last executing test programs: 6m12.245226044s ago: executing program 3 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xffffffff, 0x1000}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) 6m2.867270832s ago: executing program 3 (id=355): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000280)=ANY=[], 0xfce7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 6m1.902707938s ago: executing program 3 (id=357): close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}, {0x0, [0x2e, 0x0, 0x2e, 0x3e]}}, &(0x7f0000000600)=""/136, 0x32, 0x88, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, &(0x7f0000000280)=""/198, 0xff71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000380)) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240200000000000000000000000000000a00000000000000040004000800010001000000"], 0x24}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) 5m57.417467019s ago: executing program 3 (id=362): unshare(0x8040480) r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x24020400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) setsockopt$RDS_RECVERR(r0, 0x114, 0x3f, &(0x7f0000000040)=0xfffffffd, 0x4) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) listns(&(0x7f0000000080)={0x20, 0x0, 0x7, 0x40000000, 0x0, 0x6}, &(0x7f00000000c0), 0x0, 0x0) 5m54.866986379s ago: executing program 3 (id=367): pselect6(0x40, &(0x7f0000000100)={0x7000000, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) 5m53.235297969s ago: executing program 3 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffff9, 0xd49d, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x101, 0x100000002], 0x80a0000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m48.331980832s ago: executing program 2 (id=377): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x4008, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) utime(&(0x7f0000000000)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x2000, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) 5m46.350522076s ago: executing program 2 (id=380): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10c, 0x0, &(0x7f0000000ac0)=[@acquire, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/133, 0x85, 0x20000000001, 0x8}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@fd, @flat=@handle={0x73682a85, 0x100, 0x1}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x8, 0x2, 0x3}, @fda={0x66646185, 0x8, 0x0, 0x2e178b94}}, &(0x7f0000000780)={0x0, 0x18, 0x38}}}, @release, @dead_binder_done], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @flat=@weak_handle={0x77682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000a00)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x4000855) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080001000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) unshare(0x22020600) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) 5m43.019972161s ago: executing program 4 (id=385): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd, 0xc}, {0x5, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x4, 0x7, 0x45, 0x10, 0xff, 0x1d, 0x9, 0x8, 0xc, 0x5, 0xf, 0xd, 0x2, 0x6, 0xc, 0xd], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x40, 0x8, 0x5, 0x8, 0x2a, 0x9, 0x134e, 0xfffc, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x3, 0x3, 0x48aa, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x39000, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 5m40.907327217s ago: executing program 2 (id=387): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x8010, r0, 0x79000) r1 = signalfd(r0, &(0x7f0000000040)={[0x396f]}, 0x8) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x16, 0x1b, 0x12c, &(0x7f0000000100)}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540), 0x604900, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000580)=0x3) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0), 0x208000, 0x0) r4 = getuid() sendmsg$nl_xfrm(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@getpolicy={0x60, 0x15, 0xbd9d6146a4b9a18, 0x70bd28, 0x25dfdbfe, {{@in=@local, @in=@local, 0x4e22, 0x5, 0x4e20, 0x95, 0xa, 0x80, 0x0, 0x87, 0x0, r4}, 0x6e6bbd, 0x1}, [@tfcpad={0x8, 0x16, 0x3}, @extra_flags={0x8, 0x18, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000740)={0x0, 0x5, 0xfff}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000780)={0xf, 0x2, 0x7fff, 0x7, 0xd, "a3f580a6fd036385"}) connect$vsock_stream(r1, &(0x7f00000007c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x9000) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000800)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000840)=0xe) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000880), 0x3, 0x845c0) ioctl$FE_READ_UNCORRECTED_BLOCKS(r7, 0x80046f49, &(0x7f00000008c0)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs2/binder-control\x00', 0x2, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x24000, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000980)={r9, 0x40, 0x200, 0x4}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r10, 0x1, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x4) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000b00)={0x2}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x5}}, './file0\x00'}) 5m40.82562059s ago: executing program 4 (id=388): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) syz_ublk_setup_io_uring(0x47bf, &(0x7f0000000080)={0x0, 0xcba0, 0x1, 0x2, 0x2d7}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)) syz_io_uring_setup(0xab4, &(0x7f0000000340)={0x0, 0x56fe, 0x4, 0x0, 0x3a0}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 5m38.094108551s ago: executing program 2 (id=390): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x4008, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) utime(&(0x7f0000000000)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x2000, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) 5m38.043781889s ago: executing program 32 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffff9, 0xd49d, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x101, 0x100000002], 0x80a0000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m36.933691828s ago: executing program 4 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) syz_io_uring_setup(0x3917, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$l2tp(0x2, 0x2, 0x73) r7 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x80, 0x40) read$FUSE(r7, &(0x7f0000000400)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) 5m35.170381221s ago: executing program 2 (id=395): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xc6, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x4040081) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 5m29.26289295s ago: executing program 4 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a70002", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x80000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="2400000007060108000000000000000007000006050001000700000008000640000900dcfa7c9c9e1e45d60ba4e3ad67424c96c4af364899b01bb8745259d4bdba899ca22492c28c8d14903236c9b17623f9b53e0be3a6b970b5ee06000000000000000a41df3d6ba55c6131985e087df7cf8ef8ef342d7ce829d88b4c26d0d298001360aead6d810bd7e4b199dfb4082677a7c66e56547c51107ea2c35e988bc1c694e1158477d08442581e5fe789e4ee0aedc9fbe89db09651c7624d1b9c5295b5c65877"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000100)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000080)={[0x180000000]}, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x58, r4, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}]}]}]}, 0x58}}, 0x20004800) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000f00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000001240)={0xd84, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x354, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x8}, {0x4, 0x5}, {0x4, 0x2}, {0x6, 0xa}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x3, 0x7}, {0x3, 0x4}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0x1}, {0x4}, {0x4, 0x5}, {0x3, 0x1}, {0x7, 0x3}, {0x6, 0x3}, {0x1, 0x1}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0x3}, {0x6, 0x1}, {0x5}, {0x0, 0x5}, {0x6, 0xa}, {0x7, 0x6}, {}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0x9}, {0x3, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x8}, {0x2, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x4, 0x8}, {0x3, 0x7}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x5}, {0x1}, {0x5, 0xa}, {0x4, 0x1}, {0x6, 0x8}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x6}, {}, {0x5, 0x2}, {0x7, 0x2}, {0x3}, {0x3, 0x8}, {0x0, 0xa}, {0x6, 0x2}, {0x3}, {0x1, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x6, 0x8}, {0x3, 0x8}, {0x1, 0x4}, {0x3, 0x8}, {0x2, 0x6}, {0x4, 0x8}, {0x4, 0x6}]}]}, @NL80211_BAND_60GHZ={0x100, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0xfff3, 0x7, 0x2, 0x8b8f, 0x4, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x3, 0x8, 0x1ff, 0x1, 0xe, 0x80]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x4, 0x7}, {0x6, 0x9}, {0x5, 0x6}, {0x3, 0x7}, {0x4}, {0x1, 0x8}, {0x6}, {0x4, 0x4}, {0x1, 0x7}, {0x2}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0x7}, {0x2}, {0x7, 0x7}, {0x0, 0x6}, {0x2, 0x9}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x1}, {0x7, 0x6}, {0x2, 0x4}, {0x7, 0x1}, {0x4, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x6, 0x5}, {0x7}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0x2}, {0x7}, {0x2, 0x7}, {0x4, 0x5}, {0x5, 0x6}, {0x5, 0x5}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x6}, {}, {0x6, 0x3}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x8}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x5, 0x6}, {0x7}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x4}, {0x6, 0x4}, {0x4, 0x1}, {0x7, 0x6}, {0x2, 0x8}, {0x1}, {0x1, 0xa}, {0x4, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x8}, {}, {0x0, 0xa}, {0x3, 0x5}, {0x3, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x1}, {0x7, 0x9}, {0x3, 0x8}, {0x3}, {0x0, 0x3}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0x6}, {0x4, 0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x4, 0x9}, {0x6, 0x9}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0x4}, {}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x7}, {0x7, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x6}, {0x6, 0x8}, {0x7, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x3, 0x5}, {0x1, 0x1}, {0x0, 0x1f}, {0x0, 0xa}, {0x5, 0x4}, {0x6, 0x7}, {0x6, 0x3}, {}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x7}, {0x6}, {0x2, 0x3}, {0x3, 0x5}, {0x3, 0x4}, {0x1, 0x2}, {0x4, 0x9}, {0x6}, {0x0, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x1}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0xa}, {0x3}, {0x0, 0x2}, {0x3, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x2}, {0x4, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0x2, 0x4}, {0x7, 0x6}, {0x5, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x8}, {0x0, 0x1}, {}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x3}, {}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0x9}, {0x1, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x0, 0x3}, {0x2, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x6}, {0x2, 0x4}, {0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0xa}, {0x3, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x1}, {0x5, 0x4}, {0x5, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x7, 0x6}, {0x7, 0x9}, {0x1, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0xa}, {0x5, 0x4}, {0x2, 0x3}, {0x2, 0x3}, {0x3, 0x6}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x4}, {0x7}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0x2}, {0x6, 0x9}, {0x2}, {0x3, 0x9}, {0x3, 0x9}, {0x3, 0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x6}, {0x3, 0x7}, {0x4, 0x1}, {0x7, 0x4}, {0x2, 0x1}, {0x2, 0x8}, {0x7, 0x9}, {0x4, 0x4}, {0x0, 0x2}, {0x4, 0x4}, {0x3, 0xa}, {0x7, 0x3}, {0x3, 0x6}, {0x2, 0x3}, {0x3, 0x7}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x4, 0x5}, {0x4}, {0x7, 0x3}, {0x4, 0x8}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x0, 0x1b, 0x3, 0x48, 0x48, 0x48, 0x60, 0xb, 0x2, 0x9, 0x16, 0x4, 0x35, 0x24, 0x1b, 0x9, 0x9, 0x4, 0x18, 0x3, 0x1b, 0x6, 0x6c, 0xb, 0x9, 0x36, 0x16, 0x9, 0x6, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff59, 0xd870, 0x4, 0x21, 0x81, 0x2, 0x8, 0xff2b]}}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x3, 0x36, 0x6, 0x60, 0x6c, 0x4, 0xc, 0xb, 0x60, 0x12, 0x0, 0x2, 0x6c, 0x6c, 0x9, 0xc, 0xc, 0x48, 0x1b, 0x2, 0x18, 0x12]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x5}, {0x3, 0x5}, {0x7, 0xa}, {0x3, 0x5}, {0x2, 0x3}, {0x6, 0x4}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x2}, {0x2, 0x14}, {0x3, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x4, 0x4}, {0x4}, {0x1, 0x9}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x5}, {0x2, 0x1}, {0x4, 0x6}, {0x4, 0x8}, {0x2, 0x9}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0xa}, {0x6, 0x1}, {0x7}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x8}, {0x4, 0xa}, {0x4, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x1}, {0x7}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x7}, {0x3, 0x2}, {0x4, 0x7}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0x7}, {0x2, 0x1}, {0x0, 0xa}, {0x6, 0xa}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x0, 0x1, 0x3, 0x67, 0x3d, 0xc, 0xc04f]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x2, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x2}, {0x6}, {0x1, 0x8}, {0x5, 0x7}, {0x2}, {0x6, 0x6}, {0x6, 0x6}, {0x4, 0x6}, {0x4}, {0x0, 0x5}, {0x3, 0x7}, {0x0, 0x4}, {0x4, 0x8}, {0x4, 0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x2, 0x4}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x8}, {0x6, 0x8}, {0x6, 0x8}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x2}, {0x1}, {0x1, 0x3}, {0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x7, 0x1}, {0x7}, {0x3, 0x4}, {0x3, 0x8}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0x7}, {0x3, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {0x5, 0x2}, {0x7, 0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x8}, {0x6, 0x8}, {0x5, 0x9}, {0x7, 0x2}, {0x3, 0x7}, {0x1, 0x1}, {0x2, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x100, 0x9, 0x4, 0x9, 0x4, 0x80, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x14, 0x36, 0x9, 0x1, 0x18, 0x5, 0x5, 0x24, 0x5, 0x3, 0x48, 0x30, 0x9, 0x0, 0x4, 0x3, 0x3, 0x4, 0x12, 0x6, 0x16, 0x36, 0x24, 0x1b, 0xc, 0x16, 0x3, 0xc, 0x48, 0x30, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x5, 0x1000, 0x8000, 0x9, 0xa, 0x7a, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f7, 0x3, 0x1, 0x8, 0x8, 0x7, 0x8, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x4, 0x0, 0x4, 0x8abc, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x44a, 0x3, 0xff3a, 0x7, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x6, 0x8, 0x3, 0x0, 0x5, 0x200]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x8, 0xfffb, 0x4, 0x5, 0x99]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x18, 0x48, 0x6c, 0x3fa2f6655d06070e, 0x18, 0x30, 0x9, 0x5, 0x5, 0xb, 0x9, 0x6c, 0x9, 0x4, 0x24, 0x12, 0x24, 0xb, 0x60, 0x5, 0xb, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xb7, 0x9, 0x0, 0x9, 0xf, 0x80, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x12, 0x36, 0xb, 0x2, 0x0, 0x4, 0x9, 0x16, 0x1, 0x4, 0x12, 0x1, 0x30, 0x30, 0x60, 0x9, 0x16, 0x2, 0x18]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x9}, {0x1, 0x6}, {0x5, 0x4}, {0x5, 0x2}, {0x2, 0xa}, {0x4, 0x2}, {0x0, 0xa}, {0x3, 0x9}, {0x1, 0x7}, {0x2, 0x9}, {0x0, 0xa}, {0x7}, {0x7, 0x2}, {0x7, 0x6}, {0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x6, 