/0x800 [ 110.757739][T10301] netlink_ack+0x15d/0xb80 [ 110.757764][T10301] netlink_rcv_skb+0x332/0x420 [ 110.757786][T10301] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.757811][T10301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.757835][T10301] ? netlink_deliver_tap+0x1ae/0xd30 [ 110.757855][T10301] ? is_vmalloc_addr+0x86/0xa0 [ 110.757874][T10301] genl_rcv+0x28/0x40 [ 110.757895][T10301] netlink_unicast+0x5aa/0x870 [ 110.757917][T10301] ? __pfx_netlink_unicast+0x10/0x10 [ 110.757938][T10301] ? __pfx___might_resched+0x10/0x10 [ 110.757961][T10301] netlink_sendmsg+0x8d1/0xdd0 [ 110.757989][T10301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.758011][T10301] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 110.758031][T10301] ____sys_sendmsg+0xa95/0xc70 [ 110.758056][T10301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.758081][T10301] ? get_compat_msghdr+0x11a/0x170 [ 110.758104][T10301] ? kstrtouint_from_user+0x13c/0x1d0 [ 110.758126][T10301] ___sys_sendmsg+0x134/0x1d0 [ 110.758146][T10301] ? get_pid_task+0xfc/0x250 [ 110.758168][T10301] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.758193][T10301] ? rcu_is_watching+0x12/0xc0 [ 110.758220][T10301] __sys_sendmsg+0x16d/0x220 [ 110.758242][T10301] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.758266][T10301] ? rcu_is_watching+0x12/0xc0 [ 110.758285][T10301] __do_fast_syscall_32+0x7c/0x3a0 [ 110.758309][T10301] do_fast_syscall_32+0x32/0x80 [ 110.758330][T10301] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.758351][T10301] RIP: 0023:0xf708e579 [ 110.758364][T10301] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 110.758380][T10301] RSP: 002b:00000000f547e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 110.758396][T10301] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 110.758408][T10301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.758416][T10301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.758425][T10301] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 110.758434][T10301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.758451][T10301] [ 111.177111][T10313] kvm: kvm [10312]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffff00000005 [ 111.373689][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 111.378342][T10322] vlan3: entered allmulticast mode [ 111.380229][T10322] hsr0: entered allmulticast mode [ 111.381879][T10322] hsr_slave_0: entered allmulticast mode [ 111.383730][T10322] hsr_slave_1: entered allmulticast mode [ 111.819113][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 111.822185][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 111.825146][T10355] netlink: 'syz.4.440': attribute type 1 has an invalid length. [ 111.827686][T10355] netlink: 10 bytes leftover after parsing attributes in process `syz.4.440'. [ 111.889383][T10355] nbd: socks must be embedded in a SOCK_ITEM attr [ 111.891660][T10355] block nbd0: shutting down sockets [ 112.249533][T10364] netlink: 48 bytes leftover after parsing attributes in process `syz.1.444'. [ 112.258928][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.442'. [ 112.375655][T10369] FAULT_INJECTION: forcing a failure. [ 112.375655][T10369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.381023][T10369] CPU: 0 UID: 0 PID: 10369 Comm: syz.3.445 Not tainted syzkaller #0 PREEMPT(full) [ 112.381040][T10369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.381047][T10369] Call Trace: [ 112.381051][T10369] [ 112.381055][T10369] dump_stack_lvl+0x16c/0x1f0 [ 112.381072][T10369] should_fail_ex+0x512/0x640 [ 112.381089][T10369] _copy_from_user+0x2e/0xd0 [ 112.381106][T10369] get_compat_msghdr+0xa7/0x170 [ 112.381120][T10369] ? __pfx_get_compat_msghdr+0x10/0x10 [ 112.381133][T10369] ? __pfx__kstrtoull+0x10/0x10 [ 112.381146][T10369] ? rcu_is_watching+0x12/0xc0 [ 112.381158][T10369] ___sys_sendmsg+0x1ae/0x1d0 [ 112.381172][T10369] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.381185][T10369] ? __pfx_kstrtouint+0x10/0x10 [ 112.381200][T10369] ? rcu_is_watching+0x12/0xc0 [ 112.381215][T10369] __sys_sendmmsg+0x2f9/0x420 [ 112.381229][T10369] ? __pfx___sys_sendmmsg+0x10/0x10 [ 112.381242][T10369] ? lock_release+0x201/0x2f0 [ 112.381259][T10369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.381283][T10369] ? fput+0x9b/0xd0 [ 112.381306][T10369] ? ksys_write+0x1ac/0x250 [ 112.381325][T10369] ? __pfx_ksys_write+0x10/0x10 [ 112.381345][T10369] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 112.381364][T10369] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 112.381384][T10369] __do_fast_syscall_32+0x7c/0x3a0 [ 112.381406][T10369] do_fast_syscall_32+0x32/0x80 [ 112.381423][T10369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.381437][T10369] RIP: 0023:0xf70ee579 [ 112.381446][T10369] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 112.381457][T10369] RSP: 002b:00000000f54de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 112.381467][T10369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001d40 [ 112.381474][T10369] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.381480][T10369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.381486][T10369] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 112.381492][T10369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.381501][T10369] [ 112.471848][T10372] batadv1: entered promiscuous mode [ 112.514674][T10375] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 112.523714][T10375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.593922][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 113.928968][T10411] veth1_macvtap: left promiscuous mode [ 114.252625][T10426] block device autoloading is deprecated and will be removed. [ 114.410289][T10429] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 114.868966][T10441] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 114.871151][T10441] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 114.877238][T10441] vhci_hcd vhci_hcd.0: Device attached [ 114.897288][T10441] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 114.900171][T10441] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 115.179212][ T67] usb 40-1: SetAddress Request (6) to port 0 [ 115.181448][ T67] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 115.739794][T10442] vhci_hcd: connection reset by peer [ 115.747033][ T89] vhci_hcd: stop threads [ 115.748867][ T89] vhci_hcd: release socket [ 115.756694][ T89] vhci_hcd: disconnect device [ 116.232772][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 116.236689][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 116.510486][T10483] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 117.186504][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 117.211246][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 117.213979][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 117.216781][T10526] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 117.220372][T10526] netlink: 10 bytes leftover after parsing attributes in process `syz.0.481'. [ 117.299289][T10526] nbd: socks must be embedded in a SOCK_ITEM attr [ 117.301802][T10526] block nbd0: shutting down sockets [ 117.615650][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 118.020809][T10557] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 118.463867][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 118.850705][T10582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.502'. [ 118.855991][T10582] usb 1-1: USB disconnect, device number 3 [ 118.867862][T10582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.502'. [ 119.500417][T10537] rtc_cmos 00:05: Alarms can be up to one day in the future [ 119.870088][T10599] Bluetooth: MGMT ver 1.23 [ 120.023627][ T24] rtc_cmos 00:05: Alarms can be up to one day in the future [ 120.027352][ T24] rtc_cmos 00:05: Alarms can be up to one day in the future [ 120.033259][ T24] rtc_cmos 00:05: Alarms can be up to one day in the future [ 120.037236][ T24] rtc_cmos 00:05: Alarms can be up to one day in the future [ 120.040554][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 120.206849][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 120.240714][T10606] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 120.289249][ T67] usb 40-1: device descriptor read/8, error -110 [ 120.699712][ T67] usb usb40-port1: attempt power cycle [ 120.868039][T10655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.515'. [ 120.876989][T10657] ======================================================= [ 120.876989][T10657] WARNING: The mand mount option has been deprecated and [ 120.876989][T10657] and is ignored by this kernel. Remove the mand [ 120.876989][T10657] option from the mount to silence this warning. [ 120.876989][T10657] ======================================================= [ 120.890029][T10657] devtmpfs: Too few inodes for current use [ 120.893970][T10657] netlink: 'syz.3.516': attribute type 12 has an invalid length. [ 120.896538][T10657] netlink: 'syz.3.516': attribute type 29 has an invalid length. [ 120.898951][T10657] netlink: 148 bytes leftover after parsing attributes in process `syz.3.516'. [ 121.273009][ T67] usb usb40-port1: unable to enumerate USB device [ 121.275337][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 121.278671][T10669] bridge_slave_1: left allmulticast mode [ 121.281013][T10669] bridge_slave_1: left promiscuous mode [ 121.283346][T10669] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.294453][T10669] bridge_slave_0: left promiscuous mode [ 121.297568][T10669] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.194598][T10681] tmpfs: Bad value for 'mpol' [ 122.237554][T10688] tipc: Enabling of bearer rejected, failed to enable media [ 123.060674][T10714] netlink: 'syz.1.535': attribute type 1 has an invalid length. [ 123.073291][T10714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.964395][T10793] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 125.370564][T10831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.550'. [ 125.375551][T10831] vlan4: entered promiscuous mode [ 125.377232][T10831] bridge0: entered promiscuous mode [ 125.719074][T10843] lo speed is unknown, defaulting to 1000 [ 125.721364][T10843] wlan0 speed is unknown, defaulting to 1000 [ 126.163848][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 126.168438][T10867] netlink: 104 bytes leftover after parsing attributes in process `syz.0.559'. [ 126.172731][T10867] netlink: 104 bytes leftover after parsing attributes in process `syz.0.559'. [ 127.093286][T10913] siw: device registration error -23 [ 127.465872][T10923] netlink: 256 bytes leftover after parsing attributes in process `syz.0.567'. [ 127.468780][T10923] netlink: 72 bytes leftover after parsing attributes in process `syz.0.567'. [ 127.510039][T10926] tipc: Started in network mode [ 127.511649][T10926] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 127.514460][T10926] tipc: Enabling of bearer rejected, failed to enable media [ 128.757012][T10951] netlink: 68 bytes leftover after parsing attributes in process `syz.1.579'. [ 128.759651][T10953] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 128.764878][T10951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.579'. [ 128.768198][T10953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.768375][T10951] netlink: 43 bytes leftover after parsing attributes in process `syz.1.579'. [ 128.774303][T10951] netlink: 'syz.1.579': attribute type 6 has an invalid length. [ 128.777262][T10951] netlink: 'syz.1.579': attribute type 5 has an invalid length. [ 128.780453][T10951] netlink: 43 bytes leftover after parsing attributes in process `syz.1.579'. [ 129.082153][ T6055] IPVS: starting estimator thread 0... [ 129.112442][T10968] binder_alloc: 10967: binder_alloc_buf size 13510798882123776 failed, no address space [ 129.115628][T10968] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 129.140232][T10970] netlink: 'syz.1.584': attribute type 1 has an invalid length. [ 129.169961][T10966] IPVS: using max 58 ests per chain, 139200 per kthread [ 129.687092][T10984] netlink: 'syz.3.589': attribute type 23 has an invalid length. [ 129.784610][T10993] bond0: (slave bond_slave_0): Releasing backup interface [ 129.792807][T10993] bond0: (slave bond_slave_1): Releasing backup interface [ 129.801603][T10993] team0: Port device team_slave_0 removed [ 129.821559][T10993] team0: Port device team_slave_1 removed [ 129.824384][T10993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.827496][T10993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.834767][T10993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.837583][T10993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.689801][T11002] __nla_validate_parse: 1 callbacks suppressed [ 130.689816][T11002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.595'. [ 131.398727][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 131.431114][T11014] hsr_slave_1 (unregistering): left promiscuous mode [ 131.594850][T11025] lo speed is unknown, defaulting to 1000 [ 131.597910][T11025] wlan0 speed is unknown, defaulting to 1000 [ 132.440595][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.442780][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.645414][ T5971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.647847][ T5971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.650572][ T5971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.654158][ T5971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.656518][ T5971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.662310][ T5985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.664742][ T5985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.669563][ T5985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.673207][ T5985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.675877][ T5985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.690458][T11084] lo speed is unknown, defaulting to 1000 [ 133.692569][T11084] wlan0 speed is unknown, defaulting to 1000 [ 133.914856][T10904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.988004][T10904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.047107][T10904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.081160][T11084] chnl_net:caif_netlink_parms(): no params data found [ 134.131065][T10904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.346463][T11084] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.350160][T11084] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.354427][T11084] bridge_slave_0: entered allmulticast mode [ 134.363640][T11084] bridge_slave_0: entered promiscuous mode [ 134.394590][T11084] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.398193][T11084] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.401994][T11084] bridge_slave_1: entered allmulticast mode [ 134.408515][T11084] bridge_slave_1: entered promiscuous mode [ 134.672195][T10904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.676502][T10904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.685281][T10904] bond0 (unregistering): Released all slaves [ 134.691573][T11084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.696396][T11084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.719903][T11084] team0: Port device team_slave_0 added [ 134.724620][T11084] team0: Port device team_slave_1 added [ 134.743525][T11084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.746174][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.948153][T11084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.952605][T11084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.954753][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.964508][T11084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.998680][T11084] hsr_slave_0: entered promiscuous mode [ 135.001019][T11084] hsr_slave_1: entered promiscuous mode [ 135.003512][T11084] debugfs: 'hsr0' already exists in 'hsr' [ 135.005505][T11084] Cannot create hsr debugfs directory [ 135.086500][T11084] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 135.093875][T11084] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 135.099481][T11084] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 135.104703][T11084] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 135.110727][T10904] hsr_slave_0: left promiscuous mode [ 135.112945][T10904] hsr_slave_1: left promiscuous mode [ 135.115022][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.117766][T10904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.121450][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.123945][T10904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.128995][T10904] veth1_macvtap: left promiscuous mode [ 135.131108][T10904] veth0_macvtap: left promiscuous mode [ 135.132952][T10904] veth1_vlan: left promiscuous mode [ 135.134709][T10904] veth0_vlan: left promiscuous mode [ 135.238362][T10904] team0 (unregistering): Port device team_slave_1 removed [ 135.424173][T11084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.534537][T11084] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.565938][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.568198][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.582480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.585133][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.727064][T11084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.730981][ T5971] Bluetooth: hci1: command tx timeout [ 135.740703][T11144] netlink: 'syz.1.618': attribute type 10 has an invalid length. [ 135.743103][T11144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.618'. [ 135.748254][T11144] batman_adv: batadv0: Adding interface: virt_wifi0 [ 135.757616][T11144] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.767811][T11144] batman_adv: batadv0: Interface activated: virt_wifi0 [ 136.178392][T11084] veth0_vlan: entered promiscuous mode [ 136.189579][T11084] veth1_vlan: entered promiscuous mode [ 136.201648][T11084] veth0_macvtap: entered promiscuous mode [ 136.205818][T11084] veth1_macvtap: entered promiscuous mode [ 136.212779][T11084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.218137][T11084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.225246][ T1228] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.228305][ T1228] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.231691][ T1228] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.236890][ T1228] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.274731][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.280686][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.302678][T10896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.305387][T10896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.336755][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.609'. [ 137.058702][T11190] lo speed is unknown, defaulting to 1000 [ 137.061611][T11190] wlan0 speed is unknown, defaulting to 1000 [ 137.481865][T11182] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 137.809501][ T5971] Bluetooth: hci1: command tx timeout [ 138.572714][T11210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.574727][T11210] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 138.945423][T11228] siw: device registration error -23 [ 139.105171][T11242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.638'. [ 139.163582][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.638'. [ 139.166544][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.638'. [ 139.623108][T11250] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 140.151750][ T6055] libceph: connect (1)[c::]:6789 error -101 [ 140.154330][ T6055] libceph: mon0 (1)[c::]:6789 connect error [ 140.303379][T11260] ceph: No mds server is up or the cluster is laggy [ 140.819828][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.823121][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.992663][T11279] netlink: 104 bytes leftover after parsing attributes in process `syz.3.649'. [ 140.995955][T11279] netlink: 104 bytes leftover after parsing attributes in process `syz.3.649'. [ 142.163103][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 142.731622][T11312] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 142.957127][T11319] netlink: 'syz.3.661': attribute type 63 has an invalid length. [ 143.006121][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 143.008921][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 143.012170][T11321] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 143.014686][T11321] netlink: 10 bytes leftover after parsing attributes in process `syz.3.662'. [ 143.036189][ T5985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.038570][ T5985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.041880][ T5985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.044827][ T5985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.051608][ T5985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.059650][T11321] nbd: socks must be embedded in a SOCK_ITEM attr [ 143.061826][T11321] block nbd0: shutting down sockets [ 143.068519][ T5971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.072085][ T5971] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.075421][ T5971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.078025][ T5971] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.082607][ T5971] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.103031][T11322] lo speed is unknown, defaulting to 1000 [ 143.108742][T11322] wlan0 speed is unknown, defaulting to 1000 [ 143.183655][T11322] chnl_net:caif_netlink_parms(): no params data found [ 143.195639][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.241179][T11322] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.243425][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.245703][T11322] bridge_slave_0: entered allmulticast mode [ 143.248036][T11322] bridge_slave_0: entered promiscuous mode [ 143.256760][T11322] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.260989][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.263766][T11322] bridge_slave_1: entered allmulticast mode [ 143.266130][T11322] bridge_slave_1: entered promiscuous mode [ 143.291050][T11322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.295334][T11322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.307492][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.322008][T11322] team0: Port device team_slave_0 added [ 143.325031][T11322] team0: Port device team_slave_1 added [ 143.342188][T11322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.344954][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.356548][T11322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.361347][T11322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.363533][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.371890][T11322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.376757][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.427688][T11322] hsr_slave_0: entered promiscuous mode [ 143.430103][T11322] hsr_slave_1: entered promiscuous mode [ 143.432057][T11322] debugfs: 'hsr0' already exists in 'hsr' [ 143.433846][T11322] Cannot create hsr debugfs directory [ 143.446617][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.562456][T11322] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 143.591440][T11322] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 143.594877][T11322] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 143.704400][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.708416][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.713082][ T12] bond0 (unregistering): Released all slaves [ 143.713564][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 143.721476][ T12] bond1 (unregistering): Released all slaves [ 143.726067][T11322] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 143.762289][T11322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.768746][T11322] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.775888][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.778147][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.781161][ T12] tipc: Left network mode [ 143.783529][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.786292][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.831770][T11366] infiniband syz1: set active [ 143.833396][T11366] infiniband syz1: added syz_tun [ 143.846845][T11366] RDS/IB: syz1: added [ 143.849230][T11366] smc: adding ib device syz1 with port count 1 [ 143.851288][T11366] smc: ib device syz1 port 1 has pnetid [ 143.864066][T11322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.950016][T11322] veth0_vlan: entered promiscuous mode [ 143.953641][T11322] veth1_vlan: entered promiscuous mode [ 143.963066][T11322] veth0_macvtap: entered promiscuous mode [ 143.966303][T11322] veth1_macvtap: entered promiscuous mode [ 143.973263][T11322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.978816][T11322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.986587][T10904] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.990149][T10904] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.993342][T10904] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.996193][T10904] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.030310][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.032801][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.042421][T10904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.044941][T10904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.072460][T11397] netlink: 24 bytes leftover after parsing attributes in process `syz.6.659'. [ 144.125115][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.673'. [ 144.148452][ T12] hsr_slave_0: left promiscuous mode [ 144.154109][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.156921][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.165884][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.168322][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.175163][ T12] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 144.177484][ T12] batman_adv: batadv0: Removing interface: virt_wifi0 [ 144.188596][ T12] veth0_macvtap: left promiscuous mode [ 144.193890][ T12] veth1_vlan: left promiscuous mode [ 144.195855][ T12] veth0_vlan: left promiscuous mode [ 144.352128][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.678'. [ 144.512279][ T12] team0 (unregistering): Port device team_slave_1 removed [ 144.531561][ T12] team0 (unregistering): Port device team_slave_0 removed [ 144.952883][T11432] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 144.968415][T11432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.186751][ T5971] Bluetooth: hci3: command tx timeout [ 145.569259][T11444] siw: device registration error -23 [ 146.110900][T11452] cdrom: dropping to single frame dma [ 146.127694][T11454] syzkaller1: entered promiscuous mode [ 146.129608][T11454] syzkaller1: entered allmulticast mode [ 146.135580][T11454] program syz.3.684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.142319][T11454] nfs: Unknown parameter 'ntext' [ 146.191297][T11452] netlink: 256 bytes leftover after parsing attributes in process `syz.6.683'. [ 146.194209][T11452] netlink: 72 bytes leftover after parsing attributes in process `syz.6.683'. [ 146.447207][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 146.616309][T11471] lo speed is unknown, defaulting to 1000 [ 146.619044][T11471] wlan0 speed is unknown, defaulting to 1000 [ 147.239346][ T5971] Bluetooth: hci3: command tx timeout [ 147.675506][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.697'. [ 147.692831][T11506] veth3: entered promiscuous mode [ 148.480488][T11524] program syz.1.699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.501823][T11524] 9pnet_fd: Insufficient options for proto=fd [ 148.567028][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.701'. [ 148.570288][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.701'. [ 148.573530][T11534] netlink: 'syz.6.701': attribute type 1 has an invalid length. [ 148.575988][T11534] netlink: 10 bytes leftover after parsing attributes in process `syz.6.701'. [ 148.579045][T11530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.700'. [ 148.640233][T11534] nbd: socks must be embedded in a SOCK_ITEM attr [ 148.642967][T11534] block nbd0: shutting down sockets [ 148.831338][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz.6.705'. [ 148.840315][T11546] vlan2: entered promiscuous mode [ 148.844185][T11547] siw: device registration error -23 [ 148.853274][T11546] bridge0: entered promiscuous mode [ 149.027537][T11557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.032608][T11557] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 149.302616][T11574] macvlan2: entered promiscuous mode [ 149.304993][T11574] macvlan2: entered allmulticast mode [ 149.307417][T11574] ip6gretap0: entered allmulticast mode [ 149.406668][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.711'. [ 149.411292][T11572] bridge_slave_1: left allmulticast mode [ 149.413575][T11572] bridge_slave_1: left promiscuous mode [ 149.416060][T11572] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.423497][T11572] bridge_slave_0: left allmulticast mode [ 149.425436][T11572] bridge_slave_0: left promiscuous mode [ 149.427928][T11572] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.824028][T11595] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 150.090178][T11607] lo speed is unknown, defaulting to 1000 [ 150.095252][T11607] wlan0 speed is unknown, defaulting to 1000 [ 150.191616][T11612] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.366146][T11633] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 151.550501][ T5985] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.581991][ T5985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.594894][ T5985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.670126][ T5985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.673186][ T5985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.683274][ T5971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.687306][ T5971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.691899][ T5971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.699030][ T5971] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.704011][ T5971] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.881865][T11644] Bluetooth: hci1: Frame reassembly failed (-84) [ 151.895253][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 151.926260][T11639] lo speed is unknown, defaulting to 1000 [ 151.935259][T11639] wlan0 speed is unknown, defaulting to 1000 [ 152.037103][ T1141] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.108036][ T1141] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.151545][T11639] chnl_net:caif_netlink_parms(): no params data found [ 152.244344][T11639] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.251441][T11639] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.254541][T11639] bridge_slave_0: entered allmulticast mode [ 152.257744][T11639] bridge_slave_0: entered promiscuous mode [ 152.263591][ T1141] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.268827][T11639] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.274004][T11639] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.276942][T11639] bridge_slave_1: entered allmulticast mode [ 152.282585][T11639] bridge_slave_1: entered promiscuous mode [ 152.332048][ T1141] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.341288][T11639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.346631][T11639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.373723][T11639] team0: Port device team_slave_0 added [ 152.376523][T11639] team0: Port device team_slave_1 added [ 152.425628][T11639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.427858][T11639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.436239][T11639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.440834][T11639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.443270][T11639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.452215][T11639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.496100][T11639] hsr_slave_0: entered promiscuous mode [ 152.498272][T11639] hsr_slave_1: entered promiscuous mode [ 152.515595][ T1141] bridge_slave_1: left allmulticast mode [ 152.518207][ T1141] bridge_slave_1: left promiscuous mode [ 152.521099][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.525380][ T1141] bridge_slave_0: left allmulticast mode [ 152.528261][ T1141] bridge_slave_0: left promiscuous mode [ 152.531335][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.624450][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.628283][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.632223][ T1141] bond0 (unregistering): Released all slaves [ 152.683286][T11639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 152.687036][T11639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 152.691311][T11639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 