last executing test programs: 7m29.844104329s ago: executing program 32 (id=1280): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 6m58.28872804s ago: executing program 33 (id=1311): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x318, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x30, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x318}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 6m55.004386006s ago: executing program 34 (id=1314): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x38c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x30, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 6m50.448432003s ago: executing program 35 (id=1320): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x38c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x30, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 6m17.275651985s ago: executing program 36 (id=1342): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x38c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x30, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 6m6.875331337s ago: executing program 37 (id=1353): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x40c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x32c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 6m3.369931932s ago: executing program 38 (id=1359): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x38c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x30, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 5m38.730011022s ago: executing program 9 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x48) r1 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000030000"], 0x35) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0xe80) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0xfe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x1a}, 0x28) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 5m35.329471739s ago: executing program 9 (id=1371): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x38c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x30, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 5m28.27702082s ago: executing program 39 (id=1369): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x38c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x30, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 5m25.06333523s ago: executing program 40 (id=1370): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x38c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x30, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 5m23.734300842s ago: executing program 2 (id=1378): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) r7 = memfd_secret(0x0) ftruncate(r7, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 5m22.545498195s ago: executing program 2 (id=1379): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = memfd_secret(0x0) ftruncate(r7, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 5m21.418016707s ago: executing program 2 (id=1380): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x48) r1 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000030000"], 0x35) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0xe80) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0xfe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') migrate_pages(r2, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 5m20.169759918s ago: executing program 41 (id=1371): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x38c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x30, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 5m17.976157257s ago: executing program 2 (id=1382): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) r7 = memfd_secret(0x0) ftruncate(r7, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 5m2.687319878s ago: executing program 42 (id=1382): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) r7 = memfd_secret(0x0) ftruncate(r7, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 4m38.742664901s ago: executing program 3 (id=1381): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 4m36.419011074s ago: executing program 5 (id=1383): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 4m36.292562474s ago: executing program 4 (id=1388): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x430, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 4m34.8220525s ago: executing program 3 (id=1389): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x48) r1 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000030000"], 0x35) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0xe80) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0xfe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') migrate_pages(r2, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 4m34.477559665s ago: executing program 5 (id=1390): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r8) ftruncate(0xffffffffffffffff, 0x51a9497) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 4m32.206560142s ago: executing program 5 (id=1391): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) r8 = memfd_secret(0x0) ftruncate(r8, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 4m31.522368976s ago: executing program 3 (id=1392): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x48) r1 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0xe80) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0xfe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x1a}, 0x28) migrate_pages(r2, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 4m31.129295211s ago: executing program 5 (id=1393): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x430, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 4m27.855374529s ago: executing program 3 (id=1395): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x430, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x4}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 4m25.596184601s ago: executing program 0 (id=1398): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 4m24.445247869s ago: executing program 0 (id=1399): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r8) ftruncate(0xffffffffffffffff, 0x51a9497) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 4m22.683425331s ago: executing program 0 (id=1400): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x48) r1 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000030000"], 0x35) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0xe80) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0xfe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') migrate_pages(r2, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 4m20.610958757s ago: executing program 43 (id=1388): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x430, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 4m19.555446537s ago: executing program 0 (id=1402): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x430, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 4m15.101961993s ago: executing program 44 (id=1393): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x430, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 4m12.116142193s ago: executing program 45 (id=1395): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x430, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x4}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 4m8.443255533s ago: executing program 0 (id=1405): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = memfd_secret(0x0) ftruncate(r6, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 3m53.099411818s ago: executing program 46 (id=1405): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = memfd_secret(0x0) ftruncate(r6, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 3m5.640196985s ago: executing program 47 (id=1406): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 3m4.58686201s ago: executing program 48 (id=1412): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) r8 = memfd_secret(0x0) ftruncate(r8, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 3m3.525405422s ago: executing program 49 (id=1413): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 2m55.919027229s ago: executing program 50 (id=1414): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r8) ftruncate(0xffffffffffffffff, 0x51a9497) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 2m35.810929298s ago: executing program 5 (id=1418): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, 0x0, &(0x7f0000000280), &(0x7f0000000440)) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = memfd_secret(0x0) ftruncate(r7, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 2m30.380311306s ago: executing program 5 (id=1419): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x430, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x2, 0x1}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 2m28.410073659s ago: executing program 4 (id=1417): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, 0x0, &(0x7f0000000280), &(0x7f0000000440)) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) r8 = memfd_secret(0x0) ftruncate(r8, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 2m27.05267106s ago: executing program 4 (id=1420): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 2m26.721811858s ago: executing program 2 (id=1416): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, 0x0, &(0x7f0000000280), &(0x7f0000000440)) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = memfd_secret(0x0) ftruncate(r7, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 2m25.429031464s ago: executing program 4 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x48) r1 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000030000"], 0x35) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0xe80) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x1a}, 0x28) migrate_pages(r2, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 2m25.276015921s ago: executing program 2 (id=1422): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) r8 = memfd_secret(0x0) ftruncate(r8, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 2m25.183530899s ago: executing program 9 (id=1415): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, 0x0, &(0x7f0000000280), &(0x7f0000000440)) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) memfd_secret(0x0) 2m22.150105041s ago: executing program 4 (id=1423): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x48) r1 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0xe80) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0xfe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) migrate_pages(r2, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 2m18.447836686s ago: executing program 4 (id=1424): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, 0x0, &(0x7f0000000280), &(0x7f0000000440)) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = memfd_secret(0x0) ftruncate(r7, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 2m14.294477921s ago: executing program 51 (id=1419): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x430, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x2, 0x1}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 2m10.228355481s ago: executing program 52 (id=1422): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) r8 = memfd_secret(0x0) ftruncate(r8, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 2m9.133980989s ago: executing program 53 (id=1415): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, 0x0, &(0x7f0000000280), &(0x7f0000000440)) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) memfd_secret(0x0) 2m3.097465447s ago: executing program 54 (id=1424): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) syz_io_uring_setup(0x2b2f, 0x0, &(0x7f0000000280), &(0x7f0000000440)) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = memfd_secret(0x0) ftruncate(r7, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 1m37.969897299s ago: executing program 3 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x48) r1 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0xe80) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0xfe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[], 0x0, 0x1a}, 0x28) migrate_pages(r2, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 1m34.685636331s ago: executing program 3 (id=1429): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r8) ftruncate(0xffffffffffffffff, 0x51a9497) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1m34.560201343s ago: executing program 0 (id=1425): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 1m19.420650416s ago: executing program 55 (id=1429): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r8) ftruncate(0xffffffffffffffff, 0x51a9497) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1m19.384245005s ago: executing program 56 (id=1425): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x6d6, 0xfffffff3, 0x8, 0x7, 0xe, 0x5, 0x732b20c0, 0x4, 0x7, 0x401, 0x4, 0x1, 0x7, 0x8, 0x7a65, 0x7fff, 0x2, 0xa, 0xa64, 0x5, 0x4, 0xffff, 0x112, 0x1000, 0xfffffffb, 0xffff, 0x800, 0xfffffff9, 0x1, 0x5, 0x6, 0xec7, 0x8, 0x6, 0x2, 0xfffffffb, 0x6, 0xfffffff7, 0x9, 0xb, 0x3ff, 0x6, 0x5, 0x7, 0x9, 0x3c4a, 0xf3200000, 0x334bdb0b, 0x7, 0x3, 0xa, 0x81, 0x3, 0x7, 0x7f, 0x80, 0x17, 0x6, 0xff, 0x800, 0x7, 0x40000000, 0x0, 0x5, 0x5, 0x19, 0x3, 0x7, 0x28c7, 0x1e58, 0x6, 0x7ff, 0x3, 0x9, 0x0, 0x8, 0xb3d9, 0x1, 0x10000, 0xff, 0x1, 0xc, 0x30, 0x2, 0x5, 0x8, 0x1, 0x2, 0x8, 0x2, 0x8, 0x8, 0x7fff, 0x9, 0x2, 0x1, 0x0, 0xb, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x7, 0x9, 0x7a8d0677, 0x5, 0x3, 0xfffffff7, 0x4, 0x3e, 0x8, 0x800, 0xfff, 0x29, 0x5, 0x9, 0xfdbc, 0x7, 0x401, 0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8e, 0x8, 0x9, 0x0, 0x5, 0x5, 0xfffffc01, 0x80000000, 0x0, 0x9, 0x80000001, 0x16, 0x3, 0x3000, 0x9, 0x2, 0x2, 0x8900000, 0xd2aa, 0x761, 0x40, 0xb, 0x80000000, 0x0, 0x8, 0x3, 0x4, 0xfffff3aa, 0xfffffffe, 0x10000, 0x6, 0x1, 0x6, 0xa, 0x200, 0x9, 0x3, 0x10001, 0x2, 0x7fffffff, 0x0, 0x9, 0x2, 0x98e, 0x10, 0x5, 0x5, 0x4, 0xff, 0x4, 0x15, 0x9, 0x800, 0x3, 0x400, 0x6, 0x9, 0x8001, 0x200, 0x1, 0xfffffff7, 0xb, 0x3ff, 0x3, 0x6, 0x18000, 0x9, 0x3, 0x1, 0x3, 0xfffffff9, 0x5, 0x3, 0x4, 0x9, 0x7fffffff, 0x3, 0x8, 0x7, 0x10000, 0xa5c, 0x9, 0x6, 0x3, 0x401, 0x7, 0x4, 0x6, 0x100, 0x6, 0x9, 0x1000, 0x10000, 0x10000, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x401, 0x0, 0xffff, 0x0, 0x6, 0x8000, 0x8000, 0x36, 0x6, 0x1, 0x7b075e73, 0x8eb4, 0xf4, 0x6, 0x7, 0x9, 0x8, 0x7, 0x6, 0x6, 0x52, 0x6, 0x6, 0x5, 0x4, 0x5, 0x2, 0x9, 0xad3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 4.670037738s ago: executing program 1 (id=1829): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 4.66949298s ago: executing program 1 (id=1830): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x48) r1 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000030000"], 0x35) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0xe80) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0xfe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x1a}, 0x28) migrate_pages(r2, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 2.886303431s ago: executing program 8 (id=1836): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x480, 0x28000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setreuid(0xee00, 0x0) r3 = getuid() setreuid(0xffffffffffffffff, r3) semctl$GETPID(0x0, 0x8, 0x4, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(0x0, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x300, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x2, 0x1}]}}}}}}}, 0x0) 2.884915084s ago: executing program 8 (id=1837): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8001}]}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 2.838282499s ago: executing program 8 (id=1839): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r0, 0x80047455, &(0x7f0000000000)=0xfffffff7) 2.769055265s ago: executing program 8 (id=1841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x4c, 0xfffffffffffffffc, &(0x7f0000000740)="fef71d0825f4010009bd68d2ed8ef4e26233cee281510d37af81fce54cd83c31bc9a48f342ca840149a829e2b8ef4e18aac8005e695d486a63b36ded0a7fa72b950c1e896c267ba79b66f8c9"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.768371316s ago: executing program 6 (id=1842): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x4c, 0xfffffffffffffffc, &(0x7f0000000740)="fef71d0825f4010009bd68d2ed8ef4e26233cee281510d37af81fce54cd83c31bc9a48f342ca840149a829e2b8ef4e18aac8005e695d486a63b36ded0a7fa72b950c1e896c267ba79b66f8c9"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 2.699882631s ago: executing program 7 (id=1845): openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) io_uring_setup(0x7625, &(0x7f00000003c0)={0x0, 0x9678, 0x2, 0x0, 0xf7}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 1.860814552s ago: executing program 8 (id=1846): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x480, 0x28000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setreuid(0xee00, 0x0) r3 = getuid() setreuid(0xffffffffffffffff, r3) semctl$GETPID(0x0, 0x8, 