0x6}, {0x7, 0x8}, {0x4, 0x4}, {0x3, 0x4}, {0x0, 0x6}, {0x4, 0x3}, {0x6, 0x7}, {0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x4}, {0x6, 0x1}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x4}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0x6}, {0x3, 0x9}, {0x4, 0x5}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x1}, {0x6, 0x1}, {0x1, 0x5}, {0x5}, {0x2, 0x6}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x8}, {0x2, 0x8}, {0x5, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0x7}, {0x7, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x6, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x6}, {0x2, 0x2}, {0x1, 0x8}, {0x7, 0xa}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x15}, {0x6, 0x2}, {0x5}, {0x2, 0x7}, {0x2}, {}, {0x1, 0xa}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x6}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x3}, {0x0, 0x9}, {0x7, 0x3}, {0x5, 0x1}, {0x5, 0x4}, {0x0, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0xa}, {0x5, 0x3}, {0x2, 0x5}, {0x6, 0x5}, {0x7, 0x9}, {0x3, 0x4}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x3, 0x8}, {0x7}, {0x4, 0x8}, {0x3, 0x9}, {0x3, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0xf99, 0x7, 0x0, 0x5, 0xfff6, 0xe5]}}]}]}, @NL80211_ATTR_TX_RATES={0x3a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x6, 0xc, 0x60, 0x24, 0x3, 0x30, 0x48, 0x24, 0x2, 0x16, 0x18, 0x2, 0x0, 0x48, 0x12, 0x3, 0x60, 0x12, 0xb, 0xd5c45326ed07f3c8, 0x37, 0x16, 0x9, 0x1b, 0x60, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0x5}, {0x1}, {0x0, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x6, 0x7, 0x8, 0x5, 0x8, 0x7, 0x4]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x7}, {0x2, 0xa}, {0x6}, {0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x2, 0x4}, {0x6, 0x7}, {0x5, 0x6}, {0x2, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x60, 0x2, 0x5, 0x30, 0xb, 0x1b, 0xc, 0x48, 0x48, 0x1b, 0x6, 0x5, 0x12, 0x1b]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x1, 0xa}, {0x7, 0x8}, {0x3, 0x5}, {0x2, 0x8}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x2}, {}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x7}, {0x6, 0xa}, {0x1, 0x9}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x5}, {0x2, 0x1}, {0x3, 0x5}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0x4}, {0x4, 0x4}, {0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x6}, {0x5, 0x9}, {0x4, 0x8}, {0x2, 0xa}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0xa}, {0x1}, {0x0, 0xa}, {0x2, 0x9}, {0x5, 0x6}, {0x5, 0x3}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0x8}]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x401, 0x8, 0xc0b8, 0x9, 0xd39, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf44c, 0x9c32, 0x9bb, 0x3e9, 0x1000, 0x8001, 0x1, 0xbd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x1b, 0x48, 0x36, 0x10, 0x5, 0x36, 0x2, 0x72, 0xb, 0x3, 0x9, 0x17, 0xc, 0xc, 0x30, 0xc, 0x3, 0x60, 0x48, 0x60, 0x60, 0x4, 0x5, 0x50, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8001, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x5}, {0x7, 0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x3, 0x4}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x7}, {0x1, 0x6}, {0x4, 0x6}, {0x5, 0x3}, {0x5, 0x9}, {0x7, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0xa}, {0x7, 0x5}, {0x3}, {0x5, 0x2}, {0x4, 0x8}, {0x3, 0x8}, {0x7, 0x9}, {0x7, 0x6}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x8}, {0x6, 0xa}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0x7}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x2, 0x6}, {0x2, 0x2}, {0x5}, {0x5, 0x4}, {}, {0x4, 0x7}, {0x4, 0x5}, {0x3, 0x9}, {0x2, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x5, 0x3}, {0x1, 0x5}, {0x7, 0xa}, {0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0xa}, {0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x5, 0x6}]}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0xa}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x3}, {0x6}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x3}, {0x7, 0x9}, {0x6, 0x6}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x9}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0xa}, {0x1}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0xa}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x5, 0x3}, {0x1}, {0x5, 0x4}, {0x7, 0x4}, {0x4, 0x4}, {0x7, 0x6}, {0x5}, {0x4, 0x5}, {0x4, 0x9}, {0x2, 0x3}, {0x3, 0x2}, {0x6, 0x9}, {0x7, 0x5}, {0x2, 0x8}, {0x4, 0x2}, {0x4, 0x1}, {0x2, 0x9}, {0x1, 0x6}, {0x3, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x6}, {0x4, 0x4}, {0x7, 0x1}, {0x6, 0x3}, {0x2, 0x4}, {0x5, 0x3}, {0x2, 0x6}, {0x6, 0x9}, {0x4}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x2}, {0x7, 0x2}, {0x5, 0xa}, {0x7, 0x1}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x7}, {0x6, 0x8}, {0x1}, {0x3, 0x4}, {0x6}, {0x3, 0x4}, {0x7, 0x8}, {}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x1, 0x11, 0x48, 0x1, 0x36, 0x3, 0xb, 0x1e, 0x3, 0xb, 0x30, 0x24, 0x18, 0x3, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x18, 0x5, 0x1b, 0x0, 0xb, 0x1b, 0x16, 0x44, 0x12, 0xc, 0xb, 0x1e, 0xb, 0x2, 0x12, 0x6c, 0x16, 0x36, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff0, 0xe000, 0x1, 0x6, 0xa, 0x8001, 0xb, 0xb]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0xc, 0x9, 0x1b, 0x16, 0x6c, 0x3, 0x30, 0x1f, 0xc, 0x9, 0x12, 0x18, 0x5, 0x2]}, @NL80211_TXRATE_HT={0x20, 0x2, [{}, {0x3, 0x6}, {0x2, 0x2}, {0x7, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x6}, {0x1, 0x6}, {0x7, 0x1}, {0x3}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x10}, {0x0, 0x4}, {0x5, 0x6}, {0x1, 0x5}, {0x5}, {0x4, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x2}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x9}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x5, 0x3}, {0x4, 0x8}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x6}, {0x4}, {0x1, 0x9}, {0x2, 0x3}, {0x6, 0x7}, {0x2, 0x7}, {0x3, 0x9}, {0x5}, {0x2, 0x7}, {0x4}, {0x7, 0xa}, {0x4, 0x6}, {0x6}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0x3}, {0x6, 0x5}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x6}, {0x3, 0x2}, {0x7, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x1}, {0x0, 0x6}, {0x1, 0x3}]}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0x30, 0x9, 0x1, 0x0, 0x9, 0x2, 0x4, 0x0, 0x2, 0x36, 0xb, 0xc, 0x0, 0x36, 0x30, 0x9, 0x12, 0x16, 0x6c, 0x2, 0x3, 0x6, 0x18, 0x30, 0x6c, 0x5, 0x18, 0x6, 0x48, 0x16, 0x1]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x4, 0x16, 0x3, 0x48, 0x6, 0xb, 0x48, 0x12, 0x1, 0x3]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x5, 0xb, 0x6, 0x80a5279a4c35758b, 0x0, 0x3, 0x30, 0x24, 0x6, 0x48, 0x6, 0x48, 0x12, 0x4, 0x4, 0x30, 0xc068bcd2aa8d0dd5, 0x24, 0x36, 0x2, 0x3, 0xc, 0x0, 0x12, 0x4, 0x60, 0x3, 0x18]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x18, 0x12, 0x5, 0x6, 0x6c, 0x30, 0x30, 0x5]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x7}, {0x3, 0x3}, {0x2, 0x9}, {0x7}, {0x0, 0x1}, {0x2}, {0x7, 0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x4}, {0x6, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {0x6}, {0x7, 0xa}, {0x4, 0x6}, {0x2, 0x9}, {0x2}, {0x6, 0x6}, {0x6, 0x4}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x4, 0x2}, {0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x6}, {0x1, 0xa}, {0x2, 0x8}, {0x1}, {0x2, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x1}, {0x2, 0x6}, {0x2, 0x3}, {0x7, 0xa}, {0x6, 0x4}, {0x1}, {0x0, 0x6}, {0x2, 0x3}, {0x6, 0x4}, {0x5, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x3, 0x1}, {0x1}, {0x7}, {0x7, 0x2}, {0x4, 0x8}, {0x2, 0x3}, {0x5, 0x5}, {0x7, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x1, 0x2}, {0x0, 0x3}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x5}, {0x5, 0x3}, {0x3, 0x7}, {0x2, 0x9}, {0x0, 0x9}, {0x4, 0x1}, {0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x4, 0x6, 0x2, 0x5, 0x1b, 0x3, 0x24, 0x61, 0x18, 0x30, 0x4e, 0xc, 0x24, 0x30, 0xb, 0x1b, 0x3, 0x36, 0x24, 0x6c, 0x30, 0x36, 0x6, 0x36, 0x4]}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0xfffa, 0xfffb, 0x2, 0x7, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x1, 0x16, 0x9, 0x30, 0x1, 0x2, 0x16, 0x18, 0xb, 0x9, 0x1b, 0x36, 0x1b, 0xb, 0x6c, 0x4, 0x6c, 0x3, 0x12, 0x9, 0x60, 0x6, 0x6c, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x8}, {0x3, 0x5}, {0x4, 0x8}, {0x7, 0xa}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x6}, {0x6, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x6, 0x1}, {0x6, 0x9}, {0x4, 0x8}, {0x6, 0x9}, {0x6, 0x8}, {}, {0x5, 0x9}, {0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x0, 0x1}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x789, 0x3, 0x1, 0xc8ae, 0x1, 0x2, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xf, 0x6, 0x1, 0x6, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x18, 0x18, 0x60, 0x30, 0x48, 0x48, 0xc, 0x16, 0x19, 0x12, 0x60, 0x5, 0x48, 0xc, 0x5, 0x15, 0x4, 0x3, 0x48, 0x30, 0x36, 0x24, 0x24, 0x48, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x2}, {0x5, 0x3}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x3}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0x5}, {0x2, 0x6}, {0x7, 0xa}, {0x6, 0x7}, {0x7, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0x1}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x4}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x1}, {0x5, 0x6}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0x4}, {0x3, 0x9}, {0x3, 0x1}, {0x6, 0x9}, {0x5, 0x8}, {0x4, 0x8}, {0x3, 0x7}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x0, 0x8, 0xff, 0x800, 0x3, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x6c, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x7, 0x9, 0x4, 0x0, 0x2616, 0x3]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xd0}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x4, 0x6c, 0x5, 0x9, 0x3, 0x4, 0x1b, 0x6, 0xb, 0x60, 0x3, 0x4, 0x6, 0x23, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x3, 0xb, 0x1b, 0x18, 0x1b, 0x32, 0x60, 0x6c, 0x1, 0x16, 0x0, 0xc, 0x12, 0x5, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x71b233e0724d6cc6}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x2, 0x4}, {0x7, 0x5}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x8}, {0x3, 0x5}, {0x5, 0x1}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x2}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0x3}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x4}, {0x4}, {0x1, 0x6}, {0x5, 0x6}, {0x2, 0x7}, {0x4, 0x6}, {0x7, 0x6}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x3, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x4}, {0x3, 0x9}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x1}, {0x3, 0x2}, {0x1, 0x8}, {0x3, 0x4}, {0x7}, {0x1, 0x2}, {0x3}, {0x5, 0x5}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xd, 0xb3d6, 0x4, 0x7, 0x0, 0xf548, 0x7ff]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x2}, {0x3, 0x7}, {0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x6, 0x8}, {0x6, 0x3}, {0x1, 0x9}, {0x7}, {0x5, 0xa}, {0x2, 0x9}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x6}, {0x0, 0x4}, {0x1}, {0x6, 0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x7, 0x7}, {0x6, 0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x6}, {0x5, 0x8}, {0x5, 0x8}, {0x5}, {0x2, 0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x8}, {0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x0, 0x7}, {0x2, 0x1}, {0x4, 0x8}, {0x6, 0x8}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x2}, {0x4, 0x9}, {0x1, 0x4}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0x2}, {}, {0x1, 0x4}, {0x4, 0x4}, {0x6, 0x5}, {0x5, 0x5}, {0x2, 0x4}, {0x4, 0x9}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xace, 0x795d, 0x4, 0x2, 0xff7f, 0x0, 0x758d, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0xfff, 0x3, 0x6, 0x6, 0xff01, 0xffff, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x5, 0xc, 0xc, 0x4, 0x36, 0x1b, 0xc, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x5, 0x6, 0xfff7, 0x9, 0x2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xc, 0xfffc, 0x2, 0x851, 0x7, 0x7ff, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x2, 0xc, 0x60, 0xc, 0x4a, 0x36, 0x1b, 0xc, 0xb, 0x3, 0x3, 0x6, 0x24, 0xc, 0x12, 0x18, 0x60, 0x0, 0x48, 0x2, 0x0, 0x3, 0x24, 0x2, 0x9, 0x12, 0x30]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x7ff, 0x3, 0x10, 0x3621, 0x7, 0x4, 0x1b]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x6c, 0x32, 0x12, 0x16, 0x60, 0x3, 0x12, 0x16, 0x18, 0x9, 0x12]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x9}, {0x3, 0x4}, {0x6, 0x2}, {0x3}, {0x4, 0x4}, {0x0, 0x4}, {0x6, 0x8}, {0x3, 0x6}, {0x4, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x9}, {0x3, 0x3}, {0x5, 0x9}, {0x5, 0x5}, {}, {0x6}, {0x1, 0xa}, {0x2, 0x9}, {0x4, 0x3}, {0x1, 0x2}, {0x6, 0x1}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x3}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x7}, {0x6, 0x7}, {0x1}, {0x5, 0x9}, {0x6, 0x9}, {0x4, 0x6}, {0x0, 0x6}, {0x7, 0x5}, {0x2, 0x9}, {0x5, 0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x3, 0x7}, {0x7, 0x6}, {0x1, 0x7}, {0x1}, {0x1}, {0x6, 0x4}, {0x6, 0x8}, {0x3, 0x2}, {0x3, 0x8}, {0x2, 0xa}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0xad, 0x7, 0xd, 0x5, 0x4, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x63, 0x8, 0x8, 0x0, 0xe, 0x1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xaa, 0x1, 0x8, 0x4, 0x7, 0x1, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x6c, 0x10, 0x6, 0xc, 0xb, 0x4, 0x48, 0x3, 0xc, 0x5, 0x60, 0x2, 0x36, 0x60, 0x0, 0x1, 0x18, 0x5, 0x48, 0x7e, 0x4, 0x2, 0x0, 0x4, 0x60, 0xc]}]}]}]}, 0xd84}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) 5m27.619886028s ago: executing program 4 (id=399): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x50800) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x2, 0x304, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x4, 0xdada, 'team0\x00', 'batadv_slave_0\x00', 'vxcan1\x00', 'pimreg0\x00', @local, [0xff, 0x0, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff], 0xce, 0xce, 0x11e, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1, 0x1}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xff, 'syz0\x00', {0x7}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x57, 0x8863, 'ip6gre0\x00', 'ip_vti0\x00', 'veth1\x00', 'macsec0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xee, 0xee, 0x126, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0x5, 0x0, 0xe7cb, {0x5}}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x4, 0x0, 0xf, 0x5, 0x2}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x37c) sendto$l2tp6(r0, &(0x7f0000000440)="169a6c62d78fcebf2aab4d97e2762c494b71c2711a046f79d702f14862c247fbe74bf40e6466b8e35f1d2f081b525e4934eeea19d64b99ba499cb5a546ba6c1353d3dec604835340aaf08583a4eb3a1a6cfaf5e5999195", 0x57, 0x20000000, &(0x7f00000004c0)={0xa, 0x0, 0x5, @private0, 0x7, 0x4}, 0x20) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x145000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000640)={0x15, 0xe1, &(0x7f0000000540)="235a73243d007cafe1a6de07386d75433622a831a3afbb6b86d0cd9c69fc2c7a7d8f92b6bc367e185e80ab06c627ca9c43888adbd15b28b63bd6ec36cdf3b68e7fe19bc8b32157bfb41695ffc05184e044df2afdb7da24b82bd28c8902c2e1fce860130e9e431101d743f750128ebeb08de234a4f562cf53fccd47f80523296f5d6ec20eaeca7c766b8c79da021ed6f4632eaf1cd8c10c1e09cd2583e5fa4f397a823593e1231f5c839e428a820cc438cd95e327abfe4915688008fdaaaa8c436c83eb17d27227463a7c7a547778e0367c924816579a3555605cdeab4079a125cb"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv4_newnexthop={0x28, 0x68, 0x8, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x1, 0x0, 