152.696403][T11639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 152.738739][T11639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.757760][T11639] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.765942][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.768722][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.774390][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.776863][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.894917][T11639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.908371][ T1141] hsr_slave_0: left promiscuous mode [ 152.915405][ T1141] hsr_slave_1: left promiscuous mode [ 152.918105][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.926382][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.931350][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.934518][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.941642][ T1141] veth1_macvtap: left promiscuous mode [ 152.944152][ T1141] veth0_macvtap: left promiscuous mode [ 152.946691][ T1141] veth1_vlan: left promiscuous mode [ 152.949434][ T1141] veth0_vlan: left promiscuous mode [ 153.037918][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 153.047684][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 153.200803][T11639] veth0_vlan: entered promiscuous mode [ 153.204885][T11639] veth1_vlan: entered promiscuous mode [ 153.218784][T11639] veth0_macvtap: entered promiscuous mode [ 153.225074][T11639] veth1_macvtap: entered promiscuous mode [ 153.234585][T11639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.239934][T11639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.245592][ T46] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.248771][ T46] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.252771][ T46] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.255539][ T46] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.281453][T10904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.284584][T10904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.292601][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.295899][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.719943][ T5971] Bluetooth: hci4: command tx timeout [ 153.959313][ T5985] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 153.959356][ T5971] Bluetooth: hci1: command 0x1003 tx timeout [ 154.042385][T11713] Set syz1 is full, maxelem 65536 reached [ 154.775283][T11731] bridge0: port 3(erspan0) entered blocking state [ 154.777417][T11731] bridge0: port 3(erspan0) entered disabled state [ 154.779920][T11731] erspan0: entered allmulticast mode [ 154.782355][T11731] erspan0: entered promiscuous mode [ 154.784238][T11731] bridge0: port 3(erspan0) entered blocking state [ 154.786379][T11731] bridge0: port 3(erspan0) entered forwarding state [ 155.494447][T11743] lo speed is unknown, defaulting to 1000 [ 155.497076][T11743] wlan0 speed is unknown, defaulting to 1000 [ 155.799851][ T5971] Bluetooth: hci4: command tx timeout [ 156.130196][T11757] can: request_module (can-proto-3) failed. [ 156.219396][T11758] syz.7.745: attempt to access beyond end of device [ 156.219396][T11758] nbd7: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 156.223513][T11758] gfs2: error -5 reading superblock [ 157.872125][T11794] __nla_validate_parse: 3 callbacks suppressed [ 157.872136][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.751'. [ 157.879542][ T5971] Bluetooth: hci4: command tx timeout [ 157.931582][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.753'. [ 157.961176][T11800] netlink: 104 bytes leftover after parsing attributes in process `syz.6.754'. [ 157.964035][T11800] netlink: 104 bytes leftover after parsing attributes in process `syz.6.754'. [ 158.906579][T11808] vxcan1: tx address claim with dest, not broadcast [ 159.959333][ T5971] Bluetooth: hci4: command tx timeout [ 167.162852][ T5985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.165538][ T5985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.167964][ T5985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.171998][ T5985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.174472][ T5985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.186343][T11841] lo speed is unknown, defaulting to 1000 [ 167.188517][T11841] wlan0 speed is unknown, defaulting to 1000 [ 167.264035][T11841] chnl_net:caif_netlink_parms(): no params data found [ 167.309226][T10904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.313258][T11841] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.315473][T11841] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.318046][T11841] bridge_slave_0: entered allmulticast mode [ 167.322108][T11841] bridge_slave_0: entered promiscuous mode [ 167.325540][T11841] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.327798][T11841] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.330745][T11841] bridge_slave_1: entered allmulticast mode [ 167.333390][T11841] bridge_slave_1: entered promiscuous mode [ 167.359370][T11841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.366634][T11841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.398844][T10904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.410300][T11841] team0: Port device team_slave_0 added [ 167.414883][T11841] team0: Port device team_slave_1 added [ 167.442972][T10904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.447586][T11841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.450273][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.458540][T11841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.464442][T11841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.466973][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.476019][T11841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.482904][T10904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.520307][T11841] hsr_slave_0: entered promiscuous mode [ 167.522559][T11841] hsr_slave_1: entered promiscuous mode [ 167.524554][T11841] debugfs: 'hsr0' already exists in 'hsr' [ 167.526326][T11841] Cannot create hsr debugfs directory [ 167.592847][T10904] bridge_slave_1: left allmulticast mode [ 167.594726][T10904] bridge_slave_1: left promiscuous mode [ 167.596600][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.600047][T10904] bridge_slave_0: left allmulticast mode [ 167.601967][T10904] bridge_slave_0: left promiscuous mode [ 167.603821][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.784039][T10904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.787542][T10904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.791455][T10904] bond0 (unregistering): Released all slaves [ 167.796071][T10904] bond1 (unregistering): Released all slaves [ 167.800220][T10904] bond2 (unregistering): Released all slaves [ 167.805162][T10904] bond3 (unregistering): (slave vlan2): Releasing active interface [ 167.808260][T10904] bond3 (unregistering): Released all slaves [ 167.813235][T10904] bond4 (unregistering): Released all slaves [ 167.817666][T10904] bond5 (unregistering): Released all slaves [ 167.838014][T11841] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 167.842364][T11841] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 167.846562][T11841] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 167.852006][T11841] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 167.886331][T11841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.897505][T11841] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.902384][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.905427][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.908862][T10904] tipc: Left network mode [ 167.913049][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.915833][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.992478][T11841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.078547][T11841] veth0_vlan: entered promiscuous mode [ 168.082229][T11841] veth1_vlan: entered promiscuous mode [ 168.089092][T10904] hsr_slave_0: left promiscuous mode [ 168.092182][T10904] hsr_slave_1: left promiscuous mode [ 168.094158][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.096487][T10904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.099173][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.101498][T10904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.112828][T10904] veth1_macvtap: left promiscuous mode [ 168.114753][T10904] veth0_macvtap: left promiscuous mode [ 168.116933][T10904] veth1_vlan: left promiscuous mode [ 168.118707][T10904] veth0_vlan: left promiscuous mode [ 168.173503][T10904] team0 (unregistering): Port device team_slave_1 removed [ 168.178181][T10904] team0 (unregistering): Port device team_slave_0 removed [ 168.224785][ T842] lo speed is unknown, defaulting to 1000 [ 168.226683][ T842] infiniband syz0: ib_query_port failed (-19) [ 168.229236][T11841] veth0_macvtap: entered promiscuous mode [ 168.232253][T11841] veth1_macvtap: entered promiscuous mode [ 168.237834][T11841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.242632][T11841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.247117][ T1141] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.251141][ T1141] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.257352][ T1141] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.260301][ T1141] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.278303][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.281857][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.289753][T10896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.292252][T10896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.511993][T10904] IPVS: stop unused estimator thread 0... [ 168.537512][T11895] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 169.223324][T11908] netlink: 'syz.8.763': attribute type 23 has an invalid length. [ 169.239606][ T5985] Bluetooth: hci0: command tx timeout [ 169.246039][ T46] smc: removing ib device syz1 [ 169.250652][T11773] syz1: Port: 1 Link DOWN [ 169.262288][ T5971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.264784][ T5971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.267585][ T5971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.272039][ T5971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.274498][ T5971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.351831][T11911] chnl_net:caif_netlink_parms(): no params data found [ 169.402599][T11911] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.404706][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.406774][T11911] bridge_slave_0: entered allmulticast mode [ 169.409812][T11911] bridge_slave_0: entered promiscuous mode [ 169.413973][T11911] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.416027][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.418132][T11911] bridge_slave_1: entered allmulticast mode [ 169.423791][T11911] bridge_slave_1: entered promiscuous mode [ 169.450261][T11911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.453875][T11911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.470504][T11923] lo