0x4, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(0x0, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x300, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x2, 0x1}]}}}}}}}, 0x0) 1.852447195s ago: executing program 8 (id=1847): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x430, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 1.790796441s ago: executing program 6 (id=1848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8001}]}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 1.789987128s ago: executing program 7 (id=1849): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f0000001280)={0x8, {"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", 0x1000}}, 0x1006) listen(r0, 0x90004) socket$pptp(0x18, 0x1, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.789131422s ago: executing program 6 (id=1850): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r0, 0x80047455, &(0x7f0000000000)=0xfffffff7) 1.752258966s ago: executing program 7 (id=1851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000003c000d01fcffffff0000000003"], 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.751556295s ago: executing program 6 (id=1852): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8001}]}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 1.650942336s ago: executing program 6 (id=1853): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, 0x0, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1.650352463s ago: executing program 6 (id=1854): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x430, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x10, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 1.560876756s ago: executing program 1 (id=1855): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x480, 0x28000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setreuid(0xee00, 0x0) r3 = getuid() setreuid(0xffffffffffffffff, r3) semctl$GETPID(0x0, 0x8, 0x4, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(0x0, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x300, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x2, 0x1}]}}}}}}}, 0x0) 1.47949062s ago: executing program 1 (id=1856): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x4c, 0xfffffffffffffffc, &(0x7f0000000740)="fef71d0825f4010009bd68d2ed8ef4e26233cee281510d37af81fce54cd83c31bc9a48f342ca840149a829e2b8ef4e18aac8005e695d486a63b36ded0a7fa72b950c1e896c267ba79b66f8c9"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.285827357s ago: executing program 7 (id=1857): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 560.518648ms ago: executing program 1 (id=1858): openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) io_uring_setup(0x7625, &(0x7f00000003c0)={0x0, 0x9678, 0x2, 0x0, 0xf7}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 372.786588ms ago: executing program 7 (id=1859): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8001}]}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 250.468278ms ago: executing program 7 (id=1860): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f0000001280)={0x8, {"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", 0x1000}}, 0x1006) listen(r0, 0x90004) socket$pptp(0x18, 0x1, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 1 (id=1861): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8001}]}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) kernel console output (not intermixed with test programs): evsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.775554][T13204] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.365176][T14274] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 965.369345][T14274] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 965.392714][T14274] vhci_hcd vhci_hcd.0: Device attached [ 965.632319][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.636862][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.669944][ T6594] usb 39-1: new low-speed USB device number 33 using vhci_hcd [ 965.682264][ T6099] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 965.858179][ T6099] usb 6-1: Using ep0 maxpacket: 16 [ 965.867478][ T6099] usb 6-1: config 0 has no interfaces? [ 966.053516][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.071721][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.177928][ T6099] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 966.194996][ T6099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.212505][ T6099] usb 6-1: config 0 descriptor?? [ 966.448760][T14275] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 33 [ 966.475334][ T90] vhci_hcd: stop threads [ 966.516660][ T90] vhci_hcd: release socket [ 966.521459][ T90] vhci_hcd: disconnect device [ 967.314572][ T13] hsr_slave_0: left promiscuous mode [ 967.317388][ T13] hsr_slave_1: left promiscuous mode [ 967.321107][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.325325][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.343808][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.346348][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.440983][ T13] hsr_slave_0: left promiscuous mode [ 967.445890][ T13] hsr_slave_1: left promiscuous mode [ 967.450452][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.455900][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.461336][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.466516][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.636368][ T13] hsr_slave_0: left promiscuous mode [ 967.652486][ T13] hsr_slave_1: left promiscuous mode [ 967.662757][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.691039][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.735482][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.754105][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.812436][ T13] hsr_slave_0: left promiscuous mode [ 967.824667][ T13] hsr_slave_1: left promiscuous mode [ 967.829244][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.849321][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.868887][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.873649][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.307921][ T13] veth1_macvtap: left promiscuous mode [ 968.310312][ T13] veth0_macvtap: left promiscuous mode [ 968.312535][ T13] veth1_vlan: left promiscuous mode [ 968.315812][ T13] veth0_vlan: left promiscuous mode [ 968.356199][ T13] veth1_macvtap: left promiscuous mode [ 968.359011][ T13] veth0_macvtap: left promiscuous mode [ 968.364679][ T13] veth1_vlan: left promiscuous mode [ 968.366912][ T13] veth0_vlan: left promiscuous mode [ 968.374170][T10693] usb 6-1: USB disconnect, device number 42 [ 968.416635][ T13] veth1_macvtap: left promiscuous mode [ 968.419811][ T13] veth0_macvtap: left promiscuous mode [ 968.422525][ T13] veth1_vlan: left promiscuous mode [ 968.425238][ T13] veth0_vlan: left promiscuous mode [ 968.505714][ T13] veth1_macvtap: left promiscuous mode [ 968.508257][ T13] veth0_macvtap: left promiscuous mode [ 968.514099][ T13] veth1_vlan: left promiscuous mode [ 968.517217][ T13] veth0_vlan: left promiscuous mode [ 970.832141][ T6594] vhci_hcd: vhci_device speed not set [ 972.362469][ T13] team0 (unregistering): Port device team_slave_1 removed [ 972.824540][ T13] team0 (unregistering): Port device team_slave_0 removed [ 979.576468][ T13] team0 (unregistering): Port device team_slave_1 removed [ 979.842956][ T13] team0 (unregistering): Port device team_slave_0 removed [ 982.334334][ T5989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 982.340765][ T5989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 982.346659][ T5989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 982.355172][ T5989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 982.371910][ T5989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 983.334235][ T5976] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 983.341577][ T5976] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 983.353852][ T5976] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 983.391474][ T5976] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 983.416143][ T5976] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 984.354228][ T5989] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 984.364961][ T5989] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 984.370810][ T5989] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 984.376109][ T5989] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 984.380163][ T5989] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 984.508523][ T5976] Bluetooth: hci4: command tx timeout [ 985.481847][ T5976] Bluetooth: hci5: command tx timeout [ 985.665687][ T13] team0 (unregistering): Port device team_slave_1 removed [ 986.093327][ T13] team0 (unregistering): Port device team_slave_0 removed [ 986.443776][ T5976] Bluetooth: hci6: command tx timeout [ 986.610264][ T5976] Bluetooth: hci4: command tx timeout [ 987.575775][ T5976] Bluetooth: hci5: command tx timeout [ 988.539851][ T5976] Bluetooth: hci6: command tx timeout [ 988.678309][ T5976] Bluetooth: hci4: command tx timeout [ 989.638332][ T5976] Bluetooth: hci5: command tx timeout [ 990.619966][ T5976] Bluetooth: hci6: command tx timeout [ 990.767108][ T5976] Bluetooth: hci4: command tx timeout [ 991.507352][ T13] team0 (unregistering): Port device team_slave_1 removed [ 991.723268][ T5976] Bluetooth: hci5: command tx timeout [ 992.006984][ T13] team0 (unregistering): Port device team_slave_0 removed [ 992.075862][ T5989] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 992.106168][ T5989] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 992.111690][ T5989] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 992.128649][ T5989] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 992.133744][ T5989] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 992.622920][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.625699][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.690633][ T5976] Bluetooth: hci6: command tx timeout [ 994.219627][ T5976] Bluetooth: hci7: command tx timeout [ 996.069758][T14316] chnl_net:caif_netlink_parms(): no params data found [ 996.254654][T14320] chnl_net:caif_netlink_parms(): no params data found [ 996.298213][ T5976] Bluetooth: hci7: command tx timeout [ 996.565520][T14309] chnl_net:caif_netlink_parms(): no params data found [ 996.838798][T14313] chnl_net:caif_netlink_parms(): no params data found [ 997.031267][T14320] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.055796][T14320] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.059313][T14320] bridge_slave_0: entered allmulticast mode [ 997.065622][T14320] bridge_slave_0: entered promiscuous mode [ 997.313335][T14320] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.316820][T14320] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.320950][T14320] bridge_slave_1: entered allmulticast mode [ 997.325920][T14320] bridge_slave_1: entered promiscuous mode [ 997.891073][T14320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.901092][T14320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.910267][T14316] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.914637][T14316] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.919371][T14316] bridge_slave_0: entered allmulticast mode [ 997.955807][T14316] bridge_slave_0: entered promiscuous mode [ 997.961185][T14316] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.977629][T14316] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.982069][T14316] bridge_slave_1: entered allmulticast mode [ 997.986647][T14316] bridge_slave_1: entered promiscuous mode [ 998.364417][ T5976] Bluetooth: hci7: command tx timeout [ 998.730698][T14309] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.736038][T14309] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.742490][T14309] bridge_slave_0: entered allmulticast mode [ 998.763691][T14309] bridge_slave_0: entered promiscuous mode [ 998.769272][T14313] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.772404][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.782662][T14313] bridge_slave_0: entered allmulticast mode [ 998.787286][T14313] bridge_slave_0: entered promiscuous mode [ 998.818642][T14320] team0: Port device team_slave_0 added [ 998.837063][T14320] team0: Port device team_slave_1 added [ 998.880668][T14316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.891980][T14316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.940083][T14309] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.944622][T14309] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.952204][T14309] bridge_slave_1: entered allmulticast mode [ 998.966658][T14309] bridge_slave_1: entered promiscuous mode [ 998.971926][T14313] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.975254][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.996697][T14313] bridge_slave_1: entered allmulticast mode [ 999.002365][T14313] bridge_slave_1: entered promiscuous mode [ 999.374990][T14320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.378166][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.389630][T14320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.672252][T14313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.676851][T14320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.687701][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.710892][T14320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.851721][T14316] team0: Port device team_slave_0 added [ 999.864354][T14309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.871295][T14309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.894637][T14313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.022487][T14316] team0: Port device team_slave_1 added [ 1000.262403][T14313] team0: Port device team_slave_0 added [ 1000.275760][T14313] team0: Port device team_slave_1 added [ 1000.391327][T14316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.396420][T14316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.411848][T14316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.453478][ T5976] Bluetooth: hci7: command tx timeout [ 1000.626703][T14316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.630214][T14316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.666808][T14316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.675475][T14309] team0: Port device team_slave_0 added [ 1000.683254][T14309] team0: Port device team_slave_1 added [ 1000.716121][T14313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.725856][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.758739][T14313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.782816][T14313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.786229][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.812147][T14313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.060267][T14320] hsr_slave_0: entered promiscuous mode [ 1001.072444][T14320] hsr_slave_1: entered promiscuous mode [ 1001.075752][T14320] debugfs: 'hsr0' already exists in 'hsr' [ 1001.089722][T14320] Cannot create hsr debugfs directory [ 1001.185105][T14309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.189019][T14309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.199048][T14309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.206239][T14309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.210171][T14309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.222966][T14309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.427402][T14316] hsr_slave_0: entered promiscuous mode [ 1001.433656][T14316] hsr_slave_1: entered promiscuous mode [ 1001.437637][T14316] debugfs: 'hsr0' already exists in 'hsr' [ 1001.446009][T14316] Cannot create hsr debugfs directory [ 1001.846136][T14313] hsr_slave_0: entered promiscuous mode [ 1001.852659][T14313] hsr_slave_1: entered promiscuous mode [ 1001.855056][T14313] debugfs: 'hsr0' already exists in 'hsr' [ 1001.856993][T14313] Cannot create hsr debugfs directory [ 1002.291846][T14309] hsr_slave_0: entered promiscuous mode [ 1002.296260][T14309] hsr_slave_1: entered promiscuous mode [ 1002.303156][T14309] debugfs: 'hsr0' already exists in 'hsr' [ 1002.306017][T14309] Cannot create hsr debugfs directory [ 