0x30}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x4004000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000780)={0x5, @capture={0x1000, 0x0, {0x0, 0x6}, 0xfa3, 0x2}}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000880)=0x5, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2c004000) r4 = socket(0x1f, 0x1, 0xc77) syz_usb_connect(0x3, 0x10d4, &(0x7f0000000a40)={{0x12, 0x1, 0xe03407adb724b701, 0xe2, 0x24, 0xd7, 0x20, 0xeb1a, 0x2883, 0xdbe2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10c2, 0x4, 0x2, 0x1, 0x80, 0x6, "", [{{0x9, 0x4, 0xa, 0x81, 0xf, 0xb6, 0x35, 0xec, 0x2, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "0ad2eea003"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x9, 0x4, 0x1}, [@ncm={0x6, 0x24, 0x1a, 0x7, 0x20}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x0, 0x9}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "e7aab84776"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x3ff, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}, @dmm={0x7, 0x24, 0x14, 0x3, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x0, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x1, 0x5, 0x8, 0x4876, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x3617, 0x5, 0xb, 0x3, 0x0, 0x81}]}], [{{0x9, 0x5, 0xb, 0x10, 0x200, 0x81, 0x10}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0xf, 0x7, 0x3, [@generic={0x1d, 0x24, "9655076b610599f06441bf438ca491618a72bba841e93c5ebc1665"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x7, 0x8, 0x6}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0xd, 0x2, 0xe}}, {{0x9, 0x5, 0xb, 0x1, 0x0, 0x53, 0xb6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7ecc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x234}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xfd, 0xe6, 0x9}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x78f, 0x3, 0x3b, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2f}, @generic={0x32, 0x30, "7ad1b68d9f38d4e4f0437b873e3e6a1555a2c44284300873425867e0ed8317ddcc8d9794115a94ffe7347c06e641ec3d"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x65, 0x20, 0x0, [@generic={0x47, 0x31, "528011ae3c7f7b7ee267dbc2f1448a01b85fed84c045d56cc70c4a261106223a2efe781223f1b32f53c535650d786b6c3dac53c83dc05a9865b98e03c6e89afab31c108e58"}]}}, {{0x9, 0x5, 0xe, 0x1c, 0x20, 0x6, 0x5, 0x4c}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x1, 0x2, 0x9, [@generic={0x6b, 0x8, "872747e7c057709730ade3d3639b59650a3822ebec8f9747a85e49e19244d17dce1f585392a3bb02d4f08b70c8b6d11766cce222d5c01cc003c9db74954a3286e50b714e0d8a9975ce80d07017ab64c7f782e664a8f253ee0b8cd818f5a5e3d96225298512c3b4a500"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x8, 0x0, 0xf, [@generic={0xda, 0x22, "eb5c78e828d4016e887d9cfa9d189d502e614085b60e3a2e22e33acd085a824047e68c397263cf064eaf3e5aac97f8e00b6ab3ff3aa19ab6cdf6f25f526b0d47264b0b066683986021e7cab7b63e5f2d08607dabb0a4e1adb25947414cb1ac71e22b32f8931cb5562b0d2854602d9894362edd731d962cba3f14ff7a70f161bccff1ca9eac1dc4f060d0971d954deaaea72393909a950bba2f2f8d6e33b584a980fed26aaba0edc78eeb6fabe3dd8f1cf95fb7f69717681aa8724e5f1afb0fe9fb8c587291110cc74997bc2ab820ca16ec5e1dfa7419cb58"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x81, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfe, 0xed75}, @generic={0x9c, 0x2, "d40ed13131210cb1c60c278a3e7b3a9a0e670f6715f5eeffcc9db0d24fda05a74de978f2baa7327bb883019190e837e954236d35aa0b51dbd34ba4ab47f8d0daf16c5da51b836e5edff8a6e31767bfacb8ef58c4aa69f2532c816ee42ed311ee5ae1b5a5c487e7f1f4c65877ff105c5971ae3026eb3b1afc2cf528e77dbe6f215185c95294a3900657bd31767383fd60dfcd1cf2d82aafe4c13f"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0x3, 0x7, 0x8, [@generic={0x3, 0x4, "11"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x9}]}}]}}, {{0x9, 0x4, 0xc4, 0x9, 0xf, 0xe, 0x1, 0x0, 0x4, [@uac_as], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0x5, 0x2, 0x9, [@generic={0x91, 0x21, "884936465879350fb92f0c9ddb27ad70f75bb734cf666b0c44d9c8ff9d944ed186dca460a533daa70861c453000806c9aa0b70edcef6773605f2fd7acf73b00fc9ad933425dd41d322474296e877419bbfe5a1397d990e1a891ee56f1a2ff9363e50e4db562232cf1e23897fa8e63bec2059c4c1888baa944e6a5f63c767b9d57b32f2a29e958c1710b13574ad817e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x58f8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x7, 0x2, 0x5f, [@generic={0x7, 0x5, '\t\r\fJ\x00'}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x2, 0x2, 0x0, [@generic={0xc3, 0x4, "695c846cf9a062a208da29ce0f8b1c19f1043cc52b7cadd4c6f5d18f4e4fec966be72d23a643aa6023d293fbadb9e3d5d532b29f1ac8b6c265d19dab9bfc3774420a157a3cbc4721fd2c2b3491f8ac0e54cf9f965e3b0500f709cbfa63e76af39c7913e16713b87a290999c7cb7d866af64973cde0f152ff89c0995905587f7d813f614c343fe4a8f4d2041ff92931cd925f2da6c78b40790c8c3c2437a148b8ebd4ee808783cd75e93a385f09820f661ade23a9ac3d9e342c8de987f17d60889d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x8, 0x1, 0x7f, [@generic={0xfa, 0x1, "c3f6dd4c2cb6da87cc7b6c51f37a12c19d73a63c5cc63c03264177e0096f450ef1abacf094f39564b33bd263c73e98fbd0b2f349bec1816a11c3b4722888157f394546af7d036bfffa6f15fe1c40363c6db0cdb6c196893bc834878d8b9d5c1022cfd97152cf2d5cbbbad577004f4cbf45c75d07a25aed5737afdbc8508ea3a9b121f53388ef9bef2ed9873c3460025c17ae6b32af38c2c9d36959ae186740ce8415c1b86b9505722105f514cb52c53df094e418829bdb66e34c2939d35b093817b55a37f042922e22b171bc68fb9e9c13bba9aab7bc5c80a19f6b87a8b69d094ae6bb38434717086c60979082d4a4653f8e6d461d1c2720"}, @generic={0x2, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x48, 0xfb, 0x8, 0x4, [@generic={0x99, 0xf, "d8d469c941b2e5500074ea188e2824c5683f85060ff15f597cd5a286117749fbdcc6be493919db5150617c5239ce52c86fd9dfc16459d85024d7f47124f8c6afb63ed484bc455fa86a65e1cc28fde354c9cdcc8d54cf255ff5bc295a7fea3e1b70f2246183a89fc20f8f0543347083b73f2fe1cb075b963bd7278a0941a06e5979381ee1cc02fa38b5e244aed06c5e905b7e0972f16873"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0x2, 0x3, 0x40}}, {{0x9, 0x5, 0x2b7251b76ee9047, 0x4, 0x40, 0x8, 0x1, 0x3, [@generic={0x9e, 0x22, "cf82119e90ccc595f45bce5d2502fab650cba9beee8adb7dac11a2d00ecba743ccf32a511fa026d41b2c544278187f8ee946136a80029ac34f0498cc1f878c568b158fccb2c0c5154c03736c2b38eabdfabdd1d3e73ca6a88c7c0dddf2b64dd041d10ad68c828ead28b9555f10c9a9794824cf55048541b9cb8ad6d83499137e7c6d808cf853f1282663363ac197c6f155e20c8d146c0e72c094597a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x5, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x80, 0xf3, 0x9, [@generic={0xfa, 0xf, "e90894bc5552dafe4ec2225600a96b9421116d893bb9fcf488206c738df6e4d9bb2953ea03b6d88689f00f96bf63b1ee68bd7a9734923a0991446f79524ffa6afc7437dad8691c3334c1a310a901628eac52f9ed48b7e07625bb2115f7e1c162191b183b28e4bf73872daef5b4c7e631288d387baf7fec5308ca1e1ba41c51e5b30cc83410d17a78b40d56004dda32008eae057bcc49b9c15bd54b0c6d7c48be1f65ddf8c7dc41b58b5b0029d74bf865d36ce79041b1f9d10ba375361bd8d56c747942aacef5225f5cd1c514e4248c3196b47b4f47a19c1bb02bac1182a5fe44b000ba34bc2124652fe95be5072539607b41027f267b97c1"}, @generic={0xe0, 0xc, "e178b6c3aa04293fe79d0fd087b8eed16c80446ce3df5b1c9fbc1b9b8f1f8a38971b49226b8068cc61e7b0c7f29668d5412f47093d4472157c9e7eb4a4f5de8df41889b06ae9e3be318f6c79db226a7ee9f7111e1fd145bd5095ae812978e4836751752f4e61da1c976e0f449ec663d301aae7ded11c408dd0ac30a9ac049390f0161714f95c908f231695c55f70107b36d2adef092bfdcebb2c26d58e3721456b0fb19f3e1c4e518d7b5dd763f991d88bd226a20e14e0b522b694eae6d109c938baa98d39cd2d07aefe59c2065caae04301fbd157f6ae78bf6d9b6e8d2d"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x80, 0x5, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xf1, 0x6, 0x1}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x1, 0x9, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2}, @generic={0xf2, 0x22, "122eb782a83388967660fe16c3e7439ca43454867db46670fad0948073ecae2b950d0594d4dab1e94b56633c03e29d3a829f1efd5595eb94aaa2c97ee043f00c5df2fb4e6aae4ca6336622d3928fe71459db0def6ead8659265f32905e3dcfd6f1c6ce9764fcfa571f93730daf9054b8245babf3a30e4e87ce8767e2d1ac48b2cd0331577136580d252135d1cd19fedf57415ded0c360ba3d26f6286156de949bf2ed80a8c160605c1d487493ff0323cd8be32e4ada11b889e9910b6a01a576dcfc3dbb2d620efc2ebb81b93b156597aa22fbd5225e6b424b72fef7a019f8d7827868c7e76e6379334f547ecc60b8292"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x2, 0x4, 0x5, [@generic={0xd8, 0x1, "479b25936efb8a76a0d5caea9846cc166f509c0e7cceb5cda421def745315217b74bedcbd434a357e14d445ed22f07bf1f68fc95e7e5ebebe714d71b18368af197b1400c6a0a7fd8c405018ccd579fe3b0c73ee06647bb742d200d944b5c313c2ae21df32f1a1cf85d56da81df6ac85b5813137a584d455ef3486f852fb59eb5444b6692796ef0d277309bfb4037a0a02b8fadeafc206b049ae7bc2b552353136203a616532bceb049040b50b02f6853bbc74a8a01297699fb965c6459bdeff3671aed745cb5248372be4df73daad32fef5c166f2dba"}, @generic={0x36, 0x79, "3b8736f34e4f748c3da523ce7c0645aa598d7ca2e74c1468ffaf1f68f2d3447a2ec3f1547137c5bc8171dd8c30695089239457e1"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xf7, 0x8, 0x3, [@generic={0xa6, 0xe, "8f9689075a9984a80f3ed35e42b967fdc828336423b3ec0bfb54c00801fabf7e96b295782ec4ba2eb1ba3af5b2ebc616890d91da38570386b63f41ac5ef6bb2c621bc089d7db4ea7d34afdc2e6de21546697d2318acc7cc1ede6399cfee3b68274b6c6211293fbce78877aa3ec125ad87eb6cf368d73933ccf2ca8f06dccb4717fde25c43433eb53b3f682707ef5599a101a35b604caffb8ece99a8e9a3ec038b11f47f0"}, @generic={0xe6, 0x4, "da849b3a90ad41b24ded2fbe0a4a11a6256f644e285e3f622d5c9f25fcbc39f50c32c88db6de0fe3f373d1f355497ed3e81dfc50b5672479f775d31b36f0910c1e9bc41312fac6171a989725ec3436ee4bf8a5f18291362c4af86f78edfe24d1a7fb26ec7145de252dee07803386dfa8292d51aec9df988300322fbbc1c9f9e2e6f840f1d0ae69e066f999efd2099b883a11bdf51d492cfad7cd3ee971a1265584790ff1b754b372c9e3455926ab0f03c372ab79f34a479a6f6a33c47c611359a9922f12b4b0e0a83f06c315eb70e4d07e6ef2c5a0da0fe34907cce0822d20f05ff2fc6a"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x618, 0x5, 0xc, 0x1}}]}}, {{0x9, 0x4, 0x4c, 0xc3, 0x5, 0x38, 0x93, 0x15, 0x3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "3d1c"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0x7f, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0x79d0, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, @uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x0, 0x6, 0xd}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0x0, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x5, 0x0, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x0, 0xdc, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x3, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x9}]}}]}}, {{0x9, 0x4, 0x44, 0x6, 0xc, 0x70, 0x96, 0x70, 0x8, [], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0xd9, 0x7, 0x5}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x0, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x9}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0xff, 0x0, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x10, 0x81, 0xff}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0x3, 0x2, 0x7}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x21, 0xc, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xc4c}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2f, 0x5}]}}, {{0x9, 0x5, 0x9, 0x2, 0x0, 0x80, 0x5, 0x3, [@generic={0x9c, 0x10, "c4a52c151bb737149512fdb97afb259aa1a8f85a7adb45e4e2a0a38c915564fd477096eca6cdf3a670210a7d24d30cc13a9539f4b97ffc28222dd831d35a00c1fd19407ef9d1b0b77930df83e8a2e5b6de1dd3a81f76bf222cf3ac02ee8cbdcc76775d82b0158731bee8637a6fae02dd546565cee828c8f51322fd988287b88fc6c7514a6c97e8fb41b146c17b01fa8688fd6653d1193cd12712"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x2, 0x7, 0x6}}, {{0x9, 0x5, 0x35c76d1c92dbbf7b, 0x0, 0x10, 0x1, 0x6, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x400}, @generic={0x76, 0x30, "58b31cb95f887fe54f97caa807b1341334fdb842239495160f464dd66ae76b8f3605013838b148ea95daf6adb0f3be6a7f300ca0265bd647e388681fce16781ec11297896a5e73d541d990b18cca905bc625b40fc5cfa6da3b1e1f862fbb397a3d0e1029f8be56e613a3ece071b1209d0c7b37b1"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x4a, 0x2, 0xd, [@generic={0xcf, 0x23, "3dd2c1b032bf9615659393b1933554bdb2ab533da1b15e7d354f00189d0ff36e09c70d93ff91c91264db45972a4cc5bcb547e76d4b89cd181223d408733de955f2e331c2b9f60e367b645f4ef736483e0acd8af331a2b3c37c5092fe155f6bb326dd7df6cf8adcabd000f8edcb1ac3015d6e6516ede97ef330c39928fc542327d83ce7e857f8ebaf7c13c077fc7c994360a429c2e2326984101271048195447774c4e7ecd189d03fa2fa07d0037273906e09d595e3cc62bb10c30d237202cdee09e88befd775241daa1c9b82df"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x9, 0xb, 0x2, [@generic={0x7e, 0x0, "2220bc222ebab47a483bc96b067581e250bd7720a4080a0afa5f36840e9a682a76d30bb66ab1bcbe38936bc585ee3516bbcbecd236736215f7652e83013ff5aa4d269bb5b37650ec3f57884885b70991322da5691e6011ffd6fb874f772140c6a9584800aae1bf044a9d61f8d07fefd705d21ed55fc98aaf052e9654"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x2, 0x0, 0x1}}]}}]}}]}}, &(0x7f0000001d80)={0xa, &(0x7f0000001b40)={0xa, 0x6, 0x310, 0x10, 0x81, 0x2, 0x40, 0x5}, 0x40, &(0x7f0000001b80)={0x5, 0xf, 0x40, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x124, 0x29, 0x3, 0x9, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x0, 0x8c}, @generic={0x29, 0x10, 0xb, "86f379c1e6b6f7e951d928da16876cec8adfb1aa1315792f60ec7ec06d6e15da792448dceb12"}]}, 0x4, [{0xc9, &(0x7f0000001bc0)=@string={0xc9, 0x3, "5671672be08082ea502cdde54daae15d7e996b087abf41f72497dd4ef42e253ca183590fbf87be46bffe054634646d8563b949b8436192fb2a881879d0d083bd6729f2cf98f3092947a03e985562c10b28cf3ca57f4e13223f16bc64e76fdc545798e73116124933c0d444e28d61d2713b5ae7adbe4ca48eef71b154f594a2d047ce37f947c06c8a1ae0b4c13f479531a5b1dea375970f84a97902b6af2e2b69ca3f915ba7868777d29580029a3a7e19f9d77690169218ab04debdf89eb7925d03b8bbce7ba746"}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x423}}, {0x1a, &(0x7f0000001d00)=@string={0x1a, 0x3, "f90a25470be767366a4ce52e842a6a491f19fa463d500fb6"}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x85f}}]}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000001e00)={0x1}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0xc98fd262f4a33ca8}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x24, 0x0, 0x802, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008001}, 0x4040855) accept4$unix(r1, &(0x7f0000001f40)=@abs, &(0x7f0000001fc0)=0x6e, 0x800) getpeername$packet(r0, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000021c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0xa, 0xf, &(0x7f0000002000)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @generic={0x8, 0x0, 0x9, 0x8000, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0xc, 0xb, 0x9, 0x8, 0x1}, @jmp={0x5, 0x0, 0xc, 0x6, 0x7, 0xfffffffffffffff8, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000002080)='syzkaller\x00', 0xbda1, 0x86, &(0x7f00000020c0)=""/134, 0x40f00, 0x2, '\x00', r5, @fallback=0x28, r0, 0x8, &(0x7f0000002200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000002240)={0x2, 0xa, 0xfffffff8, 0x69}, 0x10, 0xffffffffffffffff, r1, 0x6, &(0x7f0000002280)=[r0], &(0x7f00000022c0)=[{0x5, 0x5, 0xb, 0x3}, {0x0, 0x3, 0x9, 0xeb55083d1ee50b20}, {0x0, 0x1, 0x0, 0x7}, {0x5, 0x4, 0x1, 0x3}, {0x3, 0x4, 0x2, 0xa}, {0x2, 0x5, 0xa, 0x7}], 0x10, 0xc6}, 0x94) exit_group(0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000002440)={0xa8, 0x0, 0x3}) listen(r2, 0x58d) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0xbe10a4ddb0267672}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x58, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) unshare(0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002640)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', r5, r1, 0x5, 0x1, 0x5}, 0x50) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x34, r8, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="5366a6beabe5"}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc044) 