speed is unknown, defaulting to 1000 [ 169.471282][T11911] team0: Port device team_slave_0 added [ 169.474557][T11923] lo speed is unknown, defaulting to 1000 [ 169.475288][T11911] team0: Port device team_slave_1 added [ 169.486272][T11923] lo speed is unknown, defaulting to 1000 [ 169.497200][T11923] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 169.501589][T11911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.504138][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.513717][T11911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.516755][T11923] lo speed is unknown, defaulting to 1000 [ 169.517254][T11911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.520966][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.528291][T11911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.532012][T11923] lo speed is unknown, defaulting to 1000 [ 169.548837][T11923] lo speed is unknown, defaulting to 1000 [ 169.550377][T11911] hsr_slave_0: entered promiscuous mode [ 169.552848][T11911] hsr_slave_1: entered promiscuous mode [ 169.554915][T11911] debugfs: 'hsr0' already exists in 'hsr' [ 169.556734][T11911] Cannot create hsr debugfs directory [ 169.558882][T11923] lo speed is unknown, defaulting to 1000 [ 169.561524][T11923] lo speed is unknown, defaulting to 1000 [ 169.606674][T10896] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.636763][T11911] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 169.641732][T11911] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 169.645145][T11911] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 169.649445][T11911] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 169.660212][T11911] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.662371][T11911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.664768][T11911] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.666945][T11911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.672255][T10896] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.690658][T11911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.696044][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.698606][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.703380][T11911] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.707317][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.709635][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.713936][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.716286][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.732273][T10896] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.783909][T10896] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.793265][T11911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.874342][T10896] dvmrp9 (unregistering): left allmulticast mode [ 169.920927][T10896] bond0 (unregistering): Released all slaves [ 169.925812][T10896] bond1 (unregistering): Released all slaves [ 169.945371][T11911] veth0_vlan: entered promiscuous mode [ 169.949336][T11911] veth1_vlan: entered promiscuous mode [ 169.958560][T11911] veth0_macvtap: entered promiscuous mode [ 169.961829][T11911] veth1_macvtap: entered promiscuous mode [ 169.967923][T11911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.973166][T11911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.977388][ T1228] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.981548][ T1228] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.985050][ T46] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.987807][ T46] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.005393][T10904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.008001][T10904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.016780][T10904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.019489][T10904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.043487][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.761'. [ 170.138594][T10896] hsr_slave_0: left promiscuous mode [ 170.140965][T10896] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 170.143153][T10896] batman_adv: batadv0: Removing interface: virt_wifi0 [ 170.147097][T10896] veth1_macvtap: left promiscuous mode [ 170.149601][T10896] veth0_macvtap: left allmulticast mode [ 170.151414][T10896] veth0_macvtap: left promiscuous mode [ 170.153158][T10896] veth1_vlan: left promiscuous mode [ 170.154808][T10896] veth0_vlan: left promiscuous mode [ 170.208491][T11964] netlink: 64 bytes leftover after parsing attributes in process `syz.8.766'. [ 170.238873][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.9.765'. [ 170.365299][T11965] : entered promiscuous mode [ 170.946121][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.9.767'. [ 170.950407][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.9.767'. [ 171.093347][T12003] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 171.095541][T12003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.097968][T12003] vhci_hcd vhci_hcd.0: Device attached [ 171.106917][T12008] vhci_hcd: connection closed [ 171.107148][ T13] vhci_hcd: stop threads [ 171.110809][ T13] vhci_hcd: release socket [ 171.112246][ T13] vhci_hcd: disconnect device [ 171.319360][ T5985] Bluetooth: hci0: command tx timeout [ 171.329331][ T5985] Bluetooth: hci1: command tx timeout [ 171.845006][ T5971] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.847571][ T5971] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.850162][ T5971] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.853477][ T5971] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.856587][ T5971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.868727][T12021] lo speed is unknown, defaulting to 1000 [ 171.926510][T12021] chnl_net:caif_netlink_parms(): no params data found [ 171.934963][T12026] wlan0 speed is unknown, defaulting to 1000 [ 171.943343][T12026] wlan0 speed is unknown, defaulting to 1000 [ 171.947434][T12026] wlan0 speed is unknown, defaulting to 1000 [ 171.963385][T12026] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 171.981401][T12021] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.984014][T12021] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.986586][T12021] bridge_slave_0: entered allmulticast mode [ 171.988883][T12021] bridge_slave_0: entered promiscuous mode [ 171.991710][T12021] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.993926][T12021] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.996363][T12021] bridge_slave_1: entered allmulticast mode [ 171.998669][T12021] bridge_slave_1: entered promiscuous mode [ 172.027589][T12026] wlan0 speed is unknown, defaulting to 1000 [ 172.035680][T12021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.038700][T12026] wlan0 speed is unknown, defaulting to 1000 [ 172.040030][T12021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.077297][T12026] wlan0 speed is unknown, defaulting to 1000 [ 172.093181][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.097350][T12026] wlan0 speed is unknown, defaulting to 1000 [ 172.098003][T12021] team0: Port device team_slave_0 added [ 172.102731][T12021] team0: Port device team_slave_1 added [ 172.120080][T12026] wlan0 speed is unknown, defaulting to 1000 [ 172.134790][T12021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.137859][T12021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.147565][T12021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.178535][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.189214][T12021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.191421][T12021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.199587][T12021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.222405][T12021] hsr_slave_0: entered promiscuous mode [ 172.224462][T12021] hsr_slave_1: entered promiscuous mode [ 172.226364][T12021] debugfs: 'hsr0' already exists in 'hsr' [ 172.228136][T12021] Cannot create hsr debugfs directory [ 172.237776][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.294068][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.443871][ T13] erspan0: left allmulticast mode [ 172.445597][ T13] erspan0: left promiscuous mode [ 172.447445][ T13] bridge0: port 3(erspan0) entered disabled state [ 172.452829][ T13] bridge_slave_1: left allmulticast mode [ 172.454805][ T13] bridge_slave_1: left promiscuous mode [ 172.456801][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.460437][ T13] bridge_slave_0: left allmulticast mode [ 172.462249][ T13] bridge_slave_0: left promiscuous mode [ 172.464260][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.644115][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.651929][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.658322][ T13] bond0 (unregistering): Released all slaves [ 173.049461][ T13] hsr_slave_0: left promiscuous mode [ 173.052669][ T13] hsr_slave_1: left promiscuous mode [ 173.056904][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.060713][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.064387][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.067084][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.076612][ T13] veth1_macvtap: left promiscuous mode [ 173.078374][ T13] veth0_macvtap: left promiscuous mode [ 173.080414][ T13] veth1_vlan: left promiscuous mode [ 173.082262][ T13] veth0_vlan: left promiscuous mode [ 173.173054][ T13] team0 (unregistering): Port device team_slave_1 removed [ 173.201522][ T13] team0 (unregistering): Port device team_slave_0 removed [ 173.352182][T12087] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.399475][ T5985] Bluetooth: hci0: command tx timeout [ 173.401214][ T5985] Bluetooth: hci1: command tx timeout [ 173.443743][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.8.775'. [ 173.447129][T12099] bridge_slave_1: left allmulticast mode [ 173.449372][T12099] bridge_slave_1: left promiscuous mode [ 173.451869][T12099] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.565296][T12099] bridge_slave_0: left allmulticast mode [ 173.567281][T12099] bridge_slave_0: left promiscuous mode [ 173.569463][T12099] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.879456][ T5971] Bluetooth: hci2: command tx timeout [ 174.180543][ T5985] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.183140][ T5985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.185515][ T5985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.188017][ T5985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.190744][ T5985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.211199][T12130] lo speed is unknown, defaulting to 1000 [ 174.213246][T12130] wlan0 speed is unknown, defaulting to 1000 [ 174.272388][T12087] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.306357][T12130] chnl_net:caif_netlink_parms(): no params data found [ 174.337205][T12087] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.353658][ T1141] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.357825][T12130] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.360749][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.363047][T12130] bridge_slave_0: entered allmulticast mode [ 174.365333][T12130] bridge_slave_0: entered promiscuous mode [ 174.368167][T12130] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.370689][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.373011][T12130] bridge_slave_1: entered allmulticast mode [ 174.375311][T12130] bridge_slave_1: entered promiscuous mode [ 174.393787][T12130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.397608][T12130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.404767][T12087] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.426590][T12130] team0: Port device team_slave_0 added [ 174.431050][T12130] team0: Port device team_slave_1 added [ 174.452804][T12130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.454988][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.465091][T12130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.471229][T12130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.473351][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.481506][T12130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.486201][ T1141] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.512259][T12130] hsr_slave_0: entered promiscuous mode [ 174.514277][T12130] hsr_slave_1: entered promiscuous mode [ 174.547349][T10896] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.550852][T10896] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.553400][T10896] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.562011][T10904] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.612895][ T1141] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.774595][ T1141] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.133948][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.137945][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.142369][ T1141] bond0 (unregistering): Released all slaves [ 175.412291][ T1141] hsr_slave_0: left promiscuous mode [ 175.414930][ T1141] hsr_slave_1: left promiscuous mode [ 175.417105][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.421141][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.423741][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.425950][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.431277][ T1141] veth1_macvtap: left promiscuous mode [ 175.432972][ T1141] veth0_macvtap: left promiscuous mode [ 175.434699][ T1141] veth1_vlan: left promiscuous mode [ 175.436348][ T1141] veth0_vlan: left promiscuous mode [ 175.482165][ T5985] Bluetooth: hci1: command tx timeout [ 175.483905][ T5985] Bluetooth: hci0: command tx timeout [ 175.527197][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 175.533024][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 175.959335][ T5971] Bluetooth: hci2: command tx timeout [ 175.969297][ T60] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 176.149941][ T60] usb 14-1: Using ep0 maxpacket: 32 [ 176.153437][ T60] usb 14-1: config 0 has no interfaces? [ 176.155221][ T60] usb 14-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 176.158204][ T60] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.162349][ T60] usb 14-1: config 0 descriptor?? [ 176.209374][ T5971] Bluetooth: hci4: command tx timeout [ 177.026819][T12021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.041564][T12021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.050704][T12021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.056449][T12021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.084749][T12130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.090389][T12130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.100269][T12130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.104818][T12130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.172248][T12021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.184294][T12021] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.190665][T12130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.196502][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.199115][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.212960][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.216154][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.225633][T12130] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.234039][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.237147][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.253344][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.256253][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.351992][T12021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.361151][T12305] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 177.363302][T12305] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 177.365991][T12305] vhci_hcd vhci_hcd.0: Device attached [ 177.380718][T12130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.384082][T12305] netlink: 16 bytes leftover after parsing attributes in process `syz.8.781'. [ 177.388502][T12305] netlink: 'syz.8.781': attribute type 10 has an invalid length. [ 177.397955][T12305] team0: Device hsr_slave_0 failed to register rx_handler [ 177.403512][T12021] veth0_vlan: entered promiscuous mode [ 177.412529][T12021] veth1_vlan: entered promiscuous mode [ 177.422956][T12021] veth0_macvtap: entered promiscuous mode [ 177.425945][T12021] veth1_macvtap: entered promiscuous mode [ 177.432909][T12021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.437692][T12021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.443799][ T95] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.447193][ T95] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.451200][ T95] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.453817][ T95] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.477492][T12130] veth0_vlan: entered promiscuous mode [ 177.480557][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.486146][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.498271][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.498995][T12130] veth1_vlan: entered promiscuous mode [ 177.501424][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.512722][T12130] veth0_macvtap: entered promiscuous mode [ 177.515834][T12130] veth1_macvtap: entered promiscuous mode [ 177.523411][T12130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.530323][T12130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.538234][ T1141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.541156][ T1141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.546509][ T1141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.549970][ T1141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.559457][ T5971] Bluetooth: hci1: command tx timeout [ 177.564536][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.566952][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.577095][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.579899][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.644939][ T67] usb 14-1: USB disconnect, device number 2 [ 177.780360][ T6055] usb 54-1: SetAddress Request (2) to port 0 [ 177.785434][ T6055] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 177.810537][T12325] vivid-004: disconnect [ 177.812268][T12325] vivid-004: reconnect [ 177.838330][T12325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.001793][T12306] vhci_hcd: connection reset by peer [ 178.003913][ T13] vhci_hcd: stop threads [ 178.005421][ T13] vhci_hcd: release socket [ 178.009704][ T13] vhci_hcd: disconnect device [ 178.012242][T12327] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 178.049337][ T5971] Bluetooth: hci2: command tx timeout [ 178.279212][ T5971] Bluetooth: hci4: command tx timeout [ 180.120225][ T5971] Bluetooth: hci2: command tx timeout [ 180.359922][ T5971] Bluetooth: hci4: command tx timeout [ 180.481306][T12395] futex_wake_op: syz.4.794 tries to shift op by -1; fix this program [ 180.550030][T12401] netlink: 168 bytes leftover after parsing attributes in process `syz.4.796'. [ 181.493120][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.8.792'. [ 181.907143][T12445] 9pnet_fd: Insufficient options for proto=fd [ 182.194772][T12454] binder_alloc: 12453: binder_alloc_buf size -1080863910568906752 failed, no address space [ 182.198838][T12454] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 182.228248][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.8.806'. [ 182.233452][T12459] netlink: 104 bytes leftover after parsing attributes in process `syz.8.806'. [ 182.236330][T12459] netlink: 104 bytes leftover after parsing attributes in process `syz.8.806'. [ 182.439572][ T5971] Bluetooth: hci4: command tx timeout [ 182.839652][ T6055] usb 54-1: device descriptor read/8, error -110 [ 183.239552][ T6055] usb usb54-port1: attempt power cycle [ 183.400529][T12502] netlink: 256 bytes leftover after parsing attributes in process `syz.2.817'. [ 183.403437][T12502] netlink: 72 bytes leftover after parsing attributes in process `syz.2.817'. [ 183.403972][T12505] netlink: 'syz.8.818': attribute type 10 has an invalid length. [ 183.408423][T12505] netlink: 40 bytes leftover after parsing attributes in process `syz.8.818'. [ 183.412457][T12505] batman_adv: batadv0: Adding interface: virt_wifi0 [ 183.414499][T12505] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.423301][T12505] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 183.535150][T10904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.633691][T10904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.704668][T10904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.763593][T10904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.840262][T10904] bridge_slave_1: left allmulticast mode [ 183.842092][T10904] bridge_slave_1: left promiscuous mode [ 183.844003][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.847188][T10904] bridge_slave_0: left allmulticast mode [ 183.848916][T10904] bridge_slave_0: left promiscuous mode [ 183.850998][ T6055] usb usb54-port1: unable to enumerate USB device [ 183.851287][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.957622][T10904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.965508][T10904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.972665][T10904] bond0 (unregistering): Released all slaves [ 184.258696][T10904] hsr_slave_0: left promiscuous mode [ 184.264547][T10904] hsr_slave_1: left promiscuous mode [ 184.267966][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.272009][T10904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.278544][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.290436][T10904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.298105][T10904] veth1_macvtap: left promiscuous mode [ 184.306769][T10904] veth0_macvtap: left promiscuous mode [ 184.312732][T10904] veth1_vlan: left promiscuous mode [ 184.315219][T10904] veth0_vlan: left promiscuous mode [ 184.492166][T10904] team0 (unregistering): Port device team_slave_1 removed [ 184.511147][T10904] team0 (unregistering): Port device team_slave_0 removed [ 184.704403][ T5985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.706794][ T5985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.706822][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.9.830'. [ 184.709127][ T5985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.716781][ T5985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.719056][ T5985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.737148][T12540] lo speed is unknown, defaulting to 1000 [ 184.738705][T12547] tipc: Started in network mode [ 184.742209][T12547] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 184.745561][T12547] tipc: Enabling of bearer rejected, failed to enable media [ 184.749472][T12540] wlan0 speed is unknown, defaulting to 1000 [ 184.765437][T12551] 9pnet_fd: Insufficient options for proto=fd [ 184.810544][T12540] chnl_net:caif_netlink_parms(): no params data found [ 184.849982][T12540] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.852568][T12540] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.854829][T12540] bridge_slave_0: entered allmulticast mode [ 184.857663][T12540] bridge_slave_0: entered promiscuous mode [ 184.863573][T12540] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.866197][T12540] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.868548][T12540] bridge_slave_1: entered allmulticast mode [ 184.871796][T12540] bridge_slave_1: entered promiscuous mode [ 184.918576][T12540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.924409][T12540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.948699][T12540] team0: Port device team_slave_0 added [ 184.953888][T12540] team0: Port device team_slave_1 added [ 184.973194][T12540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.975381][T12540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.983635][T12540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.987646][T12540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.992511][T12540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.000763][T12540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.026724][T12540] hsr_slave_0: entered promiscuous mode [ 185.030281][T12540] hsr_slave_1: entered promiscuous mode [ 185.863977][T12540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.869599][T12540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.873136][T12540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.877406][T12540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.916543][T12540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.924914][T12540] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.935529][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.937683][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.944076][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.946311][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.041877][T12670] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 186.096256][T12540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.116612][T12540] veth0_vlan: entered promiscuous mode [ 186.123674][T12540] veth1_vlan: entered promiscuous mode [ 186.133712][T12540] veth0_macvtap: entered promiscuous mode [ 186.136732][T12540] veth1_macvtap: entered promiscuous mode [ 186.143325][T12540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.147954][T12540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.152234][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.154947][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.158379][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.162262][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.183933][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.186371][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.197465][T10904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.200718][T10904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.352963][T12698] macsec1: entered promiscuous mode [ 186.661098][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 186.718753][T12731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.722342][T12731] batadv_slave_0: entered promiscuous mode [ 187.690923][T12754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.855'. [ 187.695580][T12754] vlan2: entered promiscuous mode [ 187.697421][T12754] bridge0: entered promiscuous mode [ 187.744628][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 187.747482][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 187.750675][T12761] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 187.753306][T12761] netlink: 10 bytes leftover after parsing attributes in process `syz.2.858'. [ 187.761282][T12759] kvm: apic: phys broadcast and lowest prio [ 187.799504][T12761] nbd: socks must be embedded in a SOCK_ITEM attr [ 187.801701][T12761] block nbd0: shutting down sockets [ 187.873400][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 187.891786][T12770] hsr_slave_1 (unregistering): left promiscuous mode [ 188.060302][T12782] siw: device registration error -23 [ 188.679308][ T5971] Bluetooth: hci3: command tx timeout [ 188.802714][T12793] lo speed is unknown, defaulting to 1000 [ 188.806007][T12793] wlan0 speed is unknown, defaulting to 1000 [ 189.130669][T12802] netlink: 88 bytes leftover after parsing attributes in process `syz.2.867'. [ 189.135664][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 189.204804][T12808] syz.2.867 (12808): drop_caches: 2 [ 189.215682][T12808] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.101295][T12813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.103821][T12813] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 190.109459][T12813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.111387][T12813] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 190.114760][T12813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.116697][T12813] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 190.121316][T12813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.123232][T12813] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 190.342914][T12834] geneve2: entered promiscuous mode [ 190.922437][T12843] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 191.728679][T12850] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 193.890559][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.893126][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.897287][ T1421] ================================================================== [ 193.900856][ T1421] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 193.904057][ T1421] Read of size 8 at addr ffff88804cfa1020 by task aoe_tx0/1421 [ 193.909757][ T1421] [ 193.910579][ T1421] CPU: 0 UID: 0 PID: 1421 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 193.910594][ T1421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.910600][ T1421] Call Trace: [ 193.910605][ T1421] [ 193.910610][ T1421] dump_stack_lvl+0x116/0x1f0 [ 193.910637][ T1421] print_report+0xcd/0x630 [ 193.910651][ T1421] ? __virt_addr_valid+0x81/0x610 [ 193.910665][ T1421] ? __phys_addr+0xe8/0x180 [ 193.910678][ T1421] ? tty_write_room+0x7d/0x90 [ 193.910688][ T1421] kasan_report+0xe0/0x110 [ 193.910701][ T1421] ? tty_write_room+0x7d/0x90 [ 193.910713][ T1421] tty_write_room+0x7d/0x90 [ 193.910723][ T1421] handle_tx+0x14f/0x630 [ 193.910736][ T1421] dev_hard_start_xmit+0x97/0x740 [ 193.910749][ T1421] __dev_queue_xmit+0xa46/0x4490 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 193.910762][ T1421] ? finish_task_switch.isra.0+0x221/0xc10 [ 193.910774][ T1421] ? rcu_is_watching+0x12/0xc0 [ 193.910814][ T1421] ? __pfx___dev_queue_xmit+0x10/0x10 [ 193.910825][ T1421] ? __schedule+0x11a3/0x5de0 [ 193.910839][ T1421] ? ref_tracker_free+0x37c/0x830 [ 193.910855][ T1421] ? do_raw_spin_lock+0x12c/0x2b0 [ 193.910870][ T1421] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 193.910885][ T1421] ? skb_dequeue+0x126/0x180 [ 193.910895][ T1421] ? rcu_is_watching+0x12/0xc0 [ 193.910904][ T1421] ? lock_release+0x201/0x2f0 [ 193.910917][ T1421] ? tx+0xa8/0x190 [ 193.910930][ T1421] ? rcu_is_watching+0x12/0xc0 [ 193.910940][ T1421] ? rcu_is_watching+0x12/0xc0 [ 193.910951][ T1421] tx+0xcc/0x190 [ 193.910965][ T1421] ? __pfx_tx+0x10/0x10 [ 193.910978][ T1421] kthread+0x1e1/0x3e0 [ 193.910990][ T1421] ? __pfx_kthread+0x10/0x10 [ 193.911001][ T1421] ? __pfx_default_wake_function+0x10/0x10 [ 193.911012][ T1421] ? __kthread_parkme+0x19e/0x250 [ 193.911025][ T1421] ? __pfx_kthread+0x10/0x10 [ 193.911036][ T1421] kthread+0x3c5/0x780 [ 193.911050][ T1421] ? __pfx_kthread+0x10/0x10 [ 193.911064][ T1421] ? ret_from_fork+0x25/0x6f0 [ 193.911080][ T1421] ? rcu_is_watching+0x12/0xc0 [ 193.911090][ T1421] ? __pfx_kthread+0x10/0x10 [ 193.911104][ T1421] ret_from_fork+0x5d4/0x6f0 [ 193.911119][ T1421] ? __pfx_kthread+0x10/0x10 [ 193.911133][ T1421] ret_from_fork_asm+0x1a/0x30 [ 193.911150][ T1421] [ 193.911153][ T1421] [ 193.982377][ T1421] Allocated by task 12868: [ 193.983865][ T1421] kasan_save_stack+0x33/0x60 [ 193.985648][ T1421] kasan_save_track+0x14/0x30 [ 193.987166][ T1421] __kasan_kmalloc+0xaa/0xb0 [ 193.988647][ T1421] alloc_tty_struct+0x96/0x8c0 [ 193.990305][ T1421] tty_init_dev.part.0+0x1e/0x500 [ 193.992430][ T1421] tty_init_dev+0x60/0x80 [ 193.994050][ T1421] ptmx_open+0x10d/0x360 [ 193.995508][ T1421] chrdev_open+0x231/0x6a0 [ 193.996932][ T1421] do_dentry_open+0x97f/0x1530 [ 193.998799][ T1421] vfs_open+0x82/0x3f0 [ 194.000452][ T1421] path_openat+0x1de4/0x2cb0 [ 194.002312][ T1421] do_filp_open+0x20b/0x470 [ 194.004155][ T1421] do_sys_openat2+0x11b/0x1d0 [ 194.006051][ T1421] __ia32_compat_sys_openat+0x16d/0x210 [ 194.008680][ T1421] __do_fast_syscall_32+0x7c/0x3a0 [ 194.010741][ T1421] do_fast_syscall_32+0x32/0x80 [ 194.012712][ T1421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.015230][ T1421] [ 194.016194][ T1421] Freed by task 6054: [ 194.017779][ T1421] kasan_save_stack+0x33/0x60 [ 194.019704][ T1421] kasan_save_track+0x14/0x30 [ 194.021580][ T1421] kasan_save_free_info+0x3b/0x60 [ 194.023583][ T1421] __kasan_slab_free+0x60/0x70 [ 194.025505][ T1421] kfree+0x2b4/0x4d0 [ 194.027084][ T1421] process_one_work+0x9cf/0x1b70 [ 194.029229][ T1421] worker_thread+0x6c8/0xf10 [ 194.030768][ T1421] kthread+0x3c5/0x780 [ 194.032314][ T1421] ret_from_fork+0x5d4/0x6f0 [ 194.034478][ T1421] ret_from_fork_asm+0x1a/0x30 [ 194.036344][ T1421] [ 194.037329][ T1421] Last potentially related work creation: [ 194.039638][ T1421] kasan_save_stack+0x33/0x60 [ 194.041506][ T1421] kasan_record_aux_stack+0xa7/0xc0 [ 194.043229][ T1421] insert_work+0x36/0x230 [ 194.044625][ T1421] __queue_work+0x97e/0x1160 [ 194.046089][ T1421] queue_work_on+0x1a4/0x1f0 [ 194.047568][ T1421] release_tty+0x4de/0x5d0 [ 194.048987][ T1421] tty_release_struct+0xb7/0xe0 [ 194.050565][ T1421] tty_release+0xe2d/0x1430 [ 194.052019][ T1421] __fput+0x3ff/0xb70 [ 194.053300][ T1421] task_work_run+0x14d/0x240 [ 194.054767][ T1421] exit_to_user_mode_loop+0xeb/0x110 [ 194.056474][ T1421] __do_fast_syscall_32+0x2ac/0x3a0 [ 194.058114][ T1421] do_fast_syscall_32+0x32/0x80 [ 194.059699][ T1421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.061679][ T1421] [ 194.062457][ T1421] The buggy address belongs to the object at ffff88804cfa1000 [ 194.062457][ T1421] which belongs to the cache kmalloc-cg-2k of size 2048 [ 194.066869][ T1421] The buggy address is located 32 bytes inside of [ 194.066869][ T1421] freed 2048-byte region [ffff88804cfa1000, ffff88804cfa1800) [ 194.071395][ T1421] [ 194.072177][ T1421] The buggy address belongs to the physical page: [ 194.074195][ T1421] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4cfa0 [ 194.076933][ T1421] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 194.079590][ T1421] memcg:ffff88805f31ed81 [ 194.080930][ T1421] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 194.083436][ T1421] page_type: f5(slab) [ 194.084775][ T1421] raw: 04fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 194.087440][ T1421] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88805f31ed81 [ 194.090941][ T1421] head: 04fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 194.094258][ T1421] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88805f31ed81 [ 194.096861][ T1421] head: 04fff00000000003 ffffea000133e801 00000000ffffffff 00000000ffffffff [ 194.099559][ T1421] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 194.102243][ T1421] page dumped because: kasan: bad access detected [ 194.104305][ T1421] page_owner tracks the page as allocated [ 194.106034][ T1421] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5977, tgid 5977 (syz-executor), ts 45504824126, free_ts 44663761379 [ 194.112577][ T1421] post_alloc_hook+0x1c0/0x230 [ 194.114105][ T1421] get_page_from_freelist+0x132b/0x38e0 [ 194.115852][ T1421] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 194.117701][ T1421] alloc_pages_mpol+0x1fb/0x550 [ 194.119285][ T1421] new_slab+0x247/0x330 [ 194.120614][ T1421] ___slab_alloc+0xcf2/0x1740 [ 194.122108][ T1421] __slab_alloc.constprop.0+0x56/0xb0 [ 194.123862][ T1421] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 194.125876][ T1421] kmemdup_noprof+0x29/0x60 [ 194.127336][ T1421] __devinet_sysctl_register+0xbc/0x360 [ 194.129090][ T1421] devinet_sysctl_register+0x17b/0x200 [ 194.130982][ T1421] inetdev_init+0x2b8/0x5a0 [ 194.132475][ T1421] inetdev_event+0xc5f/0x18a0 [ 194.134002][ T1421] notifier_call_chain+0xb9/0x410 [ 194.135643][ T1421] call_netdevice_notifiers_info+0xbe/0x140 [ 194.137531][ T1421] register_netdevice+0x182e/0x2270 [ 194.139199][ T1421] page last free pid 5966 tgid 5966 stack trace: [ 194.141198][ T1421] __free_frozen_pages+0x7d5/0x10f0 [ 194.142858][ T1421] __put_partials+0x165/0x1c0 [ 194.144383][ T1421] qlist_free_all+0x4d/0x120 [ 194.145871][ T1421] kasan_quarantine_reduce+0x195/0x1e0 [ 194.147617][ T1421] __kasan_slab_alloc+0x69/0x90 [ 194.149200][ T1421] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 194.150960][ T1421] mas_alloc_nodes+0x18b/0x8b0 [ 194.152495][ T1421] mas_node_count_gfp+0x105/0x130 [ 194.154113][ T1421] mas_preallocate+0x7e0/0xde0 [ 194.155668][ T1421] vma_link+0x135/0x6a0 [ 194.157001][ T1421] insert_vm_struct+0xf4/0x2d0 [ 194.158531][ T1421] _install_special_mapping+0x187/0x3d0 [ 194.160333][ T1421] map_vdso+0x1a3/0x580 [ 194.161667][ T1421] compat_arch_setup_additional_pages+0x6f/0x90 [ 194.163565][ T1421] load_elf_binary+0x2374/0x5a70 [ 194.165144][ T1421] bprm_execve+0x8bb/0x1640 [ 194.166580][ T1421] [ 194.167473][ T1421] Memory state around the buggy address: [ 194.169263][ T1421] ffff88804cfa0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.171779][ T1421] ffff88804cfa0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.174353][ T1421] >ffff88804cfa1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.176980][ T1421] ^ [ 194.178647][ T1421] ffff88804cfa1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.181172][ T1421] ffff88804cfa1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.183683][ T1421] ================================================================== [ 194.186296][ T1421] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 194.188822][ T1421] CPU: 0 UID: 0 PID: 1421 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 194.192198][ T1421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.196405][ T1421] Call Trace: [ 194.197686][ T1421] [ 194.198824][ T1421] dump_stack_lvl+0x3d/0x1f0 [ 194.200326][ T1421] vpanic+0x6e8/0x7a0 [ 194.201600][ T1421] ? __pfx_vpanic+0x10/0x10 [ 194.203061][ T1421] ? __pfx_vprintk_emit+0x10/0x10 [ 194.204689][ T1421] ? tty_write_room+0x7d/0x90 [ 194.206182][ T1421] panic+0xca/0xd0 [ 194.207405][ T1421] ? __pfx_panic+0x10/0x10 [ 194.208889][ T1421] ? check_panic_on_warn+0x1f/0xb0 [ 194.210678][ T1421] check_panic_on_warn+0xab/0xb0 [ 194.212267][ T1421] end_report+0x107/0x170 [ 194.213640][ T1421] kasan_report+0xee/0x110 [ 194.215085][ T1421] ? tty_write_room+0x7d/0x90 [ 194.216578][ T1421] tty_write_room+0x7d/0x90 [ 194.218023][ T1421] handle_tx+0x14f/0x630 [ 194.219460][ T1421] dev_hard_start_xmit+0x97/0x740 [ 194.221179][ T1421] __dev_queue_xmit+0xa46/0x4490 [ 194.222743][ T1421] ? finish_task_switch.isra.0+0x221/0xc10 [ 194.224602][ T1421] ? rcu_is_watching+0x12/0xc0 [ 194.226125][ T1421] ? __pfx___dev_queue_xmit+0x10/0x10 [ 194.227822][ T1421] ? __schedule+0x11a3/0x5de0 [ 194.229327][ T1421] ? ref_tracker_free+0x37c/0x830 [ 194.230935][ T1421] ? do_raw_spin_lock+0x12c/0x2b0 [ 194.232880][ T1421] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 194.234513][ T1421] ? skb_dequeue+0x126/0x180 [ 194.236000][ T1421] ? rcu_is_watching+0x12/0xc0 [ 194.237519][ T1421] ? lock_release+0x201/0x2f0 [ 194.239032][ T1421] ? tx+0xa8/0x190 [ 194.240305][ T1421] ? rcu_is_watching+0x12/0xc0 [ 194.241855][ T1421] ? rcu_is_watching+0x12/0xc0 [ 194.243370][ T1421] tx+0xcc/0x190 [ 194.244532][ T1421] ? __pfx_tx+0x10/0x10 [ 194.245850][ T1421] kthread+0x1e1/0x3e0 [ 194.247233][ T1421] ? __pfx_kthread+0x10/0x10 [ 194.248751][ T1421] ? __pfx_default_wake_function+0x10/0x10 [ 194.251077][ T1421] ? __kthread_parkme+0x19e/0x250 [ 194.252872][ T1421] ? __pfx_kthread+0x10/0x10 [ 194.254331][ T1421] kthread+0x3c5/0x780 [ 194.255688][ T1421] ? __pfx_kthread+0x10/0x10 [ 194.257158][ T1421] ? ret_from_fork+0x25/0x6f0 [ 194.258649][ T1421] ? rcu_is_watching+0x12/0xc0 [ 194.260283][ T1421] ? __pfx_kthread+0x10/0x10 [ 194.261800][ T1421] ret_from_fork+0x5d4/0x6f0 [ 194.263394][ T1421] ? __pfx_kthread+0x10/0x10 [ 194.264867][ T1421] ret_from_fork_asm+0x1a/0x30 [ 194.266700][ T1421] [ 194.269375][ T1421] Kernel Offset: disabled [ 194.270681][ T1421] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:29:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616b45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc90007a5f438 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0f8640 R15=ffffffff85616ae0 RIP=ffffffff85616b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000343b1ffc CR3=0000000052ce7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000020 RCX=ffffffff84e8f7f8 RDX=ffff888023724880 RSI=0000000000000010 RDI=0000000000000001 RBP=ffffc900039bf320 RSP=ffffc900039bf090 R8 =0000000000000001 R9 =0000000000000010 R10=0000000000000023 R11=0000000000000012 R12=0000000000000023 R13=ffffc900039bf118 R14=ffff88802b66c793 R15=000000000000074d RIP=ffffffff81bb07eb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f99bad96300 ffffffff 00c00000 GS =0000 ffff8880975c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b12c97f000 CR3=00000000294a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8930baa6 ffffffff873eaaa2 0000000900000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff89307587 ffffffff8252efc9 ffffffff89908cc7 ffffffff89928a61 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800403a003068004 ffffffff89928206 ffffffff892a5d71 ffffffff892be908 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080004b80300 080004b0030fffff ffff0404a0030008 0004980300080004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 90036a0800048803 0008000480030000 0000000000000000 00000000000001ff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffdf 0803e00300080003 d80300080003d003 0fffffffff0403c0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080003b80300 080003b003004c50 4701ffffffffffff fffff70801800301 ZMM24=cc60fb81cc60fb81 cc60fb81cc60fb81 cc60fb81cc60fb81 cc60fb81cc60fb81 cc60fb81cc60fb81 cc60fb81cc60fb81 cc60fb81cc60fb81 cc60fb81cc60fb81 ZMM25=f81413cff81413cf f81413cff81413cf f81413cff81413cf f81413cff81413cf f81413cff81413cf f81413cff81413cf f81413cff81413cf f81413cff81413cf ZMM26=8706e85b8706e85b 8706e85b8706e85b 8706e85b8706e85b 8706e85b8706e85b 8706e85b8706e85b 8706e85b8706e85b 8706e85b8706e85b 8706e85b8706e85b ZMM27=50c332f050c332f0 50c332f050c332f0 50c332f050c332f0 50c332f050c332f0 50c332f050c332f0 50c332f050c332f0 50c332f050c332f0 50c332f050c332f0 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e30c0000e30c0000 e30c0000e30c0000 e30c0000e30c0000 e30c0000e30c0000 e30c0000e30c0000 e30c0000e30c0000 e30c0000e30c0000 e30c0000e30c0000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888047cb0600 RCX=ffffffff8b883192 RDX=ffff88804a4ca440 RSI=0000000000000003 RDI=0000000000000000 RBP=000000000000000b RSP=ffffc900030bf880 R8 =0000000000000000 R9 =0000000000000003 R10=000000000000000b R11=000000000000001e R12=dffffc0000000000 R13=0000000000000003 R14=0000000000000001 R15=ffff888028cc08c0 RIP=ffffffff8b88319b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f714e080 CR3=0000000027db1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e5c0fa0 RCX=ffffffff816c89e1 RDX=ffff888026682440 RSI=ffffffff816c89fc RDI=ffffffff8e5c0fa0 RBP=0000000000000000 RSP=ffffc900032ffcb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff9b01a1c0 R12=ffffffff816c89fc R13=0000000000000008 R14=ffffea00014ecd80 R15=0000000000000000 RIP=ffffffff819759f5 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa151cfec80 ffffffff 00c00000 GS =0000 ffff8880977c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa15201afeb CR3=00000000279ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080000000 Opmask01=0000000000000004 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa151f98b20 00007fa151f98b20 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75722f7261762f87 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020000000001 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa151f98b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 00007fa151e4e42d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561c12741760 0000561c12741760 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561c1274dfc0 0000561c1273f910 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524548544f0030 3d004c2a3a523a62 3a7374533a6c3a4f 6e3a6d5e000a0920 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524548544f0005 08004c1f0f520f57 0f4641530f590f4f 5b0f585e000a0915 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f62696c2f006575 72743d6e776f645f 66690065736c6166 3d70755f66690031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00733d6e6f682d5f 66690064636c6166 3d2f645f66630031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000