1003.916883][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.099363][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.175461][T14320] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1004.230289][T14320] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1004.342910][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.352597][T14320] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1004.461724][T14320] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1004.597582][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.144473][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.304786][T14320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.337227][T14320] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.433813][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.548173][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.554480][T10863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.562258][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.567192][T10863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.699899][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.796299][T14316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1006.134175][T14316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1006.180710][T14316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1006.202998][T14316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1006.426069][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.343034][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.698251][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.785755][T14316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.799764][T14320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.842910][T14316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.033395][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.081752][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.086528][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.116347][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.136279][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.262101][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.642501][T14309] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1008.650725][T14309] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1008.660566][T14309] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1008.755446][T14309] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1009.421318][T14320] veth0_vlan: entered promiscuous mode [ 1009.575013][T14320] veth1_vlan: entered promiscuous mode [ 1010.008264][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.040476][T14320] veth0_macvtap: entered promiscuous mode [ 1010.053442][T14320] veth1_macvtap: entered promiscuous mode [ 1010.184962][T14320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.226491][T14316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.285604][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.453198][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.481999][T14309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.487268][T14320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.522023][ T1141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.570322][T14309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.654400][T10863] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.662904][T10863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.704739][T14313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1010.741138][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.793645][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.797413][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.904371][T10863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.910585][T14313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1010.920285][T14313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1010.949759][T14313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1010.994650][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.004155][T10863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.178305][T14309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1011.325992][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.359887][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.382492][T14316] veth0_vlan: entered promiscuous mode [ 1011.404582][T14316] veth1_vlan: entered promiscuous mode [ 1011.644782][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.661666][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.706159][T14316] veth0_macvtap: entered promiscuous mode [ 1011.735587][ T13] bridge_slave_1: left allmulticast mode [ 1011.740680][ T13] bridge_slave_1: left promiscuous mode [ 1011.744056][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.756271][ T13] bridge_slave_0: left allmulticast mode [ 1011.759168][ T13] bridge_slave_0: left promiscuous mode [ 1011.774907][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.796568][ T13] bridge_slave_1: left allmulticast mode [ 1011.802885][ T13] bridge_slave_1: left promiscuous mode [ 1011.815173][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.822088][ T13] bridge_slave_0: left allmulticast mode [ 1011.824445][ T13] bridge_slave_0: left promiscuous mode [ 1011.827140][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.862397][ T13] bridge_slave_1: left allmulticast mode [ 1011.864960][ T13] bridge_slave_1: left promiscuous mode [ 1011.867534][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.896597][ T13] bridge_slave_0: left allmulticast mode [ 1011.899084][ T13] bridge_slave_0: left promiscuous mode [ 1011.902473][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.927483][ T13] bridge_slave_1: left allmulticast mode [ 1011.931475][ T13] bridge_slave_1: left promiscuous mode [ 1011.934830][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.958865][ T13] bridge_slave_0: left allmulticast mode [ 1011.963131][ T13] bridge_slave_0: left promiscuous mode [ 1011.966567][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.439006][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.449511][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.460710][ T13] bond0 (unregistering): Released all slaves [ 1014.419646][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.443622][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.484643][ T13] bond0 (unregistering): Released all slaves [ 1015.740820][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.782555][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.801928][ T13] bond0 (unregistering): Released all slaves [ 1016.666968][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.693405][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.699867][ T13] bond0 (unregistering): Released all slaves [ 1016.760560][T14313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.805039][T14316] veth1_macvtap: entered promiscuous mode [ 1016.942412][T14309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.000611][T14316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.022645][T14313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.113517][T14316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.178290][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.194788][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.208283][T14510] fuse: Bad value for 'fd' [ 1017.250938][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.254071][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.267567][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.316311][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.365205][T14313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1017.371792][T14313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1017.384953][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.635830][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.848779][T14515] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.144857][T14515] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.473860][ T1246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.484763][ T1246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.607048][T14515] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.652943][T14313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.754618][T14309] veth0_vlan: entered promiscuous mode [ 1018.765898][T14309] veth1_vlan: entered promiscuous mode [ 1018.806420][T14515] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.890538][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.931232][T14309] veth0_macvtap: entered promiscuous mode [ 1018.948443][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.955877][T14309] veth1_macvtap: entered promiscuous mode [ 1019.320877][T14313] veth0_vlan: entered promiscuous mode [ 1019.329814][T14313] veth1_vlan: entered promiscuous mode [ 1019.361071][T14313] veth0_macvtap: entered promiscuous mode [ 1019.372515][T14313] veth1_macvtap: entered promiscuous mode [ 1019.407155][T14313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.424282][T14313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.581855][T10863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.586745][T10863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.251856][T14309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.273377][ T1150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.404877][ T1150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.411376][ T1150] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.487882][ T1246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.522555][ T1246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.671340][T14309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.674858][ T1150] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.723722][T13204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.727141][T13204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.851949][ T1141] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.856089][ T1141] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.967848][ T1150] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.971910][ T1150] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.976586][ T1150] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.992296][ T1150] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.244489][ T1246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.248866][ T1246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.935249][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.939674][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.168842][T14540] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1022.171885][T14540] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1022.176898][T14540] vhci_hcd vhci_hcd.0: Device attached [ 1022.372391][ T13] hsr_slave_0: left promiscuous mode [ 1022.390209][ T13] hsr_slave_1: left promiscuous mode [ 1022.393481][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.396684][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.423308][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.428149][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.442115][ T6016] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1022.448212][T10693] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1022.493957][ T13] hsr_slave_0: left promiscuous mode [ 1022.536380][ T13] hsr_slave_1: left promiscuous mode [ 1022.553870][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.558254][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.663120][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.672684][ T6016] usb 9-1: Using ep0 maxpacket: 16 [ 1022.677950][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.702269][ T6016] usb 9-1: config 0 has no interfaces? [ 1022.721175][ T6016] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1022.725226][ T6016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.742194][ T6016] usb 9-1: config 0 descriptor?? [ 1022.887561][ T13] hsr_slave_0: left promiscuous mode [ 1022.928144][ T13] hsr_slave_1: left promiscuous mode [ 1022.946942][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.954572][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.982977][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.986807][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.003708][T14541] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 1023.059789][ T12] vhci_hcd: stop threads [ 1023.070231][ T12] vhci_hcd: release socket [ 1023.145052][ T12] vhci_hcd: disconnect device [ 1023.228370][ T13] hsr_slave_0: left promiscuous mode [ 1023.235264][ T13] hsr_slave_1: left promiscuous mode [ 1023.241600][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.245017][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.262387][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.266122][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.751996][ T13] veth1_macvtap: left promiscuous mode [ 1023.768431][ T13] veth0_macvtap: left promiscuous mode [ 1023.772536][ T13] veth1_vlan: left promiscuous mode [ 1023.775623][ T13] veth0_vlan: left promiscuous mode [ 1023.815944][ T13] veth1_macvtap: left promiscuous mode [ 1023.818156][ T13] veth0_macvtap: left promiscuous mode [ 1023.820062][ T13] veth1_vlan: left promiscuous mode [ 1023.822817][ T13] veth0_vlan: left promiscuous mode [ 1023.862045][ T13] veth1_macvtap: left promiscuous mode [ 1023.864871][ T13] veth0_macvtap: left promiscuous mode [ 1023.876328][ T13] veth1_vlan: left promiscuous mode [ 1023.880114][ T13] veth0_vlan: left promiscuous mode [ 1023.940167][ T13] veth1_macvtap: left promiscuous mode [ 1023.943545][ T13] veth0_macvtap: left promiscuous mode [ 1023.947534][ T13] veth1_vlan: left promiscuous mode [ 1023.950908][ T13] veth0_vlan: left promiscuous mode [ 1025.376678][T14485] usb 9-1: USB disconnect, device number 2 [ 1025.689993][T14558] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1025.692626][T14558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1025.696590][T14558] vhci_hcd vhci_hcd.0: Device attached [ 1025.978023][T14485] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1026.143484][T14485] usb 9-1: Using ep0 maxpacket: 16 [ 1026.151179][T14485] usb 9-1: config 0 has no interfaces? [ 1026.159839][T14485] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1026.179704][T14485] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.192939][T14485] usb 9-1: config 0 descriptor?? [ 1026.818407][T10693] usb 45-1: device descriptor read/64, error -71 [ 1027.098224][ T40] audit: type=1804 audit(1754897825.810:98): pid=14562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1423" name="/newroot/3/file0/file0" dev="9p" ino=35913829 res=1 errno=0 [ 1027.147382][T10693] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 1028.721720][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1028.930438][T14559] vhci_hcd: connection closed [ 1028.930794][T10863] vhci_hcd: stop threads [ 1028.941366][T10863] vhci_hcd: release socket [ 1028.943962][T10863] vhci_hcd: disconnect device [ 1029.031816][ T9] usb 9-1: USB disconnect, device number 3 [ 1029.196324][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1032.268036][T10693] vhci_hcd: vhci_device speed not set [ 1036.036616][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1036.490513][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1037.700874][ T5989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1037.706716][ T5989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1037.747357][ T5989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1037.765736][ T5989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1037.783502][ T5989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1038.893908][ T5989] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1038.913248][ T5989] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1038.927645][ T5989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1038.951658][ T5989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1038.970583][ T5989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1039.740715][ T5989] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1039.758995][ T5989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1039.802475][ T5989] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1039.814245][ T5989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1039.836833][ T5989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1039.878444][ T5989] Bluetooth: hci0: command tx timeout [ 1041.078015][T14581] Bluetooth: hci1: command tx timeout [ 1041.890115][T14581] Bluetooth: hci2: command tx timeout [ 1041.958174][T14581] Bluetooth: hci0: command tx timeout [ 1041.984562][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1042.382918][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1043.162650][T14581] Bluetooth: hci1: command tx timeout [ 1043.962595][T14581] Bluetooth: hci2: command tx timeout [ 1044.044993][T14581] Bluetooth: hci0: command tx timeout [ 1044.774011][T12473] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1044.808097][T12473] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1044.839116][T12473] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1044.915091][T12473] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1044.925478][T12473] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1045.248861][T12473] Bluetooth: hci1: command tx timeout [ 1046.037979][T12473] Bluetooth: hci2: command tx timeout [ 1046.132695][T12473] Bluetooth: hci0: command tx timeout [ 1047.000741][T12473] Bluetooth: hci3: command tx timeout [ 1047.328171][T12473] Bluetooth: hci1: command tx timeout [ 1048.120059][T12473] Bluetooth: hci2: command tx timeout [ 1048.276285][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1048.508034][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1049.087659][T12473] Bluetooth: hci3: command tx timeout [ 1051.159255][T12473] Bluetooth: hci3: command tx timeout [ 1053.242117][T14579] chnl_net:caif_netlink_parms(): no params data found [ 1053.252497][T12473] Bluetooth: hci3: command tx timeout [ 1053.301603][T14572] chnl_net:caif_netlink_parms(): no params data