5m26.491037262s ago: executing program 1 (id=400): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x41) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0x2201, &(0x7f00000000c0)={0x1, 0x2083, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESDEC=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 5m25.515106593s ago: executing program 1 (id=402): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) syz_io_uring_setup(0xab4, &(0x7f0000000340)={0x0, 0x56fe, 0x4, 0x0, 0x3a0}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 5m25.216901289s ago: executing program 2 (id=404): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80200002c0007012cbd7000ffdbdf25047c0000c700018065d2dc785f6069b6ae1486924388d8c18bb3193c2e252e2607ed7eac762a7b3f035a3096289d9101d8d2767abc6837d603c40c8ee1f6db725c71b99e37b3a8fa8753a8ed7daacfaf2be9f770fe79d81cf91155d9bd472a7e5971adb193c93f90bff4b7f54166ccba15b932d180d8a22b6c77c939487ca479e29d87933de1b18d433b6334f5c1b3437a0f90c2f84f2d58770f1f6ffbaa38bf8cb84e92558c1c754557f5e66a075548d73c63891463642adda5a5121842273e255d17c0dcc54ab847d0c000e9010380040101"], 0x2c8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) 5m24.396684333s ago: executing program 1 (id=405): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x9, 0xffffffff}, 0x6e}, 0x10) 5m23.745844659s ago: executing program 1 (id=407): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r1 = syz_ublk_setup_io_uring(0x47bf, &(0x7f0000000080)={0x0, 0xcba0, 0x1, 0x2, 0x2d7}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000300)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) syz_io_uring_setup(0xab4, &(0x7f0000000340)={0x0, 0x56fe, 0x4, 0x0, 0x3a0}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, r5, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd=r0, 0x7fff, 0x0, 0x7, 0x1, 0x1}) sendmsg$nl_route_sched(r0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x81}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x4000000) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0xffffffffffffffff) 5m22.927222077s ago: executing program 4 (id=408): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000140)='/dev/kvm\x00', 0x141801, 0x0, 0x100, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 2) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21d62}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}}, 0x20084084) 5m20.712717719s ago: executing program 1 (id=409): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd, 0xc}, {0x5, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x4, 0x7, 0x45, 0x10, 0xff, 0x1d, 0x9, 0x8, 0xc, 0x5, 0xf, 0xd, 0x2, 0x6, 0xc, 0xd], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x40, 0x8, 0x5, 0x8, 0x2a, 0x9, 0x134e, 0xfffc, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x3, 0x3, 0x48aa, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x39000, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) 5m19.18180557s ago: executing program 1 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) vmsplice(r1, &(0x7f0000001780)=[{&(0x7f0000000400)="0e", 0x1}], 0x1, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty=0x11, @dev}}}], 0x38}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f00000001c0)='.\x00', 0x3) write$tun(r0, 0x0, 0xfca) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x141}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x48000) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009a4c79c5d01857aadd502fcec7f9dd1f24b51fca92f22a1131a29f8c97a58ad4ba8034b3485297210a02d8ff8075a63e738b9b1a946dce7635959b0be21176f2a63cdada3266f6b1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000100200000000200000000000000", @ANYRES32=r12, @ANYBLOB="408f01000a200200200012800e0001006970366772657461700000080c00028006000e000146"], 0x40}}, 0x20000000) (async) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0xa, 0x0, 0x2, 0x5, 0xd9, 0x4}, 0x20) (async) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x61, 0x4}, {0x45}, {0x2}, {0x6}]}) 5m8.994114716s ago: executing program 33 (id=404): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80200002c0007012cbd7000ffdbdf25047c0000c700018065d2dc785f6069b6ae1486924388d8c18bb3193c2e252e2607ed7eac762a7b3f035a3096289d9101d8d2767abc6837d603c40c8ee1f6db725c71b99e37b3a8fa8753a8ed7daacfaf2be9f770fe79d81cf91155d9bd472a7e5971adb193c93f90bff4b7f54166ccba15b932d180d8a22b6c77c939487ca479e29d87933de1b18d433b6334f5c1b3437a0f90c2f84f2d58770f1f6ffbaa38bf8cb84e92558c1c754557f5e66a075548d73c63891463642adda5a5121842273e255d17c0dcc54ab847d0c000e9010380040101"], 0x2c8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) 5m6.936627595s ago: executing program 34 (id=408): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000140)='/dev/kvm\x00', 0x141801, 0x0, 0x100, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 2) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21d62}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}}, 0x20084084) 5m3.632949752s ago: executing program 35 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) vmsplice(r1, &(0x7f0000001780)=[{&(0x7f0000000400)="0e", 0x1}], 0x1, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty=0x11, @dev}}}], 0x38}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f00000001c0)='.\x00', 0x3) write$tun(r0, 0x0, 0xfca) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x141}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x48000) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009a4c79c5d01857aadd502fcec7f9dd1f24b51fca92f22a1131a29f8c97a58ad4ba8034b3485297210a02d8ff8075a63e738b9b1a946dce7635959b0be21176f2a63cdada3266f6b1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000100200000000200000000000000", @ANYRES32=r12, @ANYBLOB="408f01000a200200200012800e0001006970366772657461700000080c00028006000e000146"], 0x40}}, 0x20000000) (async) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0xa, 0x0, 0x2, 0x5, 0xd9, 0x4}, 0x20) (async) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x61, 0x4}, {0x45}, {0x2}, {0x6}]}) 4m45.594147415s ago: executing program 5 (id=438): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x30, 0x29, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xb}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x30}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014"], 0x74}}, 0x24005000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000002c0)={0x2, 0xfffffffffffffd93, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, r2}}, 0x30) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0x40047459, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f00000003c0)="7b3194428252547d3b8daaab2308a54c63544b6c37844f13396e90bee7305107d9fec78ba28a1f55d8be3e86a3c856ea03d942c520e4e3025e77fb25eb1380036c88459f91216b2b78c06b21c78cf38f0fa48f4eee88168c03262a9c6ed519c8be068a8376c180bc17bd023c46e771001c7d2832cad57b816ca1ba5b9c96e1ee0eb2ac0bcdac75b4e6e0156d8346f2b66763c432ea121a645a6d04b50971d653bbd5940492befc66a0aa4f153953f483231d9bfb4c910daee010c988", 0xbc, 0xfffffffffffffffe) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x400, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000140), 0x4) setns(r5, 0x24020000) 4m43.905925043s ago: executing program 5 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setaffinity(0x0, 0x3, &(0x7f0000000300)=0x40000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030ae9000000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000004000"], 0x114}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0xa, 0x2ebad4, 0x16e992}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x11403f, 0x3f}) 4m41.013231414s ago: executing program 5 (id=441): syz_emit_ethernet(0x0, 0x0, 0x0) 4m40.197796021s ago: executing program 5 (id=443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x80}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xf4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_USERDATA={0x96, 0xd, 0x1, 0x0, "f2652402268e9c9b29eb05cabb7946289d5ca53b83274f7e4b06b5e26aecd49fa51ae1758a70443b11aeb52c75d035a95d375685849f4333b413e29f7932f7edc09965ed858614ec3e704111d2a62d71a000ad713092910866525a56a1620d33a5fb4d22cc24a726943db89d0ecfb2cea8af348334a720921c4c95579b7cb8d8bc46d84227951331e072d4f3e785f0c6b241"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x80000001}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x13c}, 0x1, 0x0, 0x0, 0x20004048}, 0x20050800) r1 = syz_io_uring_setup(0x2d8e, &(0x7f0000001a00)={0x0, 0x27c9, 0x0, 0x1, 0x40000}, &(0x7f0000000080)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x110, 0xc}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) (async) r5 = syz_io_uring_complete(0x0, 0x0) r6 = socket(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0xb, @rand_addr=' \x01\x00', 0x6}, 0x1c) (async) syz_usb_connect$uac1(0x3, 0x7b, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xd195c6d364ba4373, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff0, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x3, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x3, 0x4, {0x7, 0x25, 0x1, 0xc, 0x0, 0xfff0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x80, 0x8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x7}}}}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc9, 0x0}]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r8, 0x0, 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x38, 0x67, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x80, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x90, @private=0xa010102, @rand_addr=0x640100fe}, "858c000000000000"}}}}}, 0x0) (async) setreuid(0xffffffffffffffff, 0xee00) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x0, 0x4}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0xd, 0x1, 0x4, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0) (async) r9 = getpgid(0xffffffffffffffff) ptrace$setopts(0x4200, r9, 0x7, 0x100010) (async) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f0000000040)=0x1, 0x4) 4m38.779443474s ago: executing program 5 (id=445): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, 0x0) write$smackfs_logging(0xffffffffffffffff, &(0x7f00000001c0)=0x2, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$kcm(0x1e, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000040)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @ext={0x7, &(0x7f0000000080)="8e5496e72091d5"}}], 0x1c) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 4m36.274134449s ago: executing program 5 (id=447): creat(&(0x7f0000000100)='./file0\x00', 0xa) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000c00)={{}, {0x4}}, 0x24, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r2, 0x4b52, &(0x7f0000000000)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='net/dev\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000011}) r6 = syz_usb_connect$cdc_ecm(0x6, 0x65, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x4, 0xd0, 0xf3, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "259a69fb"}, {0x5, 0x24, 0x0, 0x2c8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0x9, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x4, 0xd3f}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x5b, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x7, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x4, 0x2e}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0xb, 0xc, 0x9, 0x0, 0x9}, 0x54, &(0x7f0000000380)={0x5, 0xf, 0x54, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1e, "3066aade87b63b77e1f2769652ffc7a9"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x1, 0x81, 0x8, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x47, 0x8, 0x3, 0x8, 0x39}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x5, 0x5, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2f, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "a44534aab48f581c0267b2cd333cc9d7"}]}, 0x1, [{0xd2, &(0x7f0000000500)=@string={0xd2, 0x3, "0a7efc3c5dfce964025c0a51b58ddb07544b1386291124029ec54d7c236fecacfabcb9c3395aa54c1f3bfca87b1c4c46435a45fee53f9460c555a812a042d5365e33d5e11b6db1b39dbc87f2460fac3a6cf930b698c265576912c00586b999623e576c76d8f0416fb1cc89e38eb387a608156fab83be404e3b9262c7c670d8f8b11c9dc14aa7daed8a516541f65c841ed6969174e5f4400c7a93a27ccd91788cb11ec24f14a2be32fe9752c9034d681548f4574aef7bda522dbf4b1cde5d77d376440d7f2d0ae57eb6d20705215caa65"}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x20, 0x9, 0x3f, {0x3f, 0x22, "e174e48161e0907d8f0eb5bd7934489636d00071ddf6b48b5d8e5e7e3af06156281be70b5209268001f80ba436a497a558e356045abb807c38665e2632"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000740)={0x0, 0x15, 0x4, "ae01381a"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}}) ppoll(&(0x7f0000000100)=[{r5, 0x1418}], 0x1, &(0x7f00000004c0), 0x0, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="0a81", 0x2}], 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup(r10) ioctl$KVM_SET_VAPIC_ADDR(r11, 0x4008ae93, 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e510a45bd95217d2b38c09fedae469737f49b6a3ef2793f4dae81d598e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}}) 4m20.589240815s ago: executing program 36 (id=447): creat(&(0x7f0000000100)='./file0\x00', 0xa) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000c00)={{}, {0x4}}, 0x24, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r2, 0x4b52, &(0x7f0000000000)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='net/dev\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000011}) r6 = syz_usb_connect$cdc_ecm(0x6, 0x65, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x4, 0xd0, 0xf3, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "259a69fb"}, {0x5, 0x24, 0x0, 0x2c8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0x9, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x4, 0xd3f}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x5b, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x7, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x4, 0x2e}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0xb, 0xc, 0x9, 0x0, 0x9}, 0x54, &(0x7f0000000380)={0x5, 0xf, 0x54, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1e, "3066aade87b63b77e1f2769652ffc7a9"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x1, 0x81, 0x8, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x47, 0x8, 0x3, 0x8, 0x39}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x5, 0x5, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2f, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "a44534aab48f581c0267b2cd333cc9d7"}]}, 0x1, [{0xd2, &(0x7f0000000500)=@string={0xd2, 0x3, "0a7efc3c5dfce964025c0a51b58ddb07544b1386291124029ec54d7c236fecacfabcb9c3395aa54c1f3bfca87b1c4c46435a45fee53f9460c555a812a042d5365e33d5e11b6db1b39dbc87f2460fac3a6cf930b698c265576912c00586b999623e576c76d8f0416fb1cc89e38eb387a608156fab83be404e3b9262c7c670d8f8b11c9dc14aa7daed8a516541f65c841ed6969174e5f4400c7a93a27ccd91788cb11ec24f14a2be32fe9752c9034d681548f4574aef7bda522dbf4b1cde5d77d376440d7f2d0ae57eb6d20705215caa65"}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x20, 0x9, 0x3f, {0x3f, 0x22, "e174e48161e0907d8f0eb5bd7934489636d00071ddf6b48b5d8e5e7e3af06156281be70b5209268001f80ba436a497a558e356045abb807c38665e2632"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000740)={0x0, 0x15, 0x4, "ae01381a"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}}) ppoll(&(0x7f0000000100)=[{r5, 0x1418}], 0x1, &(0x7f00000004c0), 0x0, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="0a81", 0x2}], 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup(r10) ioctl$KVM_SET_VAPIC_ADDR(r11, 0x4008ae93, 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e510a45bd95217d2b38c09fedae469737f49b6a3ef2793f4dae81d598e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}}) 12.383400639s ago: executing program 0 (id=558): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r1 = syz_ublk_setup_io_uring(0x47bf, &(0x7f0000000080)={0x0, 0xcba0, 0x1, 0x2, 0x2d7}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000300)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) syz_io_uring_setup(0xab4, &(0x7f0000000340)={0x0, 0x56fe, 0x4, 0x0, 0x3a0}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, r5, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd=r0, 0x7fff, 0x0, 0x7, 0x1, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x81}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x4000000) ioctl$sock_SIOCOUTQ(r7, 0x5411, 0xffffffffffffffff) 9.104377471s ago: executing program 0 (id=559): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0x0, 0xffff}, {0xffe0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0xd0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x24005000) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2e, 0x2, 0x7, {0x6, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffff8, 0x3d, 0xc}, {0x0, @remote, 0xd, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010103, 0x1, 0x5}, {0x0, @empty, 0x6, 0x3, [0x6, 0x9]}, 0x4, 0x3}}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f0000000140)={0x30, 0x0, 'client0\x00', 0x0, "8bb59c511d2c7153", "7b1ffc99516e6a1060981f2c7a4e468bb4967e6f85487a84b7709cd7c92a07e5", 0x0, 0x800}) sendmmsg(r6, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='P', 0x1}], 0x1, &(0x7f0000000800)=[{0x10, 0x84, 0x3ff}, {0x10, 0x1, 0x2}], 0x20}}], 0x1, 0x4000810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x21, 0x5}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x4001, r1}, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r1, r5, 0x8f5, 0x0) write$cgroup_devices(r5, 0x0, 0x8) r9 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='\x00\x00\x00') write(r3, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.070470676s ago: executing program 0 (id=560): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5", 0x4f}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(r4, 0x0, 0x8) write(r2, 0x0, 0x0) 3.850031226s ago: executing program 0 (id=561): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r1 = syz_ublk_setup_io_uring(0x47bf, &(0x7f0000000080)={0x0, 0xcba0, 0x1, 0x2, 0x2d7}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000300)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) syz_io_uring_setup(0xab4, &(0x7f0000000340)={0x0, 0x56fe, 0x4, 0x0, 0x3a0}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, r5, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd=r0, 0x7fff, 0x0, 0x7, 0x1, 0x1}) sendmsg$nl_route_sched(r0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x81}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x4000000) 996.413279ms ago: executing program 0 (id=562): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000002000000000000000000000e00000010000000000000000000009e0000"], &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2}, 0x1a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)) ioctl$TUNDETACHFILTER(r0, 0x8903, 0x1000000000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) ioctl$TCXONC(r1, 0x540a, 0x3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f00000002c0)=0x7, 0x4) poll(&(0x7f0000000200)=[{r4, 0x2140}], 0x1, 0x8) getpeername$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000200)=0x6e) socket$rxrpc(0x21, 0x2, 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b8402, 0x0) r5 = getpgid(0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x804, 0x1, 0x2}, 0x18, 0x3) landlock_restrict_self(r6, 0x0) sched_setscheduler(r5, 0x6, &(0x7f0000000000)=0x2) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000400)={0x1f, 0xffff, 0x1}, 0x6) write(r7, &(0x7f00000006c0)="3b000000010016", 0x7) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = syz_pidfd_open(r5, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) landlock_restrict_self(r9, 0x0) pidfd_send_signal(r8, 0x21, 0x0, 0x4) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x6}) 0s ago: executing program 0 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8110, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000540)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0xfffffffd, 0x800, 0xfffe, 0x3, 0x3a2c, 0x7, 0x0, 0x0, 0x152, 0x76a3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): 212.113417][ T6404] usb 2-1: Using ep0 maxpacket: 8 [ 212.118022][ T6404] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.118054][ T6404] usb 2-1: config 0 has no interface number 0 [ 212.118088][ T6404] usb 2-1: config 0 interface 1 has no altsetting 0 [ 212.120763][ T6404] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 212.120795][ T6404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.120817][ T6404] usb 2-1: Product: syz [ 212.120831][ T6404] usb 2-1: Manufacturer: syz [ 212.120846][ T6404] usb 2-1: SerialNumber: syz [ 212.190262][ T6404] usb 2-1: config 0 descriptor?? [ 212.346846][ T66] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 212.365164][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 212.402254][ T6404] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 212.535954][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.538276][ T10] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 212.538306][ T10] usb 5-1: config 114 has no interface number 0 [ 212.538355][ T10] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 212.538380][ T10] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 212.538403][ T10] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 212.538417][ T10] usb 5-1: config 114 interface 240 has no altsetting 0 [ 212.584225][ T10] usb 5-1: string descriptor 0 read error: -22 [ 212.584371][ T10] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 212.584392][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.599561][ T6521] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 212.600090][ T6521] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 212.618152][ T10] ir_usb 5-1:114.240: IR Dongle converter detected [ 212.774436][ T5731] usb 2-1: USB disconnect, device number 7 [ 212.807284][ T10] usb 5-1: IRDA class descriptor not found, device not bound [ 213.011808][ T5731] usb 5-1: USB disconnect, device number 8 [ 214.611697][ T6553] kAFS: unable to lookup cell '/' [ 217.329389][ T6572] virtio-fs: tag not found [ 218.411684][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 218.411732][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 218.411849][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 218.411947][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 218.412061][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 219.030924][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 219.030964][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 219.038287][ T6577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.043299][ T1356] wlan1: Trigger new scan to find an IBSS to join [ 219.337402][ T6584] netlink: 'syz.2.216': attribute type 15 has an invalid length. [ 222.282977][ T6404] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 222.353307][ T5626] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 222.463002][ T6404] usb 3-1: Using ep0 maxpacket: 8 [ 222.467117][ T6404] usb 3-1: unable to get BOS descriptor or descriptor too short [ 222.468761][ T6404] usb 3-1: config 100 has an invalid interface number: 130 but max is 0 [ 222.468795][ T6404] usb 3-1: config 100 has no interface number 0 [ 222.468841][ T6404] usb 3-1: config 100 interface 130 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 222.468867][ T6404] usb 3-1: config 100 interface 130 has no altsetting 0 [ 222.508965][ T6404] usb 3-1: string descriptor 0 read error: -22 [ 222.509113][ T6404] usb 3-1: New USB device found, idVendor=1b3d, idProduct=9305, bcdDevice= 8.60 [ 222.509136][ T6404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.534002][ T5626] usb 1-1: Using ep0 maxpacket: 16 [ 222.560207][ T5626] usb 1-1: unable to get BOS descriptor or descriptor too short [ 222.577933][ T5626] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 222.577965][ T5626] usb 1-1: config 13 has no interface number 0 [ 222.578016][ T5626] usb 1-1: config 13 interface 50 altsetting 158 bulk endpoint 0x8 has invalid maxpacket 16 [ 222.578044][ T5626] usb 1-1: config 13 interface 50 has no altsetting 0 [ 222.587044][ T6590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.602001][ T5626] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 222.602029][ T5626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.602048][ T5626] usb 1-1: Product: syz [ 222.602061][ T5626] usb 1-1: Manufacturer: syz [ 222.602074][ T5626] usb 1-1: SerialNumber: syz [ 222.653631][ T6592] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 222.671488][ T6404] ftdi_sio 3-1:100.130: FTDI USB Serial Device converter detected [ 223.202608][ T6404] ftdi_sio ttyUSB0: unknown device type: 0x860 [ 224.003092][ T12] wlan1: Trigger new scan to find an IBSS to join [ 224.465519][ T5626] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.465558][ T5626] usb 1-1: MIDIStreaming interface descriptor not found [ 226.946250][ T6404] usb 3-1: USB disconnect, device number 8 [ 226.961775][ T6404] ftdi_sio 3-1:100.130: device disconnected [ 227.133495][ T42] wlan1: Creating new IBSS network, BSSID da:86:2f:01:c6:bf [ 227.642230][ T5626] usb 1-1: USB disconnect, device number 15 [ 229.091246][ T6620] binder: 6617:6620 ioctl c00c620f 200000000000 returned -22 [ 229.533522][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 229.980246][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 230.439016][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 230.519633][ T10] usb 3-1: config 100 has an invalid interface number: 130 but max is 0 [ 230.519665][ T10] usb 3-1: config 100 has no interface number 0 [ 230.519719][ T10] usb 3-1: config 100 interface 130 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 230.519747][ T10] usb 3-1: config 100 interface 130 has no altsetting 0 [ 230.565835][ T10] usb 3-1: string descriptor 0 read error: -22 [ 230.566008][ T10] usb 3-1: New USB device found, idVendor=1b3d, idProduct=9305, bcdDevice= 8.60 [ 230.566030][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.233618][ T6622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.241635][ T10] ftdi_sio 3-1:100.130: FTDI USB Serial Device converter detected [ 231.295431][ T10] ftdi_sio ttyUSB0: unknown device type: 0x860 [ 234.145322][ T5626] usb 3-1: USB disconnect, device number 9 [ 234.214052][ T5626] ftdi_sio 3-1:100.130: device disconnected [ 234.404314][ T42] wlan1: Selected IBSS BSSID da:86:2f:01:c6:bf based on configured SSID [ 234.963270][ T5626] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 235.546831][ T5626] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.547356][ T5626] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 235.547451][ T5626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.850818][ T5626] usb 3-1: config 0 descriptor?? [ 235.865486][ T5626] pwc: Askey VC010 type 2 USB webcam detected. [ 235.962948][ T6667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.236'. [ 236.271372][ T6670] kAFS: No cell specified [ 236.520160][ T5626] pwc: recv_control_msg error -71 req 02 val 2700 [ 236.520668][ T5626] pwc: recv_control_msg error -71 req 02 val 2c00 [ 236.537784][ T5626] pwc: recv_control_msg error -71 req 04 val 1000 [ 236.541071][ T5626] pwc: recv_control_msg error -71 req 04 val 1300 [ 236.541477][ T5626] pwc: recv_control_msg error -71 req 04 val 1400 [ 236.542081][ T5626] pwc: recv_control_msg error -71 req 02 val 2000 [ 236.544881][ T5626] pwc: recv_control_msg error -71 req 02 val 2100 [ 236.545466][ T5626] pwc: recv_control_msg error -71 req 04 val 1500 [ 236.545995][ T5626] pwc: recv_control_msg error -71 req 02 val 2500 [ 236.548270][ T5626] pwc: recv_control_msg error -71 req 02 val 2400 [ 236.548787][ T5626] pwc: recv_control_msg error -71 req 02 val 2600 [ 236.549258][ T5626] pwc: recv_control_msg error -71 req 02 val 2900 [ 236.549722][ T5626] pwc: recv_control_msg error -71 req 02 val 2800 [ 236.550390][ T5626] pwc: recv_control_msg error -71 req 04 val 1100 [ 236.550854][ T5626] pwc: recv_control_msg error -71 req 04 val 1200 [ 236.567596][ T5626] pwc: Registered as video103. [ 236.571563][ T5626] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 236.953610][ T6404] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 237.410429][ T5626] usb 3-1: USB disconnect, device number 10 [ 237.496584][ T6404] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.496622][ T6404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.496650][ T6404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 237.496673][ T6404] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.496719][ T6404] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.496745][ T6404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.811427][ T6404] usb 5-1: config 0 descriptor?? [ 237.888801][ T6677] netlink: 84 bytes leftover after parsing attributes in process `syz.1.239'. [ 237.907883][ T6677] binder: 6676:6677 ioctl c00c620f 200000000000 returned -22 [ 238.076865][ T6681] capability: warning: `syz.3.242' uses deprecated v2 capabilities in a way that may be insecure [ 238.533807][ T6404] usbhid 5-1:0.0: can't add hid device: -71 [ 238.533940][ T6404] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 238.541407][ T6686] /dev/nbd1: Can't open blockdev [ 238.614626][ T6404] usb 5-1: USB disconnect, device number 9 [ 239.012991][ T5626] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 239.375361][ T1362] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 239.409406][ T5731] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 239.517282][ T6692] tmpfs: Unknown parameter '00000000000000000000' [ 239.797573][ T5731] usb 1-1: Using ep0 maxpacket: 16 [ 240.085334][ T5731] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 240.085367][ T5731] usb 1-1: config 4 has no interface number 0 [ 240.086097][ T5731] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 240.086116][ T5731] usb 1-1: config 4 interface 51 altsetting 2 endpoint 0x82 has invalid maxpacket 24896, setting to 1024 [ 240.086132][ T5731] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 240.086146][ T5731] usb 1-1: config 4 interface 51 has no altsetting 0 [ 240.134067][ T5626] usb 3-1: Using ep0 maxpacket: 8 [ 240.630786][ T1359] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 240.645194][ T5731] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 240.645228][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.645248][ T5731] usb 1-1: Product: syz [ 240.645264][ T5731] usb 1-1: Manufacturer: syz [ 240.645279][ T5731] usb 1-1: SerialNumber: syz [ 243.285636][ T5626] usb 3-1: unable to get BOS descriptor or descriptor too short [ 243.286740][ T5626] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 243.286778][ T5626] usb 3-1: can't read configurations, error -71 [ 243.478051][ T66] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 243.657863][ T5731] usb 1-1: can't set config #4, error -71 [ 243.680113][ T5731] usb 1-1: USB disconnect, device number 16 [ 246.915163][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.958232][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.142111][ T6723] netlink: 84 bytes leftover after parsing attributes in process `syz.0.253'. [ 248.199043][ T6724] binder: 6722:6724 ioctl c00c620f 200000000000 returned -22 [ 