found [ 1053.512908][T14583] chnl_net:caif_netlink_parms(): no params data found [ 1053.648695][T14577] chnl_net:caif_netlink_parms(): no params data found [ 1053.853761][T14579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.859229][T14579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.874768][T14579] bridge_slave_0: entered allmulticast mode [ 1053.914699][T14579] bridge_slave_0: entered promiscuous mode [ 1053.990477][T14579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.994658][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.998698][T14579] bridge_slave_1: entered allmulticast mode [ 1054.020118][T14579] bridge_slave_1: entered promiscuous mode [ 1054.043552][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.057696][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.381478][T14572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.384392][T14572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.387326][T14572] bridge_slave_0: entered allmulticast mode [ 1054.406166][T14572] bridge_slave_0: entered promiscuous mode [ 1054.561442][T14579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.571443][T14572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.575421][T14572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.589868][T14572] bridge_slave_1: entered allmulticast mode [ 1054.595797][T14572] bridge_slave_1: entered promiscuous mode [ 1054.678499][T14579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.033757][T14583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.038301][T14583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.058281][T14583] bridge_slave_0: entered allmulticast mode [ 1055.062527][T14583] bridge_slave_0: entered promiscuous mode [ 1055.114309][T14579] team0: Port device team_slave_0 added [ 1055.152881][T14572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.234859][T14583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.238788][T14583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.249831][T14583] bridge_slave_1: entered allmulticast mode [ 1055.253784][T14583] bridge_slave_1: entered promiscuous mode [ 1055.295583][T14579] team0: Port device team_slave_1 added [ 1055.338458][T14572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.351732][T14577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.354992][T14577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.358471][T14577] bridge_slave_0: entered allmulticast mode [ 1055.367220][T14577] bridge_slave_0: entered promiscuous mode [ 1055.624818][T14577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.630410][T14577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.635525][T14577] bridge_slave_1: entered allmulticast mode [ 1055.641190][T14577] bridge_slave_1: entered promiscuous mode [ 1055.658631][T14583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.671369][T14583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.758786][T14579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.762485][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.789780][T14579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.798552][T14572] team0: Port device team_slave_0 added [ 1055.950448][T14579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.974366][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.001003][T14579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.009389][T14572] team0: Port device team_slave_1 added [ 1056.073010][T14583] team0: Port device team_slave_0 added [ 1056.213723][T14577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.244964][T14583] team0: Port device team_slave_1 added [ 1056.344925][T14572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.349149][T14572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.404601][T14572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.420713][T14572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.423845][T14572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.466976][T14572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.477069][T14577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.823951][T14583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.827534][T14583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.865917][T14583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.872503][T14583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.884895][T14583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.937911][T14583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.950222][T14579] hsr_slave_0: entered promiscuous mode [ 1056.953192][T14579] hsr_slave_1: entered promiscuous mode [ 1057.124622][T14577] team0: Port device team_slave_0 added [ 1057.272554][T14577] team0: Port device team_slave_1 added [ 1057.331512][T14572] hsr_slave_0: entered promiscuous mode [ 1057.343798][T14572] hsr_slave_1: entered promiscuous mode [ 1057.364260][T14572] debugfs: 'hsr0' already exists in 'hsr' [ 1057.367067][T14572] Cannot create hsr debugfs directory [ 1057.583398][T14583] hsr_slave_0: entered promiscuous mode [ 1057.586822][T14583] hsr_slave_1: entered promiscuous mode [ 1057.590212][T14583] debugfs: 'hsr0' already exists in 'hsr' [ 1057.592952][T14583] Cannot create hsr debugfs directory [ 1057.918541][T14577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.933369][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.945991][T14577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.003565][T14577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.008295][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.027339][T14577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.297178][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.483138][T14577] hsr_slave_0: entered promiscuous mode [ 1058.490579][T14577] hsr_slave_1: entered promiscuous mode [ 1058.493765][T14577] debugfs: 'hsr0' already exists in 'hsr' [ 1058.526258][T14577] Cannot create hsr debugfs directory [ 1058.674161][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.938315][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.504422][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.328838][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.617187][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.744148][T14579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1060.814003][T14579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1061.128447][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.169299][T14579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1061.186536][T14579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1061.319307][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.454132][T14579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.469985][T14579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.521097][T13204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.525067][T13204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.563592][T13204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.566954][T13204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.099402][ T13] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.258019][ T13] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.417000][ T13] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.499647][T14579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.509655][T14572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1062.531749][T14572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1062.686866][ T13] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.702393][T14572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1062.732368][T14572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1063.055908][T14579] veth0_vlan: entered promiscuous mode [ 1063.217148][T14579] veth1_vlan: entered promiscuous mode [ 1063.331334][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.491967][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.546722][T14579] veth0_macvtap: entered promiscuous mode [ 1063.567564][T14579] veth1_macvtap: entered promiscuous mode [ 1063.647129][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.701067][T14579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.728800][T14579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.822055][T10863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.849834][T10863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.859183][T10863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.086370][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.114012][T10863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.146115][T14572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.210495][T14583] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1064.242544][T14583] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1064.466136][T14583] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1064.568963][T14572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.653211][T14583] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1064.788790][T13204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.791612][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.794006][T13204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.798721][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.856738][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.870329][T10863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.068950][T10863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.087452][T10863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.227205][ T13] bridge_slave_1: left allmulticast mode [ 1065.231680][ T13] bridge_slave_1: left promiscuous mode [ 1065.234656][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.241583][ T13] bridge_slave_0: left allmulticast mode [ 1065.244251][ T13] bridge_slave_0: left promiscuous mode [ 1065.246627][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.274043][ T13] bridge_slave_1: left allmulticast mode [ 1065.277324][ T13] bridge_slave_1: left promiscuous mode [ 1065.290213][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.296609][ T13] bridge_slave_0: left allmulticast mode [ 1065.298983][ T13] bridge_slave_0: left promiscuous mode [ 1065.303169][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.322896][ T13] bridge_slave_1: left allmulticast mode [ 1065.326645][ T13] bridge_slave_1: left promiscuous mode [ 1065.331178][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.351075][ T13] bridge_slave_0: left allmulticast mode [ 1065.354321][ T13] bridge_slave_0: left promiscuous mode [ 1065.357022][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.393835][ T13] bridge_slave_1: left allmulticast mode [ 1065.396118][ T13] bridge_slave_1: left promiscuous mode [ 1065.407605][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.451099][ T13] bridge_slave_0: left allmulticast mode [ 1065.453829][ T13] bridge_slave_0: left promiscuous mode [ 1065.456506][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.772558][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.787571][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.800033][ T13] bond0 (unregistering): Released all slaves [ 1067.745651][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.754010][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.798060][ T13] bond0 (unregistering): Released all slaves [ 1068.539300][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.552598][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.565409][ T13] bond0 (unregistering): Released all slaves [ 1069.421354][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.427971][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.460334][ T13] bond0 (unregistering): Released all slaves [ 1069.604738][T14572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1069.647425][T14699] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1069.656125][T14699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1069.662499][T14699] vhci_hcd vhci_hcd.0: Device attached [ 1069.908026][T10082] usb 43-1: new low-speed USB device number 25 using vhci_hcd [ 1069.918085][ T6064] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1070.024249][T14577] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1070.171127][T14577] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1070.180097][ T6064] usb 8-1: Using ep0 maxpacket: 16 [ 1070.202947][T14583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.216998][ T6064] usb 8-1: config 0 has no interfaces? [ 1070.232180][T14577] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1070.232985][ T6064] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1070.255368][ T6064] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.302790][ T6064] usb 8-1: config 0 descriptor?? [ 1070.333103][T14577] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1070.516077][T14700] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 25 [ 1070.533196][ T1141] vhci_hcd: stop threads [ 1070.535150][ T1141] vhci_hcd: release socket [ 1070.538293][ T1141] vhci_hcd: disconnect device [ 1070.757474][T14583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.826376][T13204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.835736][T13204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.932925][T14572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.955504][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.959599][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.186713][T14572] veth0_vlan: entered promiscuous mode [ 1071.199077][T14572] veth1_vlan: entered promiscuous mode [ 1071.220153][ T40] audit: type=1804 audit(1754897869.920:99): pid=14715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1427" name="/newroot/0/file0/file0" dev="9p" ino=35913829 res=1 errno=0 [ 1071.556807][T14572] veth0_macvtap: entered promiscuous mode [ 1071.594161][T14572] veth1_macvtap: entered promiscuous mode [ 1071.630860][T14577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.774924][T14577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.794364][T14572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.809196][T14572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.938180][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.988820][T14583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.009245][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.014702][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.024973][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.037176][T10863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.075468][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.186135][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.192817][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.620853][ T1246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.626419][ T1246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.727454][T10863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.763583][T10863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.777266][ T6046] usb 8-1: USB disconnect, device number 28 [ 1073.136509][T14583] veth0_vlan: entered promiscuous mode [ 1073.304524][T14577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.309459][T14583] veth1_vlan: entered promiscuous mode [ 1073.438428][ T13] hsr_slave_0: left promiscuous mode [ 1073.442513][ T13] hsr_slave_1: left promiscuous mode [ 1073.445803][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.449140][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.464790][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.469470][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.608118][ T13] hsr_slave_0: left promiscuous mode [ 1073.681370][ T13] hsr_slave_1: left promiscuous mode [ 1073.684692][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.688773][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.751658][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.755008][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.864727][ T13] hsr_slave_0: left promiscuous mode [ 1073.871360][ T13] hsr_slave_1: left promiscuous mode [ 1073.874991][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.883327][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.894353][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.899434][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.042445][ T13] hsr_slave_0: left promiscuous mode [ 1074.197452][ T13] hsr_slave_1: left promiscuous mode [ 1074.201134][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.204971][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.209709][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.232181][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.397698][ T13] veth1_macvtap: left promiscuous mode [ 1074.402076][ T13] veth0_macvtap: left promiscuous mode [ 1074.406533][ T13] veth1_vlan: left promiscuous mode [ 1074.409710][ T13] veth0_vlan: left promiscuous mode [ 1074.414593][ T13] veth1_macvtap: left promiscuous mode [ 1074.417734][ T13] veth0_macvtap: left promiscuous mode [ 1074.421362][ T13] veth1_vlan: left promiscuous mode [ 1074.424362][ T13] veth0_vlan: left promiscuous mode [ 1074.437580][ T13] veth1_macvtap: left promiscuous mode [ 1074.441676][ T13] veth0_macvtap: left promiscuous mode [ 1074.451880][ T13] veth1_vlan: left promiscuous mode [ 1074.455813][ T13] veth0_vlan: left promiscuous mode [ 1074.479567][ T13] veth1_macvtap: left promiscuous mode [ 1074.482620][ T13] veth0_macvtap: left promiscuous mode [ 1074.488699][ T13] veth1_vlan: left promiscuous mode [ 1074.495733][ T13] veth0_vlan: left promiscuous mode [ 1074.998877][T10082] vhci_hcd: vhci_device speed not set [ 1078.007682][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1078.487527][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1083.971781][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1084.263204][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1088.605860][T14581] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1088.617070][ T5976] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1088.631355][ T5976] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1088.642145][ T5976] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1088.653498][T14753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1088.656518][T14581] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1088.683599][T14753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1088.688702][T14581] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1088.701708][T14753] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1088.710405][T14753] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1089.881199][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1090.253840][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1090.761334][T14753] Bluetooth: hci5: command tx timeout [ 1090.761461][ T5989] Bluetooth: hci4: command tx timeout [ 1092.852726][ T5989] Bluetooth: hci5: command tx timeout [ 1092.857038][ T5989] Bluetooth: hci4: command tx timeout [ 1094.919052][ T5989] Bluetooth: hci5: command tx timeout [ 1094.923261][T14753] Bluetooth: hci4: command tx timeout [ 1095.956774][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1096.238358][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1096.999470][T14753] Bluetooth: hci4: command tx timeout [ 1097.014991][T14753] Bluetooth: hci5: command tx timeout [ 1098.874659][T14583] veth0_macvtap: entered promiscuous mode [ 1099.054861][T14583] veth1_macvtap: entered promiscuous mode [ 1099.249406][T14583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.404911][T14583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.556066][ T99] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.787504][ T99] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.825096][ T99] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.969141][ T5989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1099.981607][ T5989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1099.995554][ T5989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1100.008379][ T5989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1100.016711][ T5989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1100.252150][ T99] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.827450][T14747] chnl_net:caif_netlink_parms(): no params data found [ 1100.866825][T14749] chnl_net:caif_netlink_parms(): no params data found [ 1101.358596][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.361774][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.510122][T14749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.514332][T14749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.536976][T14749] bridge_slave_0: entered allmulticast mode [ 1101.547635][T14749] bridge_slave_0: entered promiscuous mode [ 1101.667997][T14749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.671446][T14749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.675143][T14749] bridge_slave_1: entered allmulticast mode [ 1101.680574][T14749] bridge_slave_1: entered promiscuous mode [ 1101.834733][T14747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.843292][T14747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.848587][T14747] bridge_slave_0: entered allmulticast mode [ 1101.858938][T14747] bridge_slave_0: entered promiscuous mode [ 1101.873851][T14747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.880491][T14747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.896902][T14747] bridge_slave_1: entered allmulticast mode [ 1101.916984][T14747] bridge_slave_1: entered promiscuous mode [ 1102.100448][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.104900][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.140506][ T5989] Bluetooth: hci0: command tx timeout [ 1102.144286][T14749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.151704][T14749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.293714][T14747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.398763][T14747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.614012][T14749] team0: Port device team_slave_0 added [ 1102.631641][T14749] team0: Port device team_slave_1 added [ 1102.888284][T14747] team0: Port device team_slave_0 added [ 1103.134599][T14747] team0: Port device team_slave_1 added [ 1103.382073][T14749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.385348][T14749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.403818][T14749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.460721][T14747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.486270][T14747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.511882][T14747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.518920][T14749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.522533][T14749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.544061][T14749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.572720][T14747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.576861][T14747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.593935][T14747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.634513][T14761] chnl_net:caif_netlink_parms(): no params data found [ 1103.934686][T14749] hsr_slave_0: entered promiscuous mode [ 1103.939128][T14749] hsr_slave_1: entered promiscuous mode [ 1103.952496][T14749] debugfs: 'hsr0' already exists in 'hsr' [ 1103.963166][T14749] Cannot create hsr debugfs directory [ 1104.209029][ T5989] Bluetooth: hci0: command tx timeout [ 1104.253149][T14784] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1104.255262][T14784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1104.263099][T14784] vhci_hcd vhci_hcd.0: Device attached [ 1104.263707][T14747] hsr_slave_0: entered promiscuous mode [ 1104.276408][T14747] hsr_slave_1: entered promiscuous mode [ 1104.290169][T14747] debugfs: 'hsr0' already exists in 'hsr' [ 1104.292788][T14747] Cannot create hsr debugfs directory [ 1104.498733][ T6345] usb 49-1: new low-speed USB device number 4 using vhci_hcd [ 1104.538162][ T5983] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 1104.697952][ T5983] usb 11-1: Using ep0 maxpacket: 16 [ 1104.703409][ T5983] usb 11-1: config 0 has no interfaces? [ 1104.706228][ T5983] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1104.716411][ T5983] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.739119][ T5983] usb 11-1: config 0 descriptor?? [ 1104.827712][T14761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.831462][T14761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.847619][T14761] bridge_slave_0: entered allmulticast mode [ 1104.864209][T14761] bridge_slave_0: entered promiscuous mode [ 1104.947217][T14761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.951223][T14761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.955113][T14761] bridge_slave_1: entered allmulticast mode [ 1104.967608][T14761] bridge_slave_1: entered promiscuous mode [ 1104.972315][T14785] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 1104.988620][ T12] vhci_hcd: stop threads [ 1104.990823][ T12] vhci_hcd: release socket [ 1104.993273][ T12] vhci_hcd: disconnect device [ 1105.341300][T14761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.432732][T14761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.684773][ T40] audit: type=1804 audit(1754897904.410:100): pid=14789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1432" name="/newroot/1/file0/file0" dev="9p" ino=35913829 res=1 errno=0 [ 1106.027140][T14761] team0: Port device team_slave_0 added [ 1106.035523][T14761] team0: Port device team_slave_1 added [ 1106.290356][ T5989] Bluetooth: hci0: command tx timeout [ 1106.323150][T14761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.326372][T14761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.343629][T14761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.453369][T14761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.456010][T14761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.495326][T14761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.752078][T14761] hsr_slave_0: entered promiscuous mode [ 1106.759526][T14761] hsr_slave_1: entered promiscuous mode [ 1106.764121][T14761] debugfs: 'hsr0' already exists in 'hsr' [ 1106.767418][T14761] Cannot create hsr debugfs directory [ 1107.413686][T10082] usb 11-1: USB disconnect, device number 4 [ 1107.698117][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.717425][T14792] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1107.742058][T14792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1107.776532][T14792] vhci_hcd vhci_hcd.0: Device attached [ 1107.974530][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.047933][T10082] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 1108.202179][T10082] usb 11-1: Using ep0 maxpacket: 16 [ 1108.217383][T10082] usb 11-1: config 0 has no interfaces? [ 1108.226949][T10082] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1108.245152][T10082] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.273414][T10082] usb 11-1: config 0 descriptor?? [ 1108.316459][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.368244][ T5989] Bluetooth: hci0: command tx timeout [ 1108.561600][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.580137][T14793] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 1108.594635][ T99] vhci_hcd: stop threads [ 1108.597043][ T99] vhci_hcd: release socket [ 1108.600322][ T99] vhci_hcd: disconnect device [ 1108.894426][T14749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1109.009287][T14749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1109.046253][T14749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1109.060084][T14749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1109.188759][ T40] audit: type=1804 audit(1754897907.900:101): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1433" name="/newroot/2/file0/file0" dev="9p" ino=35913829 res=1 errno=0 [ 1109.638435][ T6345] vhci_hcd: vhci_device speed not set [ 1109.744408][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.871994][T14749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.892037][T14749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.950770][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.977888][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.982935][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.003690][T13204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.009394][T13204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.146155][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.306844][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.322613][T14761] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1110.344318][T14761] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1110.374450][T14761] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1110.406940][T14761] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1110.625705][T14747] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1110.671743][T14749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.676997][T14747] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1110.753282][T14747] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1110.784966][T14747] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1110.853439][T10693] usb 11-1: USB disconnect, device number 5 [ 1111.151773][T14749] veth0_vlan: entered promiscuous mode [ 1111.190188][ T13] bridge_slave_1: left allmulticast mode [ 1111.192656][ T13] bridge_slave_1: left promiscuous mode [ 1111.214526][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.249262][ T13] bridge_slave_0: left allmulticast mode [ 1111.251976][ T13] bridge_slave_0: left promiscuous mode [ 1111.254483][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.283430][ T13] bridge_slave_1: left allmulticast mode [ 1111.301391][ T13] bridge_slave_1: left promiscuous mode [ 1111.304577][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.395331][ T13] bridge_slave_0: left allmulticast mode [ 1111.397301][ T13] bridge_slave_0: left promiscuous mode [ 1111.399962][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.429033][ T13] bridge_slave_1: left allmulticast mode [ 1111.431956][ T13] bridge_slave_1: left promiscuous mode [ 1111.461982][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.490438][ T13] bridge_slave_0: left allmulticast mode [ 1111.493835][ T13] bridge_slave_0: left promiscuous mode [ 1111.496499][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.519588][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.538483][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.571315][ T13] bond0 (unregistering): Released all slaves [ 1113.447425][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.473463][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.497973][ T13] bond0 (unregistering): Released all slaves [ 1114.479726][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.534183][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.549446][ T13] bond0 (unregistering): Released all slaves [ 1114.621691][T14749] veth1_vlan: entered promiscuous mode [ 1114.901832][T14863] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.324243][T14863] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.375490][T14761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.489936][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.492895][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.770549][T14863] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.845550][T14749] veth0_macvtap: entered promiscuous mode [ 1115.855941][T14749] veth1_macvtap: entered promiscuous mode [ 1115.882584][T14761] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.996320][T14749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.016483][T14749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.059823][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.062907][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.068870][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.079184][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.100883][T14747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.108303][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.125682][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.192018][T14863] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.265500][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.299023][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.539289][T14747] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.629619][T13204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.635290][T13204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.651682][T13204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.665980][T13204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.695305][T14761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1116.811489][ T13] hsr_slave_0: left promiscuous mode [ 1116.814673][ T13] hsr_slave_1: left promiscuous mode [ 1116.828345][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.835145][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.903327][ T13] hsr_slave_0: left promiscuous mode [ 1116.950734][ T13] hsr_slave_1: left promiscuous mode [ 1116.955271][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.960446][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.967421][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.987015][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.009879][ T13] hsr_slave_0: left promiscuous mode [ 1117.013594][ T13] hsr_slave_1: left promiscuous mode [ 1117.017125][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.022350][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.027628][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.032716][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.170490][ T13] veth1_macvtap: left promiscuous mode [ 1117.173291][ T13] veth0_macvtap: left promiscuous mode [ 1117.176139][ T13] veth1_vlan: left promiscuous mode [ 1117.180001][ T13] veth0_vlan: left promiscuous mode [ 1117.199675][ T13] veth1_macvtap: left promiscuous mode [ 1117.203641][ T13] veth0_macvtap: left promiscuous mode [ 1117.207436][ T13] veth1_vlan: left promiscuous mode [ 1117.228051][ T13] veth0_vlan: left promiscuous mode [ 