249.012168][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.076136][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.522980][ T5745] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 251.703046][ T5745] usb 3-1: Using ep0 maxpacket: 32 [ 251.705991][ T5745] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 251.706022][ T5745] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 251.706044][ T5745] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 251.706065][ T5745] usb 3-1: config 1 has no interface number 0 [ 251.706100][ T5745] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.706117][ T5745] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 251.706143][ T5745] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 251.706158][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.806375][ T5745] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 251.895183][ T2173] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.908635][ T2173] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.908689][ T2173] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.908724][ T2173] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.047857][ T5745] snd_usb_pod 3-1:1.1: set_interface failed [ 252.048649][ T5745] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 252.048965][ T5745] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 252.078520][ T5745] usb 3-1: USB disconnect, device number 13 [ 252.838980][ T6750] netlink: 84 bytes leftover after parsing attributes in process `syz.3.259'. [ 252.839040][ T6750] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 256.137880][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.137961][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.734167][ T6772] overlayfs: missing 'workdir' [ 259.340514][ T6785] netlink: 84 bytes leftover after parsing attributes in process `syz.4.270'. [ 259.382902][ T6785] binder: 6783:6785 ioctl c00c620f 200000000000 returned -22 [ 262.624010][ T5803] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 262.753347][ T5803] usb 1-1: device descriptor read/64, error -71 [ 263.043321][ T5803] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 263.202927][ T5803] usb 1-1: device descriptor read/64, error -71 [ 263.324935][ T5803] usb usb1-port1: attempt power cycle [ 263.683157][ T5803] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 263.709043][ T5803] usb 1-1: device descriptor read/8, error -71 [ 263.952980][ T5803] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 263.982859][ T5803] usb 1-1: device descriptor read/8, error -71 [ 264.094648][ T5803] usb usb1-port1: unable to enumerate USB device [ 264.145619][ T6824] netlink: 68 bytes leftover after parsing attributes in process `syz.2.283'. [ 264.152123][ T6824] binder: 6823:6824 ioctl c00c620f 200000000000 returned -22 [ 264.272958][ T5745] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 264.413079][ T5745] usb 4-1: device descriptor read/64, error -71 [ 264.467728][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 264.652938][ T5745] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 264.771135][ T6840] /dev/sg0: Can't lookup blockdev [ 264.840579][ T5745] usb 4-1: device descriptor read/64, error -71 [ 264.946979][ T5745] usb usb4-port1: attempt power cycle [ 269.135956][ T6860] netlink: 68 bytes leftover after parsing attributes in process `syz.1.295'. [ 269.142273][ T6860] binder: 6859:6860 ioctl c00c620f 200000000000 returned -22 [ 269.162925][ T5745] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 269.946217][ T5745] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 269.946260][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.946282][ T5745] usb 4-1: Product: syz [ 269.946296][ T5745] usb 4-1: Manufacturer: syz [ 269.946310][ T5745] usb 4-1: SerialNumber: syz [ 269.957389][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 270.880681][ T6877] bridge1: entered promiscuous mode [ 270.881693][ T6877] bridge1: entered allmulticast mode [ 272.642958][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 272.643019][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 272.643039][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 272.699290][ T6896] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 272.762525][ T5745] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 272.871391][ T5745] usb 4-1: USB disconnect, device number 12 [ 273.072642][ T1362] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 273.073021][ T3429] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 274.506874][ T1356] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 276.106554][ T6919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.310'. [ 276.106676][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 276.190055][ T6920] netlink: 56 bytes leftover after parsing attributes in process `syz.0.310'. [ 278.852288][ T6956] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 283.222891][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 284.372895][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 284.393689][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 284.393720][ T10] usb 1-1: config 0 has no interface number 0 [ 284.398371][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 284.398405][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.398427][ T10] usb 1-1: Product: syz [ 284.398441][ T10] usb 1-1: Manufacturer: syz [ 284.398455][ T10] usb 1-1: SerialNumber: syz [ 284.455109][ T10] usb 1-1: config 0 descriptor?? [ 285.001454][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 285.001491][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 285.174760][ T5746] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 285.322941][ T5746] usb 3-1: Using ep0 maxpacket: 8 [ 285.334025][ T5746] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.350123][ T5746] usb 3-1: config 100 has an invalid interface number: 130 but max is 0 [ 285.350155][ T5746] usb 3-1: config 100 has no interface number 0 [ 285.350625][ T5746] usb 3-1: config 100 interface 130 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 285.350657][ T5746] usb 3-1: config 100 interface 130 has no altsetting 0 [ 285.393362][ T5746] usb 3-1: string descriptor 0 read error: -22 [ 285.393907][ T5746] usb 3-1: New USB device found, idVendor=1b3d, idProduct=9305, bcdDevice= 8.60 [ 285.393935][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.489269][ T7007] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 285.521789][ T5746] ftdi_sio 3-1:100.130: FTDI USB Serial Device converter detected [ 285.563107][ T5746] ftdi_sio ttyUSB0: unknown device type: 0x860 [ 286.143141][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 286.143499][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 286.150196][ T10] usb 1-1: USB disconnect, device number 21 [ 287.961890][ T5745] usb 3-1: USB disconnect, device number 14 [ 287.995599][ T5745] ftdi_sio 3-1:100.130: device disconnected [ 288.272909][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 288.612890][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 289.009388][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.009421][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.009439][ T10] usb 5-1: Product: 㴔ৎ깯ê¦é¬žíŒŸæ—툥硚Å瓾뼵浬晻狓⨶⫲ㅬ擆ṫ袣侦ᎂ胣îŽìŠˆï£—愊躵緱梥୒껽쩲ᆰ瘙庽갅룳✗皢肤篈꘺áŠæ‚缳ྦ⑮랢쓜秔⇈℥魯氲鯩ԕᚈ쟗볬ç£èªƒ [ 289.009463][ T10] usb 5-1: Manufacturer: à·´è¡ï¹¯îŸ¯î½§ëº¢ç£±ç‡´ä»î™›é’帕췗俴骃曦阙늳ꇽ铹ุ㵛ꚲ艠䵨퉎ê´ë‰™ê•€åœ–奠볈慊딵㒲彘厹ë­áŒ™ï“™è¹´â›–ïµã”£ç´„ḓ긲ﾟè á—­è—©åŒ²î»°â¬¬âˆŠî«¼ì³—ौ㒗î‰ë…¶é¼ƒé‡¯ëŒîµŒî¼¾á¾‡î®šä’±ã¨›ìˆ´í›¯â‡çœêŒ€í±äˆŽé¦ší’鸸بã®ì´”ã«è¶šç«–⢢ë„3Ꚙ뺄芫벃邻훜紵켼審紿騳 [ 289.009493][ T10] usb 5-1: SerialNumber: syz [ 292.041937][ T10] usb 5-1: found format II with max.bitrate = 6230, frame size=2 [ 292.041957][ T10] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 292.051675][ T10] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 293.667731][ T10] usb 5-1: USB disconnect, device number 10 [ 295.766802][ T7050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.917857][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.962900][ T5746] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 296.344610][ T5746] usb 3-1: Using ep0 maxpacket: 32 [ 296.353492][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'. [ 296.353548][ T5746] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.353599][ T5746] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.353626][ T5746] usb 3-1: config 0 interface 0 has no altsetting 0 [ 296.353660][ T5746] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 296.353683][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.443808][ T5746] usb 3-1: config 0 descriptor?? [ 297.971372][ T1019] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 298.118781][ T36] audit: type=1326 audit(1781524962.771:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7070 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46808dce59 code=0x7ffc0000 [ 298.129595][ T36] audit: type=1326 audit(1781524962.771:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7070 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46808dce59 code=0x7ffc0000 [ 298.129655][ T36] audit: type=1326 audit(1781524962.781:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7070 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46808dce59 code=0x7ffc0000 [ 298.130054][ T36] audit: type=1326 audit(1781524962.781:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7070 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46808dce59 code=0x7ffc0000 [ 298.130546][ T36] audit: type=1326 audit(1781524962.781:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7070 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f46808dce59 code=0x7ffc0000 [ 298.131022][ T36] audit: type=1326 audit(1781524962.781:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7070 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46808dce59 code=0x7ffc0000 [ 298.140503][ T36] audit: type=1326 audit(1781524962.781:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7070 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46808dce59 code=0x7ffc0000 [ 298.140568][ T36] audit: type=1326 audit(1781524962.791:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7070 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46808dce59 code=0x7ffc0000 [ 298.140620][ T36] audit: type=1326 audit(1781524962.791:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7070 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f46808dce59 code=0x7ffc0000 [ 298.140672][ T36] audit: type=1326 audit(1781524962.791:12): auid=4294967295 uid=16832 gid=0 ses=4294967295 subj=_ pid=7070 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46808dce59 code=0x7ffc0000 [ 298.612956][ T5746] usbhid 3-1:0.0: can't add hid device: -71 [ 298.613067][ T5746] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 298.819103][ T5746] usb 3-1: USB disconnect, device number 15 [ 304.608919][ T3327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.732887][ T5745] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 304.902869][ T5745] usb 3-1: Using ep0 maxpacket: 8 [ 304.906787][ T5745] usb 3-1: unable to get BOS descriptor or descriptor too short [ 304.908352][ T5745] usb 3-1: config 100 has an invalid interface number: 130 but max is 0 [ 304.908380][ T5745] usb 3-1: config 100 has no interface number 0 [ 304.908426][ T5745] usb 3-1: config 100 interface 130 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 304.908453][ T5745] usb 3-1: config 100 interface 130 has no altsetting 0 [ 304.953414][ T5745] usb 3-1: string descriptor 0 read error: -22 [ 304.954498][ T5745] usb 3-1: New USB device found, idVendor=1b3d, idProduct=9305, bcdDevice= 8.60 [ 304.954528][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.975873][ T7106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 304.994180][ T5745] ftdi_sio 3-1:100.130: FTDI USB Serial Device converter detected [ 305.022909][ T5745] ftdi_sio ttyUSB0: unknown device type: 0x860 [ 305.153782][ T7113] 9p: Bad value for 'rfdno' [ 306.812910][ T9] usb 3-1: USB disconnect, device number 16 [ 306.866277][ T9] ftdi_sio 3-1:100.130: device disconnected [ 307.170350][ T3327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 307.422900][ T5746] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 307.654203][ T5746] usb 2-1: Using ep0 maxpacket: 32 [ 307.666506][ T5746] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.666579][ T5746] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.666609][ T5746] usb 2-1: config 0 interface 0 has no altsetting 0 [ 307.666646][ T5746] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 307.666668][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.772419][ T5746] usb 2-1: config 0 descriptor?? [ 310.070577][ T5746] usbhid 2-1:0.0: can't add hid device: -71 [ 310.070733][ T5746] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 310.123002][ T5746] usb 2-1: USB disconnect, device number 8 [ 311.335736][ T7146] netlink: 84 bytes leftover after parsing attributes in process `syz.2.373'. [ 311.335789][ T7146] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 314.743193][ T7157] virtio-fs: tag not found [ 317.285386][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.285469][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.475409][ T5879] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 319.652974][ T5879] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 319.653006][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.653025][ T5879] usb 2-1: Product: syz [ 319.653039][ T5879] usb 2-1: Manufacturer: syz [ 319.653052][ T5879] usb 2-1: SerialNumber: syz [ 320.130145][ T7197] netlink: 84 bytes leftover after parsing attributes in process `syz.4.385'. [ 320.130316][ T7197] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 320.289375][ T5879] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 320.340067][ T5745] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 321.956048][ T5745] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 323.000254][ T50] usb 2-1: USB disconnect, device number 9 [ 324.026373][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.082319][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.098202][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 324.134348][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 324.135333][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.210708][ T5745] ath9k_htc: Failed to initialize the device [ 324.232153][ T50] usb 2-1: ath9k_htc: USB layer deinitialized [ 325.833184][ T7217] virtio-fs: tag not found [ 326.496098][ T5633] Bluetooth: hci5: command tx timeout [ 328.930626][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 329.023177][ T5633] Bluetooth: hci5: command tx timeout [ 331.052968][ T5633] Bluetooth: hci5: command tx timeout [ 333.245162][ T5633] Bluetooth: hci5: command tx timeout [ 335.119305][ T7245] netlink: 84 bytes leftover after parsing attributes in process `syz.1.398'. [ 335.119333][ T7245] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 335.179871][ T7204] lo speed is unknown, defaulting to 1000 [ 336.033342][ T5745] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 336.183960][ T5745] usb 5-1: Using ep0 maxpacket: 32 [ 336.192369][ T5745] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 336.192413][ T5745] usb 5-1: can't read configurations, error -22 [ 336.342962][ T5745] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 336.497144][ T5745] usb 5-1: Using ep0 maxpacket: 32 [ 336.531666][ T5745] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 336.531713][ T5745] usb 5-1: can't read configurations, error -22 [ 336.547406][ T5745] usb usb5-port1: attempt power cycle [ 336.763755][ T3336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 336.892934][ T5745] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 336.913607][ T5745] usb 5-1: Using ep0 maxpacket: 32 [ 336.928282][ T5745] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 336.928322][ T5745] usb 5-1: can't read configurations, error -22 [ 336.961349][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.961601][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.961820][ T7204] bridge_slave_0: entered allmulticast mode [ 336.978517][ T7204] bridge_slave_0: entered promiscuous mode [ 336.995611][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.995786][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.996025][ T7204] bridge_slave_1: entered allmulticast mode [ 336.999074][ T7204] bridge_slave_1: entered promiscuous mode [ 337.063001][ T5745] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 337.123908][ T5745] usb 5-1: Using ep0 maxpacket: 32 [ 337.134646][ T5745] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 337.134684][ T5745] usb 5-1: can't read configurations, error -22 [ 337.136355][ T5745] usb usb5-port1: unable to enumerate USB device [ 337.147357][ T7204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.156729][ T7204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.296839][ T7204] team0: Port device team_slave_0 added [ 337.310383][ T7204] team0: Port device team_slave_1 added [ 337.511481][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.511500][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.511528][ T7204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.516075][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.516091][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.516118][ T7204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.850682][ T7204] hsr_slave_0: entered promiscuous mode [ 337.860117][ T7204] hsr_slave_1: entered promiscuous mode [ 337.861260][ T7204] debugfs: 'hsr0' already exists in 'hsr' [ 337.861285][ T7204] Cannot create hsr debugfs directory [ 337.978707][ T7273] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 337.978744][ T7273] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 337.978759][ T7273] netlink: 225 bytes leftover after parsing attributes in process `syz.2.404'. [ 338.505422][ T3327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 340.594112][ T7286] FAULT_INJECTION: forcing a failure. [ 340.594112][ T7286] name failslab, interval 1, probability 0, space 0, times 0 [ 340.594161][ T7286] CPU: 1 UID: 0 PID: 7286 Comm: syz.4.408 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 340.594191][ T7286] Tainted: [L]=SOFTLOCKUP [ 340.594199][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.594211][ T7286] Call Trace: [ 340.594219][ T7286] [ 340.594227][ T7286] dump_stack_lvl+0xe8/0x150 [ 340.594259][ T7286] should_fail_ex+0x467/0x600 [ 340.594296][ T7286] should_failslab+0xa8/0x100 [ 340.594325][ T7286] __kmalloc_noprof+0xdf/0x7a0 [ 340.594350][ T7286] ? __pfx_dynamic_dname+0x10/0x10 [ 340.594382][ T7286] ? tomoyo_encode+0x2ad/0x570 [ 340.594412][ T7286] tomoyo_encode+0x2ad/0x570 [ 340.594442][ T7286] tomoyo_realpath_from_path+0x5fa/0x640 [ 340.594478][ T7286] ? tomoyo_path_number_perm+0x219/0x5f0 [ 340.594511][ T7286] tomoyo_path_number_perm+0x246/0x5f0 [ 340.594546][ T7286] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 340.594577][ T7286] ? __lock_acquire+0x683/0x2cc0 [ 340.594609][ T7286] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.594644][ T7286] ? hook_file_ioctl+0x1f3/0x5d0 [ 340.594695][ T7286] ? __fget_files+0x2a/0x420 [ 340.594719][ T7286] ? __fget_files+0x2a/0x420 [ 340.594738][ T7286] ? __fget_files+0x3a8/0x420 [ 340.594757][ T7286] ? __fget_files+0x2a/0x420 [ 340.594781][ T7286] security_file_ioctl+0xc3/0x2a0 [ 340.594817][ T7286] __se_sys_ioctl+0x47/0x170 [ 340.594844][ T7286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.594868][ T7286] do_syscall_64+0x174/0x580 [ 340.594898][ T7286] ? trace_irq_disable+0x3b/0x140 [ 340.594923][ T7286] ? clear_bhb_loop+0x40/0x90 [ 340.594950][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.594971][ T7286] RIP: 0033:0x7f6e0e53ce59 [ 340.594991][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.595009][ T7286] RSP: 002b:00007f6e0c78e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.595031][ T7286] RAX: ffffffffffffffda RBX: 00007f6e0e7b5fa0 RCX: 00007f6e0e53ce59 [ 340.595046][ T7286] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 340.595059][ T7286] RBP: 00007f6e0c78e090 R08: 0000000000000000 R09: 0000000000000000 [ 340.595072][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.595084][ T7286] R13: 00007f6e0e7b6038 R14: 00007f6e0e7b5fa0 R15: 00007fffd3a29308 [ 340.595128][ T7286] [ 340.610764][ T7286] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.100693][ T7204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 343.671884][ T7204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.686796][ T7204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 343.882311][ T7204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.011908][ T7204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.329988][ T7204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.962252][ T7204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 345.059771][ T7204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.667004][ T7204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.044084][ T7204] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.074197][ T1372] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.078954][ T1372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.135610][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.138800][ T1356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.508241][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.065127][ T7204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.589966][ T7204] veth0_vlan: entered promiscuous mode [ 349.616860][ T7204] veth1_vlan: entered promiscuous mode [ 349.697760][ T7204] veth0_macvtap: entered promiscuous mode [ 349.712344][ T7204] veth1_macvtap: entered promiscuous mode [ 349.844922][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.872590][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.891616][ T1372] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.929115][ T1372] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.929537][ T1372] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.929867][ T1372] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.170456][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 350.170547][ T36] audit: type=1326 audit(1781525014.811:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.0.415" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4b3bce59 code=0x7ffc0000 [ 350.170593][ T36] audit: type=1326 audit(1781525014.811:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.0.415" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4b3bce59 code=0x7ffc0000 [ 350.170633][ T36] audit: type=1326 audit(1781525014.821:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.0.415" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4b3bce59 code=0x7ffc0000 [ 350.170671][ T36] audit: type=1326 audit(1781525014.821:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.0.415" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f1c4b3bce59 code=0x7ffc0000 [ 350.170710][ T36] audit: type=1326 audit(1781525014.821:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.0.415" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4b3bce59 code=0x7ffc0000 [ 350.170751][ T36] audit: type=1326 audit(1781525014.821:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.0.415" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4b3bce59 code=0x7ffc0000 [ 350.170790][ T36] audit: type=1326 audit(1781525014.821:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.0.415" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4b3bce59 code=0x7ffc0000 [ 350.170829][ T36] audit: type=1326 audit(1781525014.821:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.0.415" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4b3bce59 code=0x7ffc0000 [ 350.170870][ T36] audit: type=1326 audit(1781525014.821:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.0.415" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c4b3bce59 code=0x7ffc0000 [ 350.170910][ T36] audit: type=1326 audit(1781525014.821:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.0.415" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4b3bce59 code=0x7ffc0000 [ 351.997599][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.997625][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.182474][ T3327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.182500][ T3327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.412377][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.460896][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.496517][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.520855][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.521727][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.042989][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 354.202981][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 354.205853][ T31] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 354.205887][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.306532][ T31] pvrusb2: Hardware description: Terratec Grabster AV400 [ 354.306554][ T31] pvrusb2: ********** [ 354.306562][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 354.306595][ T31] pvrusb2: Important functionality might not be entirely working. [ 354.306604][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 354.306616][ T31] pvrusb2: ********** [ 354.962271][ T2393] pvrusb2: Invalid write control endpoint [ 355.484490][ T7338] lo speed is unknown, defaulting to 1000 [ 355.605173][ T5633] Bluetooth: hci3: command tx timeout [ 356.565956][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 356.727322][ T2393] pvrusb2: Invalid write control endpoint [ 356.727337][ T2393] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 356.727347][ T2393] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 356.727354][ T2393] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 356.727362][ T2393] pvrusb2: Device being rendered inoperable [ 356.784090][ T5746] usb 6-1: USB disconnect, device number 2 [ 356.834654][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 356.838612][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 356.842081][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 356.867018][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.907753][ T2393] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 356.912684][ T2393] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 357.492638][ T2393] pvrusb2: Attached sub-driver cx25840 [ 357.492658][ T2393] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 357.492668][ T2393] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 357.702924][ T5623] Bluetooth: hci3: command tx timeout [ 359.043162][ T5623] Bluetooth: hci6: command tx timeout [ 359.197932][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.203880][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.204541][ T7338] bridge_slave_0: entered allmulticast mode [ 359.230130][ T7338] bridge_slave_0: entered promiscuous mode [ 359.250448][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.250781][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.251044][ T7338] bridge_slave_1: entered allmulticast mode [ 359.329463][ T7338] bridge_slave_1: entered promiscuous mode [ 359.763252][ T5623] Bluetooth: hci3: command tx timeout [ 360.926250][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.968229][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.973214][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.980199][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.992395][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.123177][ T5623] Bluetooth: hci6: command tx timeout [ 361.153014][ T7361] lo speed is unknown, defaulting to 1000 [ 361.210213][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.299840][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.688467][ T7338] team0: Port device team_slave_0 added [ 361.794685][ T7338] team0: Port device team_slave_1 added [ 362.063006][ T5623] Bluetooth: hci3: command tx timeout [ 362.163870][ T3327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 363.137528][ T5623] Bluetooth: hci7: command tx timeout [ 363.205268][ T5623] Bluetooth: hci6: command tx timeout [ 365.647655][ T5623] Bluetooth: hci7: command tx timeout [ 365.647694][ T5623] Bluetooth: hci6: command tx timeout [ 366.203660][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.203680][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.203709][ T7338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.349403][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.349423][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.349451][ T7338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.357604][ T7338] hsr_slave_0: entered promiscuous mode [ 367.362179][ T7338] hsr_slave_1: entered promiscuous mode [ 367.384510][ T7338] debugfs: 'hsr0' already exists in 'hsr' [ 367.384542][ T7338] Cannot create hsr debugfs directory [ 367.682871][ T5633] Bluetooth: hci7: command tx timeout [ 367.792519][ T1359] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.738978][ T1356] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.765354][ T5633] Bluetooth: hci7: command tx timeout [ 369.967178][ T7423] binder: 7421:7423 ioctl c00c620f 200000000000 returned -22 [ 370.023752][ T7424] netlink: 60 bytes leftover after parsing attributes in process `syz.0.430'. [ 370.023771][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 370.187541][ T7272] bridge0: port 3(syz_tun) entered disabled state [ 370.590454][ T7272] syz_tun (unregistering): left allmulticast mode [ 370.590494][ T7272] syz_tun (unregistering): left promiscuous mode [ 370.590610][ T7272] bridge0: port 3(syz_tun) entered disabled state [ 371.725016][ T7386] lo speed is unknown, defaulting to 1000 [ 375.416521][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 375.416546][ T36] audit: type=1326 audit(1781525040.061:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.5.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0044239b51 code=0x7ffc0000 [ 375.416674][ T36] audit: type=1326 audit(1781525040.071:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.5.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f004427dc49 code=0x7ffc0000 [ 375.426186][ T36] audit: type=1326 audit(1781525040.081:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.5.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0044239bbb code=0x7ffc0000 [ 375.426532][ T36] audit: type=1326 audit(1781525040.081:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.5.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f00442392ac code=0x7ffc0000 [ 375.426826][ T36] audit: type=1326 audit(1781525040.081:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.5.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f004423930e code=0x7ffc0000 [ 375.426879][ T36] audit: type=1326 audit(1781525040.081:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.5.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004427ce59 code=0x7ffc0000 [ 375.427058][ T36] audit: type=1326 audit(1781525040.081:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.5.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f004423d68e code=0x7ffc0000 [ 375.427429][ T36] audit: type=1326 audit(1781525040.081:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.5.