1119.130528][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1119.492667][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1122.891388][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1122.976109][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1124.575595][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1124.653841][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1125.262769][T13204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.269981][T13204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.276077][ T1150] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.332672][T13204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.336079][ T1246] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.336322][T13204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.359136][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.382202][ T1141] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.435639][T14761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.639284][T14973] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1125.641698][T14973] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1125.644168][T14973] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1125.647133][T14973] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 1125.650150][T14973] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1125.652953][T14973] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1125.655615][T14973] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1125.658325][T14973] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1125.660114][T14761] veth0_vlan: entered promiscuous mode [ 1125.660612][T14973] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1125.665337][T14973] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1125.667664][T14973] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1125.671855][T14973] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1125.674063][T14973] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1125.676317][T14973] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1125.679033][T14973] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1125.706924][T14761] veth1_vlan: entered promiscuous mode [ 1125.721877][T14761] veth0_macvtap: entered promiscuous mode [ 1125.726270][T14761] veth1_macvtap: entered promiscuous mode [ 1125.750028][T14761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.767419][T14761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.802829][ T1150] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.815756][ T1150] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.827926][ T1150] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.292382][ T1150] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.487033][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.491128][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.505753][T14747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.546454][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.550272][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.680981][T15016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.150063][T14747] veth0_vlan: entered promiscuous mode [ 1127.155264][T14747] veth1_vlan: entered promiscuous mode [ 1127.214540][T14747] veth0_macvtap: entered promiscuous mode [ 1127.224997][T14747] veth1_macvtap: entered promiscuous mode [ 1127.246791][T14747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.264515][T14747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.278100][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.283452][ T1150] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.286602][ T1150] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.335246][ T1150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.380774][T15016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.453482][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.462016][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.500641][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.508809][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.580386][T15042] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1127.582607][T15042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1127.586502][T15042] vhci_hcd vhci_hcd.0: Device attached [ 1127.675377][T15050] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1127.677210][T15016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.678506][T15050] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1127.678598][T15050] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1127.678712][T15050] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 1127.695577][T15050] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1127.699553][T15035] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.703608][T15050] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1127.706666][T15050] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1127.717419][T15050] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1127.721128][T15050] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1127.729217][T15050] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1127.743383][T15050] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1127.746827][T15050] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1127.750479][T15050] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1127.768798][T15050] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1127.774078][T15050] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1127.827845][ T7051] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 1127.830920][ T6016] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 1127.847470][T15035] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.977853][ T6016] usb 12-1: Using ep0 maxpacket: 16 [ 1127.982995][ T6016] usb 12-1: config 0 has no interfaces? [ 1127.985033][ T6016] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1127.991329][ T6016] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.997149][ T6016] usb 12-1: config 0 descriptor?? [ 1128.015861][T15016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.162046][T15035] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.209511][T15043] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 1128.220986][ T1150] vhci_hcd: stop threads [ 1128.223337][ T1150] vhci_hcd: release socket [ 1128.229463][ T1150] vhci_hcd: disconnect device [ 1128.337585][T15035] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.374861][ T1150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.723900][T14886] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.741675][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.744446][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.600098][T15107] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1130.375610][T15167] warning: `syz.1.1460' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1130.630618][ T7344] usb 12-1: USB disconnect, device number 2 [ 1130.665827][T15180] syzkaller1: entered promiscuous mode [ 1130.669869][T15180] syzkaller1: entered allmulticast mode [ 1131.380031][T13204] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.401037][T13204] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.403922][T13204] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.420741][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.579613][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1473'. [ 1132.907962][ T7051] vhci_hcd: vhci_device speed not set [ 1133.915918][T13602] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1133.977265][T13602] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1134.052958][T15376] fido_id[15376]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1134.119771][ T5989] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1134.123785][ T5989] Bluetooth: hci0: Injecting HCI hardware error event [ 1134.126891][ T5989] Bluetooth: hci0: hardware error 0x00 [ 1134.213144][T15390] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1496'. [ 1135.304344][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1513'. [ 1135.522974][T15489] tipc: Started in network mode [ 1135.524821][T15489] tipc: Node identity 0e36a09c2998, cluster identity 4711 [ 1135.527453][T15489] tipc: Enabled bearer , priority 0 [ 1135.531675][T15489] syzkaller0: entered promiscuous mode [ 1135.533683][T15489] syzkaller0: entered allmulticast mode [ 1135.555245][T15489] tipc: Resetting bearer [ 1135.558347][T12473] Bluetooth: hci5: command 0x0406 tx timeout [ 1135.563227][T15487] tipc: Resetting bearer [ 1135.582030][T15487] tipc: Disabling bearer [ 1135.855483][T15508] batman_adv: batadv0: Adding interface: dummy0 [ 1135.857989][T15508] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.866724][T15508] batman_adv: batadv0: Interface activated: dummy0 [ 1135.877629][T15508] batadv0: mtu less than device minimum [ 1135.881832][T15508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1135.886266][T15508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1135.890565][T15508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1135.894921][T15508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1135.898837][T15508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1135.903038][T15508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1135.907100][T15508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1135.911161][T15508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1135.915173][T15508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1136.007374][T15519] ip6erspan0: entered promiscuous mode [ 1136.217946][ T5989] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1137.202108][T15601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.204713][T15601] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.653088][T15628] Invalid ELF header magic: != ELF [ 1138.448830][T15704] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1579'. [ 1138.636301][T10082] libceph: connect (1)[c::]:6789 error -101 [ 1138.648262][T10082] libceph: mon0 (1)[c::]:6789 connect error [ 1138.691885][T10082] libceph: connect (1)[c::]:6789 error -101 [ 1138.694250][T10082] libceph: mon0 (1)[c::]:6789 connect error [ 1138.920928][T10082] libceph: connect (1)[c::]:6789 error -101 [ 1138.923011][T10082] libceph: mon0 (1)[c::]:6789 connect error [ 1138.949603][T10082] libceph: connect (1)[c::]:6789 error -101 [ 1138.951884][T10082] libceph: mon0 (1)[c::]:6789 connect error [ 1139.206429][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1588'. [ 1139.241019][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 1139.428207][T10082] libceph: connect (1)[c::]:6789 error -101 [ 1139.430562][T10082] libceph: mon0 (1)[c::]:6789 connect error [ 1139.435070][T15726] ceph: No mds server is up or the cluster is laggy [ 1139.435289][T15721] ceph: No mds server is up or the cluster is laggy [ 1139.468077][T10082] libceph: connect (1)[c::]:6789 error -101 [ 1139.470536][T10082] libceph: mon0 (1)[c::]:6789 connect error [ 1139.598334][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1597'. [ 1140.349967][ T6016] kernel read not supported for file /vcs (pid: 6016 comm: kworker/3:3) [ 1140.424756][T15840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 1140.676481][T15862] syz.7.1611 uses obsolete (PF_INET,SOCK_PACKET) [ 1141.125472][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1619'. [ 1141.966993][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 1142.176991][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1630'. [ 1142.363576][T14753] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1142.367703][T14753] CPU: 3 UID: 0 PID: 14753 Comm: kworker/u33:3 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1142.367722][T14753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1142.367733][T14753] Workqueue: hci3 hci_rx_work [ 1142.367766][T14753] Call Trace: [ 1142.367771][T14753] [ 1142.367777][T14753] dump_stack_lvl+0x16c/0x1f0 [ 1142.367795][T14753] sysfs_warn_dup+0x7f/0xa0 [ 1142.367812][T14753] sysfs_create_dir_ns+0x24b/0x2b0 [ 1142.367826][T14753] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1142.367840][T14753] ? find_held_lock+0x2b/0x80 [ 1142.367856][T14753] ? do_raw_spin_unlock+0x172/0x230 [ 1142.367877][T14753] kobject_add_internal+0x2c4/0x9b0 [ 1142.367897][T14753] kobject_add+0x16e/0x240 [ 1142.367912][T14753] ? __pfx_kobject_add+0x10/0x10 [ 1142.367929][T14753] ? do_raw_spin_unlock+0x172/0x230 [ 1142.367948][T14753] ? kobject_put+0xab/0x5a0 [ 1142.367967][T14753] device_add+0x288/0x1aa0 [ 1142.367987][T14753] ? __pfx_dev_set_name+0x10/0x10 [ 1142.367999][T14753] ? __pfx_device_add+0x10/0x10 [ 1142.368016][T14753] ? mgmt_send_event_skb+0x2fb/0x460 [ 1142.368033][T14753] hci_conn_add_sysfs+0x17e/0x230 [ 1142.368048][T14753] le_conn_complete_evt+0x1075/0x1d70 [ 1142.368060][T14753] ? preempt_count_sub+0xd0/0x160 [ 1142.368075][T14753] ? find_held_lock+0x2b/0x80 [ 1142.368086][T14753] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1142.368097][T14753] ? hci_event_packet+0x459/0x11c0 [ 1142.368110][T14753] ? __mutex_unlock_slowpath+0x163/0x800 [ 1142.368127][T14753] hci_le_conn_complete_evt+0x23c/0x370 [ 1142.368142][T14753] hci_le_meta_evt+0x357/0x5e0 [ 1142.368156][T14753] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1142.368170][T14753] hci_event_packet+0x685/0x11c0 [ 1142.368181][T14753] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1142.368195][T14753] ? __pfx_hci_event_packet+0x10/0x10 [ 1142.368209][T14753] ? kcov_remote_start+0x3c9/0x6d0 [ 1142.368226][T14753] ? lockdep_hardirqs_on+0x7c/0x110 [ 1142.368243][T14753] hci_rx_work+0x2c5/0x16b0 [ 1142.368257][T14753] ? rcu_is_watching+0x12/0xc0 [ 1142.368278][T14753] process_one_work+0x9cc/0x1b70 [ 1142.368304][T14753] ? __pfx_process_one_work+0x10/0x10 [ 1142.368328][T14753] ? assign_work+0x1a0/0x250 [ 1142.368348][T14753] worker_thread+0x6c8/0xf10 [ 1142.368372][T14753] ? __kthread_parkme+0x19e/0x250 [ 1142.368389][T14753] ? __pfx_worker_thread+0x10/0x10 [ 1142.368409][T14753] kthread+0x3c5/0x780 [ 1142.368427][T14753] ? __pfx_kthread+0x10/0x10 [ 1142.368446][T14753] ? rcu_is_watching+0x12/0xc0 [ 1142.368459][T14753] ? __pfx_kthread+0x10/0x10 [ 1142.368477][T14753] ret_from_fork+0x5d4/0x6f0 [ 1142.368495][T14753] ? __pfx_kthread+0x10/0x10 [ 1142.368511][T14753] ret_from_fork_asm+0x1a/0x30 [ 1142.368535][T14753] [ 1142.462575][T14753] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1142.467599][T14753] Bluetooth: hci3: failed to register connection device [ 1142.848229][T14753] Bluetooth: hci4: command 0x0406 tx timeout [ 1142.906870][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1637'. [ 1143.425691][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1646'. [ 1143.523745][T16056] binder_alloc: 16051: binder_alloc_buf, no vma [ 1143.558006][ T6016] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1143.717925][ T6016] usb 6-1: Using ep0 maxpacket: 32 [ 1143.721339][ T6016] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1143.724458][ T6016] usb 6-1: config 0 has no interface number 0 [ 1143.727439][ T6016] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1143.734040][ T6016] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1143.739530][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.743142][ T6016] usb 6-1: Product: syz [ 1143.745018][ T6016] usb 6-1: Manufacturer: syz [ 1143.746852][ T6016] usb 6-1: SerialNumber: syz [ 1143.750472][ T6016] usb 6-1: config 0 descriptor?? [ 1143.755039][ T6016] f81534 6-1:0.12: required endpoints missing [ 1143.955241][T10082] usb 6-1: USB disconnect, device number 43 [ 1145.066994][T13609] kernel write not supported for file /syz0 (pid: 13609 comm: kworker/3:0) [ 1145.088143][ T6142] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1145.153898][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1678'. [ 1145.249606][ T6142] usb 6-1: Using ep0 maxpacket: 32 [ 1145.258517][ T6142] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1145.261585][ T6142] usb 6-1: config 0 has no interface number 0 [ 1145.264039][ T6142] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1145.269871][ T6142] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1145.273203][ T6142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.276200][ T6142] usb 6-1: Product: syz [ 1145.277692][ T6142] usb 6-1: Manufacturer: syz [ 1145.285379][ T6142] usb 6-1: SerialNumber: syz [ 1145.289832][ T6142] usb 6-1: config 0 descriptor?? [ 1145.291571][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1682'. [ 1145.301929][ T6142] f81534 6-1:0.12: required endpoints missing [ 1145.450744][T16207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1688'. [ 1145.499478][ T6016] usb 6-1: USB disconnect, device number 44 [ 1145.737948][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1694'. [ 1145.768514][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1695'. [ 1145.870544][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1698'. [ 1146.219063][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1707'. [ 1146.238820][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1708'. [ 1146.436403][ T5983] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1146.528956][ T5983] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1146.585865][T16309] fido_id[16309]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1146.621362][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1718'. [ 1146.991590][T16342] bond0: option arp_validate: invalid value (18446744071562067968) [ 1147.558497][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 1147.563586][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 1147.607687][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 1147.610400][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 1147.828081][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 1147.830884][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 1147.871577][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 1147.873764][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 1148.339105][ T6099] libceph: connect (1)[c::]:6789 error -101 [ 1148.341164][ T6099] libceph: mon0 (1)[c::]:6789 connect error [ 1148.422727][T16385] ceph: No mds server is up or the cluster is laggy [ 1148.426568][T16372] ceph: No mds server is up or the cluster is laggy [ 1148.623562][ T6099] libceph: connect (1)[c::]:6789 error -101 [ 1148.626180][ T6099] libceph: mon0 (1)[c::]:6789 connect error [ 1148.678225][T16441] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.749989][T16447] fuse: Bad value for 'fd' [ 1148.825041][T16441] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.949710][T16453] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.160035][T16441] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.318812][T16453] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.320204][ T5989] Bluetooth: hci3: command 0x0406 tx timeout [ 1149.396626][T16441] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.612442][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1741'. [ 1149.635483][T16453] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.737368][T16453] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.813968][T14886] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.864093][T14886] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.867340][T14886] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.880378][T14886] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.972194][T16495] fuse: Bad value for 'fd' [ 1149.988345][T16496] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.163553][T16505] fuse: Bad value for 'fd' [ 1150.204403][T16502] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.295637][T16496] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.314204][T16510] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.338094][T16502] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.435034][T16496] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.472276][T16502] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.495756][ T1246] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.510299][T16510] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.552441][T16496] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.568356][ T1141] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.650958][ T1246] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.677417][T16502] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.768608][ T1246] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.782629][T16510] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.882961][T16510] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.909037][ T1141] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.030420][ T1141] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.034615][ T1141] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.058861][ T1141] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.061905][ T1141] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.064725][ T1141] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.071705][ T1141] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.075017][ T1141] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.039272][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 1152.303980][T16572] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1152.306201][T16572] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1152.309107][T16572] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1152.312054][T16572] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 1152.314700][T16572] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1152.317080][T16572] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1152.319478][T16572] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1152.321823][T16572] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1152.324834][T16572] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1152.327487][T16572] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1152.330530][T16572] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1152.332917][T16572] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1152.335258][T16572] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1152.337582][T16572] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1152.340670][T16572] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1152.760415][T16595] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1152.762854][T16595] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1152.765177][T16595] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1152.767389][T16595] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 1152.775513][T16595] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1152.778606][T16595] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1152.780840][T16595] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1152.783070][T16595] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1152.785166][T16595] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1152.787291][T16595] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1152.795226][T16595] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1152.801872][T16595] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1152.804021][T16595] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1152.806077][T16595] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1152.813886][T16595] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1153.290469][T16624] fuse: Bad value for 'fd' [ 1153.296791][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 1153.477025][T16639] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.553412][T16639] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.651581][T16639] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.734737][T16639] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.028528][T16663] fuse: Bad value for 'fd' [ 1154.222903][ T99] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.250394][T14886] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.255239][T14886] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.274706][T16670] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.444831][T16670] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.515081][ T99] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.527709][T16682] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.641404][T16670] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.679549][T16682] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.892304][T16670] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.234626][T16682] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.364035][T16682] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.582736][T14886] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.585710][T14886] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.711443][ T1141] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.796114][T14886] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.824655][T16727] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.883175][ T1246] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.915368][ T1246] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.924356][T16727] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.945924][ T99] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.002974][T14886] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.006136][T14886] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.010476][T14886] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.044888][T16727] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.094756][ T1246] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.106657][ T1246] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.142902][T16727] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.357406][T16745] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1769'. [ 1158.569035][T16809] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.754669][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1784'. [ 1158.809769][T16809] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.845164][T16845] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1158.847856][T16845] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1158.853560][T16845] vhci_hcd vhci_hcd.0: Device attached [ 1158.905299][T16809] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.995836][T16809] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.015258][ T1141] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.045226][ T99] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.048054][ T99] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.063568][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.089855][T14016] usb 53-1: new low-speed USB device number 2 using vhci_hcd [ 1159.091026][T16867] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1159.094945][T16867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1159.108254][ T6099] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 1159.114851][T16867] vhci_hcd vhci_hcd.0: Device attached [ 1159.203394][T14753] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1159.279301][ T6099] usb 13-1: Using ep0 maxpacket: 16 [ 1159.288071][ T6099] usb 13-1: config 0 has no interfaces? [ 1159.290035][ T6099] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1159.293403][ T6099] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.311316][ T6099] usb 13-1: config 0 descriptor?? [ 1159.347920][T13602] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 1159.358163][ T841] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 1159.511550][ T841] usb 12-1: Using ep0 maxpacket: 16 [ 1159.517349][T16846] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 1159.520226][ T99] vhci_hcd: stop threads [ 1159.520286][ T841] usb 12-1: config 0 has no interfaces? [ 1159.521692][ T99] vhci_hcd: release socket [ 1159.523593][ T841] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1159.525007][ T99] vhci_hcd: disconnect device [ 1159.528274][ T841] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.535457][ T841] usb 12-1: config 0 descriptor?? [ 1159.754859][T16868] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 1159.761580][ T99] vhci_hcd: stop threads [ 1159.763333][ T99] vhci_hcd: release socket [ 1159.766113][ T99] vhci_hcd: disconnect device [ 1159.932466][ T40] audit: type=1804 audit(1754897958.650:102): pid=16910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1786" name="/newroot/93/file0/file0" dev="9p" ino=35913829 res=1 errno=0 [ 1160.002449][T16918] 9pnet_virtio: no channels available for device syz [ 1160.338955][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 1160.554465][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.601950][T14886] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.624634][T14886] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.641130][T14886] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.694147][ T5989] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1160.782777][T16965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1805'. [ 1161.104685][T16988] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1161.106921][T16988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1161.111074][T16988] vhci_hcd vhci_hcd.0: Device attached [ 1161.232054][ T5989] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1161.237020][ T5989] CPU: 3 UID: 0 PID: 5989 Comm: kworker/u33:7 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1161.237044][ T5989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1161.237054][ T5989] Workqueue: hci5 hci_rx_work [ 1161.237075][ T5989] Call Trace: [ 1161.237082][ T5989] [ 1161.237087][ T5989] dump_stack_lvl+0x16c/0x1f0 [ 1161.237107][ T5989] sysfs_warn_dup+0x7f/0xa0 [ 1161.237125][ T5989] sysfs_create_dir_ns+0x24b/0x2b0 [ 1161.237142][ T5989] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1161.237157][ T5989] ? find_held_lock+0x2b/0x80 [ 1161.237173][ T5989] ? do_raw_spin_unlock+0x172/0x230 [ 1161.237194][ T5989] kobject_add_internal+0x2c4/0x9b0 [ 1161.237217][ T5989] kobject_add+0x16e/0x240 [ 1161.237234][ T5989] ? __pfx_kobject_add+0x10/0x10 [ 1161.237253][ T5989] ? do_raw_spin_unlock+0x172/0x230 [ 1161.237273][ T5989] ? kobject_put+0xab/0x5a0 [ 1161.237300][ T5989] device_add+0x288/0x1aa0 [ 1161.237321][ T5989] ? __pfx_dev_set_name+0x10/0x10 [ 1161.237341][ T5989] ? __pfx_device_add+0x10/0x10 [ 1161.237361][ T5989] ? mgmt_send_event_skb+0x2fb/0x460 [ 1161.237379][ T5989] hci_conn_add_sysfs+0x17e/0x230 [ 1161.237396][ T5989] le_conn_complete_evt+0x1075/0x1d70 [ 1161.237411][ T5989] ? preempt_count_sub+0xd0/0x160 [ 1161.237429][ T5989] ? find_held_lock+0x2b/0x80 [ 1161.237442][ T5989] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1161.237456][ T5989] ? hci_event_packet+0x459/0x11c0 [ 1161.237471][ T5989] ? __mutex_unlock_slowpath+0x163/0x800 [ 1161.237490][ T5989] hci_le_conn_complete_evt+0x23c/0x370 [ 1161.237507][ T5989] hci_le_meta_evt+0x357/0x5e0 [ 1161.237521][ T5989] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1161.237536][ T5989] hci_event_packet+0x685/0x11c0 [ 1161.237549][ T5989] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1161.237565][ T5989] ? __pfx_hci_event_packet+0x10/0x10 [ 1161.237579][ T5989] ? kcov_remote_start+0x3c9/0x6d0 [ 1161.237598][ T5989] ? lockdep_hardirqs_on+0x7c/0x110 [ 1161.237617][ T5989] hci_rx_work+0x2c5/0x16b0 [ 1161.237632][ T5989] ? rcu_is_watching+0x12/0xc0 [ 1161.237648][ T5989] process_one_work+0x9cc/0x1b70 [ 1161.237678][ T5989] ? __pfx_process_one_work+0x10/0x10 [ 1161.237704][ T5989] ? assign_work+0x1a0/0x250 [ 1161.237724][ T5989] worker_thread+0x6c8/0xf10 [ 1161.237773][ T5989] ? __kthread_parkme+0x19e/0x250 [ 1161.237793][ T5989] ? __pfx_worker_thread+0x10/0x10 [ 1161.237814][ T5989] kthread+0x3c5/0x780 [ 1161.237835][ T5989] ? __pfx_kthread+0x10/0x10 [ 1161.237855][ T5989] ? rcu_is_watching+0x12/0xc0 [ 1161.237869][ T5989] ? __pfx_kthread+0x10/0x10 [ 1161.237889][ T5989] ret_from_fork+0x5d4/0x6f0 [ 1161.237935][ T5989] ? __pfx_kthread+0x10/0x10 [ 1161.237957][ T5989] ret_from_fork_asm+0x1a/0x30 [ 1161.237983][ T5989] [ 1161.334538][ T5989] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1161.341438][ T5989] Bluetooth: hci5: failed to register connection device [ 1161.344661][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'. [ 1161.358086][ T9] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 1161.388012][T16730] usb 49-1: new low-speed USB device number 5 using vhci_hcd [ 1161.508291][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 1161.512991][ T9] usb 11-1: config 0 has no interfaces? [ 1161.515894][ T9] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1161.522833][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.528898][ T9] usb 11-1: config 0 descriptor?? [ 1161.735917][T16989] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 4 [ 1161.739226][ T1141] vhci_hcd: stop threads [ 1161.740922][ T1141] vhci_hcd: release socket [ 1161.743537][ T1141] vhci_hcd: disconnect device [ 1161.892190][T15155] usb 13-1: USB disconnect, device number 2 [ 1162.043199][ T40] audit: type=1804 audit(1754897960.740:103): pid=17034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1812" name="/newroot/105/file0/file0" dev="9p" ino=35913829 res=1 errno=0 [ 1162.253117][T17052] fuse: Bad value for 'fd' [ 1162.260111][ T7344] usb 12-1: USB disconnect, device number 3 [ 1162.382249][T17064] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.388826][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 1162.453089][ T5989] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1162.509738][T17064] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.574870][T17074] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.664403][T17064] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.764522][T17074] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.839951][T17064] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.885528][T17074] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.918170][T17097] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1162.920345][T17097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1162.923001][T17097] vhci_hcd vhci_hcd.0: Device attached [ 1163.002188][T17074] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.061748][ T99] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.084328][ T1246] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.105212][ T99] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.125618][ T99] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.168280][ T7051] usb 39-1: new low-speed USB device number 34 using vhci_hcd [ 1163.171503][ T6029] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1163.241814][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.264506][ T99] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.300862][ T1246] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.325553][ T1246] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.328513][ T6029] usb 6-1: Using ep0 maxpacket: 16 [ 1163.332909][ T6029] usb 6-1: config 0 has no interfaces? [ 1163.334687][ T6029] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1163.337512][ T6029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.348957][ T6029] usb 6-1: config 0 descriptor?? [ 1163.564567][T17098] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 34 [ 1163.570175][ T1246] vhci_hcd: stop threads [ 1163.571586][ T1246] vhci_hcd: release socket [ 1163.573163][ T1246] vhci_hcd: disconnect device [ 1163.778049][T17129] 9pnet_virtio: no channels available for device syz [ 1164.159541][ T7344] usb 11-1: USB disconnect, device number 6 [ 1164.187989][T14016] vhci_hcd: vhci_device speed not set [ 1164.237190][T17147] binder: BINDER_SET_CONTEXT_MGR already set [ 1164.240941][T17147] binder: 17146:17147 ioctl 4018620d 800002c0 returned -16 [ 1164.244033][T17147] binder: 17146:17147 ioctl c0306201 80000240 returned -11 [ 1164.438293][T13602] vhci_hcd: vhci_device speed not set [ 1164.504363][T17157] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1833'. [ 1164.520371][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1834'. [ 1164.737224][T14753] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1164.742391][T14753] CPU: 1 UID: 0 PID: 14753 Comm: kworker/u33:3 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1164.742411][T14753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1164.742420][T14753] Workqueue: hci4 hci_rx_work [ 1164.742438][T14753] Call Trace: [ 1164.742442][T14753] [ 1164.742448][T14753] dump_stack_lvl+0x16c/0x1f0 [ 1164.742465][T14753] sysfs_warn_dup+0x7f/0xa0 [ 1164.742484][T14753] sysfs_create_dir_ns+0x24b/0x2b0 [ 1164.742503][T14753] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1164.742521][T14753] ? find_held_lock+0x2b/0x80 [ 1164.742545][T14753] ? do_raw_spin_unlock+0x172/0x230 [ 1164.742576][T14753] kobject_add_internal+0x2c4/0x9b0 [ 1164.742606][T14753] kobject_add+0x16e/0x240 [ 1164.742622][T14753] ? __pfx_kobject_add+0x10/0x10 [ 1164.742637][T14753] ? do_raw_spin_unlock+0x172/0x230 [ 1164.742654][T14753] ? kobject_put+0xab/0x5a0 [ 1164.742672][T14753] device_add+0x288/0x1aa0 [ 1164.742690][T14753] ? __pfx_dev_set_name+0x10/0x10 [ 1164.742701][T14753] ? __pfx_device_add+0x10/0x10 [ 1164.742718][T14753] ? mgmt_send_event_skb+0x2fb/0x460 [ 1164.742733][T14753] hci_conn_add_sysfs+0x17e/0x230 [ 1164.742747][T14753] le_conn_complete_evt+0x1075/0x1d70 [ 1164.742759][T14753] ? preempt_count_sub+0xd0/0x160 [ 1164.742772][T14753] ? find_held_lock+0x2b/0x80 [ 1164.742782][T14753] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1164.742792][T14753] ? hci_event_packet+0x459/0x11c0 [ 1164.742805][T14753] ? __mutex_unlock_slowpath+0x163/0x800 [ 1164.742821][T14753] hci_le_conn_complete_evt+0x23c/0x370 [ 1164.742835][T14753] hci_le_meta_evt+0x357/0x5e0 [ 1164.742848][T14753] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1164.742860][T14753] hci_event_packet+0x685/0x11c0 [ 1164.742872][T14753] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1164.742885][T14753] ? __pfx_hci_event_packet+0x10/0x10 [ 1164.742897][T14753] ? kcov_remote_start+0x3c9/0x6d0 [ 1164.742913][T14753] ? lockdep_hardirqs_on+0x7c/0x110 [ 1164.742929][T14753] hci_rx_work+0x2c5/0x16b0 [ 1164.742942][T14753] ? rcu_is_watching+0x12/0xc0 [ 1164.742955][T14753] process_one_work+0x9cc/0x1b70 [ 1164.742978][T14753] ? __pfx_process_one_work+0x10/0x10 [ 1164.742998][T14753] ? assign_work+0x1a0/0x250 [ 1164.743015][T14753] worker_thread+0x6c8/0xf10 [ 1164.743036][T14753] ? __kthread_parkme+0x19e/0x250 [ 1164.743050][T14753] ? __pfx_worker_thread+0x10/0x10 [ 1164.743066][T14753] kthread+0x3c5/0x780 [ 1164.743082][T14753] ? __pfx_kthread+0x10/0x10 [ 1164.743098][T14753] ? rcu_is_watching+0x12/0xc0 [ 1164.743116][T14753] ? __pfx_kthread+0x10/0x10 [ 1164.743133][T14753] ret_from_fork+0x5d4/0x6f0 [ 1164.743152][T14753] ? __pfx_kthread+0x10/0x10 [ 1164.743169][T14753] ret_from_fork_asm+0x1a/0x30 [ 1164.743191][T14753] [ 1164.743206][T14753] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1164.806292][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1843'. [ 1164.807870][T14753] Bluetooth: hci4: failed to register connection device [ 1165.742426][T17242] fuse: Bad value for 'fd' [ 1165.766721][T14753] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1165.844095][T17256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1852'. [ 1165.905027][T17257] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.937002][T17263] fuse: Bad value for 'fd' [ 1165.955396][T14016] usb 6-1: USB disconnect, device number 45 [ 1166.064168][T17257] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.125830][T17254] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1851'. [ 1166.151516][T17270] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.242938][T17257] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.355682][T17270] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.438930][T17257] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.496857][T17270] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.929902][T16730] vhci_hcd: vhci_device speed not set [ 1166.969388][T17270] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.174471][ T1141] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.191777][ T1141] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.276047][ T1150] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.279528][ T1150] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.544295][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1861'. [ 1167.575934][ T1246] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.579865][ T1246] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.586501][ T1246] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.618745][T17257] BUG: unable to handle page fault for address: ffff8880976c6020 [ 1167.621953][T17257] #PF: supervisor write access in kernel mode [ 1167.625108][T17257] #PF: error_code(0x0002) - not-present page [ 1167.630607][T17257] PGD 1b401067 P4D 1b401067 PUD 0 [ 1167.632644][T17257] Oops: Oops: 0002 [#1] SMP KASAN NOPTI [ 1167.635063][T17257] CPU: 2 UID: 0 PID: 17257 Comm: syz.8.1847 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1167.639547][T17257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1167.644313][T17257] RIP: 0010:nsim_queue_free+0xba/0x120 [ 1167.647254][T17257] Code: 07 77 6c 4a 8d 3c ed 60 7e f5 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 46 4a 03 1c ed 60 7e f5 8d <4c> 01 63 20 be 00 02 00 00 48 8d 3d 00 00 00 00 e8 a1 fc 53 fa 48 [ 1167.655408][T17257] RSP: 0018:ffffc9000dfaf150 EFLAGS: 00010286 [ 1167.658407][T17257] RAX: dffffc0000000000 RBX: ffff8880976c6000 RCX: 00000000000082bf [ 1167.662339][T17257] RDX: 1ffffffff1beafce RSI: ffffffff8c162800 RDI: ffffffff8df57e70 [ 1167.665681][T17257] RBP: ffff88805f19a000 R08: 0000000000000000 R09: 0000000000000000 [ 1167.669545][T17257] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1167.672853][T17257] R13: 0000000000000002 R14: ffff8880637e80c0 R15: ffffed100ae2b88e [ 1167.676047][T17257] FS: 0000000000000000(0000) GS:ffff8880976c6000(0063) knlGS:00000000f5444b40 [ 1167.679754][T17257] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1167.682510][T17257] CR2: ffff8880976c6020 CR3: 0000000055f35000 CR4: 0000000000352ef0 [ 1167.687020][T17257] Call Trace: [ 1167.688470][T17257] [ 1167.690103][T17257] nsim_create+0xd0a/0x1260 [ 1167.692069][T17257] __nsim_dev_port_add+0x435/0x7d0 [ 1167.694239][T17257] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 1167.696653][T17257] ? nsim_dev_hwstats_init+0xf5/0x4f0 [ 1167.699029][T17257] nsim_dev_reload_up+0x5b8/0x860 [ 1167.700653][T17257] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 1167.702850][T17257] ? devlink_params_driverinit_load_new+0x231/0x2c0 [ 1167.707498][T17257] ? nsim_dev_reload_destroy+0x1a9/0x4d0 [ 1167.710574][T17257] devlink_reload+0x322/0x7c0 [ 1167.712698][T17257] ? __pfx_devlink_reload+0x10/0x10 [ 1167.714899][T17257] devlink_nl_reload_doit+0xe31/0x1410 [ 1167.717120][T17257] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1167.719989][T17257] ? __pfx_devlink_get_from_attrs_lock+0x10/0x10 [ 1167.722705][T17257] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1167.725722][T17257] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1167.728011][T17257] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1167.731768][T17257] ? rcu_is_watching+0x12/0xc0 [ 1167.734640][T17257] ? bpf_lsm_capable+0x9/0x10 [ 1167.736845][T17257] ? security_capable+0x7e/0x260 [ 1167.739400][T17257] genl_rcv_msg+0x55c/0x800 [ 1167.741464][T17257] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1167.743335][T17257] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 1167.746074][T17257] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1167.748526][T17257] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 1167.750793][T17257] netlink_rcv_skb+0x158/0x420 [ 1167.752449][T17257] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1167.754789][T17257] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1167.757159][T17257] ? netlink_deliver_tap+0x1ae/0xd30 [ 1167.759591][T17257] genl_rcv+0x28/0x40 [ 1167.761353][T17257] netlink_unicast+0x5a7/0x870 [ 1167.763447][T17257] ? __pfx_netlink_unicast+0x10/0x10 [ 1167.765697][T17257] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1167.768172][T17257] netlink_sendmsg+0x8d1/0xdd0 [ 1167.770493][T17257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.773192][T17257] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1167.775667][T17257] ____sys_sendmsg+0xa95/0xc70 [ 1167.777568][T17257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1167.779844][T17257] ? get_compat_msghdr+0x11a/0x170 [ 1167.782026][T17257] ? __pfx_futex_wake_mark+0x10/0x10 [ 1167.784654][T17257] ___sys_sendmsg+0x134/0x1d0 [ 1167.787386][T17257] ? __pfx____sys_sendmsg+0x10/0x10 [ 1167.790279][T17257] ? find_held_lock+0x2b/0x80 [ 1167.792150][T17257] __sys_sendmsg+0x16d/0x220 [ 1167.793980][T17257] ? __pfx___sys_sendmsg+0x10/0x10 [ 1167.796175][T17257] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 1167.798368][T17257] ? rcu_is_watching+0x12/0xc0 [ 1167.800415][T17257] __do_fast_syscall_32+0x7c/0x3a0 [ 1167.802474][T17257] do_fast_syscall_32+0x32/0x80 [ 1167.804372][T17257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1167.807925][T17257] RIP: 0023:0xf7f68579 [ 1167.810048][T17257] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1167.818605][T17257] RSP: 002b:00000000f544455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1167.821959][T17257] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 1167.825702][T17257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1167.829716][T17257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1167.833114][T17257] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1167.836149][T17257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1167.839266][T17257] [ 1167.840447][T17257] Modules linked in: [ 1167.841902][T17257] CR2: ffff8880976c6020 [ 1167.843587][T17257] ---[ end trace 0000000000000000 ]--- [ 1167.845669][T17257] RIP: 0010:nsim_queue_free+0xba/0x120 [ 1167.847624][T17257] Code: 07 77 6c 4a 8d 3c ed 60 7e f5 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 46 4a 03 1c ed 60 7e f5 8d <4c> 01 63 20 be 00 02 00 00 48 8d 3d 00 00 00 00 e8 a1 fc 53 fa 48 [ 1167.855915][T17257] RSP: 0018:ffffc9000dfaf150 EFLAGS: 00010286 [ 1167.858836][T17257] RAX: dffffc0000000000 RBX: ffff8880976c6000 RCX: 00000000000082bf [ 1167.862939][T17257] RDX: 1ffffffff1beafce RSI: ffffffff8c162800 RDI: ffffffff8df57e70 [ 1167.866687][T17257] RBP: ffff88805f19a000 R08: 0000000000000000 R09: 0000000000000000 [ 1167.869769][T17257] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1167.872960][T17257] R13: 0000000000000002 R14: ffff8880637e80c0 R15: ffffed100ae2b88e [ 1167.875960][T17257] FS: 0000000000000000(0000) GS:ffff8880976c6000(0063) knlGS:00000000f5444b40 [ 1167.878870][T17257] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1167.882016][T17257] CR2: ffff8880976c6020 CR3: 0000000055f35000 CR4: 0000000000352ef0 [ 1167.886049][T17257] Kernel panic - not syncing: Fatal exception in interrupt [ 1167.890490][T17257] Kernel Offset: disabled [ 1167.892221][T17257] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:39:26 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff9b00e4e0 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff9b00e4e4 RBP=1ffff92001c39f10 RSP=ffffc9000e1cf878 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90ab6b97 R11=ffffffff9b00e4e0 R12=dffffc0000000000 R13=ffff8880516c1840 R14=ffffffff9b00e4d8 R15=1ffff92001c39f2a RIP=ffffffff8197abc1 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbb388f5740 ffffffff 00c00000 GS =0000 ffff8880974c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f725f6ab CR3=00000000135fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000cc160081 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fafe2c19b0 00007fbb38b18310 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb38b17da0 00007fbb38ad80c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fafe2c2440 000055fafe2c1ea0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fafe59e9e0 000055fafe770940 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fafe501cd0 000055fafe4fd3b0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a6425006469 702e73257325002f 6e75722f7261762f 0036353261687300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a410000414c 550b56005600000a 4b50570a5744530a 00131017444d5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000001 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003e800002710 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 650a206162006565 0a5f61615f6d6561 2032332064203120 33203400650a3320 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000002bf8dbc RBX=0000000000000001 RCX=ffffffff8b903bf9 RDX=ffffed1005666656 RSI=ffffffff8c162800 RDI=ffffffff8190cd41 RBP=ffffed1003bdf488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=ffffffff9b003cf8 R12=0000000000000001 R13=ffff88801defa440 R14=ffffffff90ab6b90 R15=0000000000000000 RIP=ffffffff8b90275f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080010000 CR3=0000000062e79000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85613555 RDI=ffffffff9b0f6600 RBP=ffffffff9b0f65c0 RSP=ffffc9000dfae9e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000072 R14=ffffffff9b0f65c0 R15=ffffffff856134f0 RIP=ffffffff8561357f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffff8880976c6020 CR3=0000000055f35000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb38ac9f90 00007fbb38ac9f90 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fafe2bc040 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312e3435322e3936 312038687465205d 505241204650425b 203a646370636864 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 37322e39312e3435 322e393631203868 7465205d50524120 4650425b203a6463 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000001 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003e800002710 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 650a206162006565 0a5f61615f6d6561 2032332064203120 33203400650a3320 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000003a8b7c RBX=0000000000000003 RCX=ffffffff8b903bf9 RDX=ffffed10056a6656 RSI=ffffffff8c162800 RDI=ffffffff8190cd41 RBP=ffffed1003867000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c338000 R14=ffffffff90ab6b90 R15=0000000000000000 RIP=ffffffff8b90275f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fafe2bcf04 CR3=000000004fe36000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000cc160081 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002f0000439f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0adaebc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fafe59e9e0 000055fafe770940 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fafe501cd0 000055fafe4fd3b0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a6425006469 702e73257325002f 6e75722f7261762f 0036353261687300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a410000414c 550b56005600000a 4b50570a5744530a 00131017444d5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000001 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003e800002710 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 650a206162006565 0a5f61615f6d6561 2032332064203120 33203400650a3320 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000