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004427ce59 code=0x7ffc0000 [ 375.428607][ T36] audit: type=1326 audit(1781525040.081:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.5.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f004423d68e code=0x7ffc0000 [ 375.428774][ T7441] FAULT_INJECTION: forcing a failure. [ 375.428774][ T7441] name failslab, interval 1, probability 0, space 0, times 0 [ 375.428806][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.5.435 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 375.428832][ T7441] Tainted: [L]=SOFTLOCKUP [ 375.428838][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.428849][ T7441] Call Trace: [ 375.428882][ T7441] [ 375.428930][ T7441] dump_stack_lvl+0xe8/0x150 [ 375.429062][ T7441] should_fail_ex+0x467/0x600 [ 375.429170][ T7441] should_failslab+0xa8/0x100 [ 375.429246][ T7441] kmem_cache_alloc_noprof+0x87/0x680 [ 375.429291][ T7441] ? audit_log_start+0x108/0xa30 [ 375.429435][ T7441] audit_log_start+0x108/0xa30 [ 375.429468][ T7441] ? __pfx_audit_log_start+0x10/0x10 [ 375.429493][ T7441] ? __lock_acquire+0x683/0x2cc0 [ 375.429640][ T7441] ? get_pid_task+0x20/0x1f0 [ 375.429680][ T7441] ? get_pid_task+0x20/0x1f0 [ 375.429701][ T7441] ? get_pid_task+0x20/0x1f0 [ 375.429734][ T7441] audit_seccomp+0x63/0x190 [ 375.429765][ T7441] __seccomp_filter+0xd14/0x1e00 [ 375.429831][ T7441] ? __pfx___seccomp_filter+0x10/0x10 [ 375.429855][ T7441] ? lockdep_hardirqs_on+0x7a/0x110 [ 375.430030][ T7441] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 375.430079][ T7441] ? rt_mutex_slowunlock+0x1cb/0x300 [ 375.430100][ T7441] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 375.430131][ T7441] ? fput+0xa0/0xd0 [ 375.430215][ T7441] ? __pfx_ksys_write+0x10/0x10 [ 375.430242][ T7441] ? __secure_computing+0xe7/0x2b0 [ 375.430268][ T7441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.430305][ T7441] do_syscall_64+0x10e/0x580 [ 375.430349][ T7441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.430378][ T7441] ? clear_bhb_loop+0x40/0x90 [ 375.430402][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.430421][ T7441] RIP: 0033:0x7f004427ce59 [ 375.430461][ T7441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.430483][ T7441] RSP: 002b:00007f00424ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 375.430525][ T7441] RAX: ffffffffffffffda RBX: 00007f00444f6090 RCX: 00007f004427ce59 [ 375.430539][ T7441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.430550][ T7441] RBP: 00007f00424ad090 R08: 0000000000000000 R09: 0000000000000000 [ 375.430561][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.430571][ T7441] R13: 00007f00444f6128 R14: 00007f00444f6090 R15: 00007fff3804b298 [ 375.430601][ T7441] [ 375.430641][ T7441] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 376.388507][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.388655][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.391403][ T7361] bridge_slave_0: entered allmulticast mode [ 376.428113][ T7361] bridge_slave_0: entered promiscuous mode [ 376.541834][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.541980][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.542215][ T7361] bridge_slave_1: entered allmulticast mode [ 376.586280][ T7361] bridge_slave_1: entered promiscuous mode [ 376.847364][ T7361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.564447][ T7361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.841231][ T7448] binder: 7447:7448 ioctl c00c620f 200000000000 returned -22 [ 378.732447][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.732530][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.114083][ T7361] team0: Port device team_slave_0 added [ 379.194098][ T7361] team0: Port device team_slave_1 added [ 379.664526][ T7454] netlink: 60 bytes leftover after parsing attributes in process `syz.5.439'. [ 379.664646][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.439'. [ 380.818494][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.818513][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.818539][ T7361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.931922][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.931941][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.931971][ T7361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.123600][ T7338] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 381.446426][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.613850][ T7338] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 382.083871][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.108820][ T7338] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 382.296819][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.461472][ T7338] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.568412][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.105205][ T7361] hsr_slave_0: entered promiscuous mode [ 383.106893][ T7361] hsr_slave_1: entered promiscuous mode [ 383.108062][ T7361] debugfs: 'hsr0' already exists in 'hsr' [ 383.108090][ T7361] Cannot create hsr debugfs directory [ 383.213810][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.213958][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.214225][ T7386] bridge_slave_0: entered allmulticast mode [ 383.221021][ T7386] bridge_slave_0: entered promiscuous mode [ 383.601777][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.601924][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.602143][ T7386] bridge_slave_1: entered allmulticast mode [ 383.648618][ T7386] bridge_slave_1: entered promiscuous mode [ 384.045180][ T7386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.144312][ T7386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.854456][ T7386] team0: Port device team_slave_0 added [ 385.880783][ T7386] team0: Port device team_slave_1 added [ 386.059184][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.059204][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.059231][ T7386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.134450][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.134469][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.134499][ T7386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.020783][ T7497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.448'. [ 387.020802][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.448'. [ 387.073186][ T7498] netlink: 56 bytes leftover after parsing attributes in process `syz.0.448'. [ 387.077063][ T7386] hsr_slave_0: entered promiscuous mode [ 387.078814][ T7386] hsr_slave_1: entered promiscuous mode [ 387.079964][ T7386] debugfs: 'hsr0' already exists in 'hsr' [ 387.079992][ T7386] Cannot create hsr debugfs directory [ 387.092971][ T5746] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 387.396020][ T5746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.396057][ T5746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.396097][ T5746] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 387.396121][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.404824][ T5746] usb 6-1: config 0 descriptor?? [ 388.054880][ T5746] usb 6-1: string descriptor 0 read error: -22 [ 388.366015][ T7495] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 388.469529][ T5746] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 389.311412][ T7503] netlink: 128 bytes leftover after parsing attributes in process `syz.0.450'. [ 389.311441][ T7503] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 390.044542][ T7361] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 390.226749][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.308310][ T7361] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 390.621747][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.710979][ T7361] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 391.417541][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.615310][ T7361] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 392.215529][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.633411][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.947823][ T7338] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.196953][ T3380] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.197205][ T3380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.289543][ T1019] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 393.630118][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.630201][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.534675][ T7386] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 394.973667][ T7386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.042396][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.165937][ T7386] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 397.639917][ T7386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.724695][ T7386] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 397.991027][ T7386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.019320][ T7386] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 398.277233][ T7386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.441334][ T7361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.790571][ T7361] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.926442][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.926600][ T7504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.985807][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.986036][ T7504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.510317][ T7386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.539480][ T4363] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 400.100673][ T7386] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.119347][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.121154][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.212588][ T3380] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.234478][ T3380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.967322][ T1372] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 402.559024][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 402.610860][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 402.624943][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 402.659787][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 402.660802][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 403.041121][ T7338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.803531][ T59] Bluetooth: hci1: command tx timeout [ 405.264350][ T7361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.848579][ T7386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.180228][ T7552] lo speed is unknown, defaulting to 1000 [ 406.311516][ T6404] usb 6-1: USB disconnect, device number 3 [ 406.439988][ T7338] veth0_vlan: entered promiscuous mode [ 406.881122][ T7338] veth1_vlan: entered promiscuous mode [ 406.891392][ T59] Bluetooth: hci1: command tx timeout [ 407.024449][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 407.392469][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.403898][ T7596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.458'. [ 408.360650][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.550032][ T7606] IPv6: sit1: Disabled Multicast RS [ 408.973124][ T59] Bluetooth: hci1: command tx timeout [ 409.939379][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.998740][ T7338] veth0_macvtap: entered promiscuous mode [ 410.555253][ T7338] veth1_macvtap: entered promiscuous mode [ 411.045986][ T59] Bluetooth: hci1: command tx timeout [ 411.085265][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.480352][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.482643][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.499867][ T7552] bridge_slave_0: entered allmulticast mode [ 411.533764][ T7552] bridge_slave_0: entered promiscuous mode [ 411.876257][ T7361] veth0_vlan: entered promiscuous mode [ 411.899896][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.900067][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.901269][ T7552] bridge_slave_1: entered allmulticast mode [ 411.944632][ T7552] bridge_slave_1: entered promiscuous mode [ 411.949608][ T7386] veth0_vlan: entered promiscuous mode [ 411.958375][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.545174][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.568578][ T7504] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.671976][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.677313][ T7504] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.679669][ T7361] veth1_vlan: entered promiscuous mode [ 412.781583][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.831541][ T7386] veth1_vlan: entered promiscuous mode [ 412.850521][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.920588][ T7552] team0: Port device team_slave_0 added [ 412.959325][ T7552] team0: Port device team_slave_1 added [ 413.135016][ T7624] netlink: 860 bytes leftover after parsing attributes in process `syz.0.463'. [ 413.601412][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.650228][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.652439][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.691844][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.721225][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.996853][ T66] bridge_slave_1: left allmulticast mode [ 413.997062][ T66] bridge_slave_1: left promiscuous mode [ 414.034259][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.040382][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 414.341348][ T66] bridge_slave_0: left allmulticast mode [ 414.341391][ T66] bridge_slave_0: left promiscuous mode [ 414.341861][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.538707][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.623226][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.626083][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.627654][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.628676][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.768109][ T5633] Bluetooth: hci2: command tx timeout [ 417.765894][ T5633] Bluetooth: hci4: command tx timeout [ 417.826610][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.843104][ T5633] Bluetooth: hci2: command tx timeout [ 417.851744][ T66] bond0 (unregistering): Released all slaves [ 418.961587][ T7631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.464'. [ 418.961617][ T7631] netlink: 2 bytes leftover after parsing attributes in process `syz.0.464'. [ 419.724936][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.724956][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.724986][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.847198][ T5633] Bluetooth: hci4: command tx timeout [ 419.892156][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.892178][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.892208][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.922973][ T5633] Bluetooth: hci2: command tx timeout [ 420.928384][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 420.981462][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.034716][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.072920][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.074911][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 421.935480][ T5633] Bluetooth: hci4: command tx timeout [ 422.012750][ T5633] Bluetooth: hci2: command tx timeout [ 423.123116][ T5633] Bluetooth: hci5: command tx timeout [ 423.226568][ T7552] hsr_slave_0: entered promiscuous mode [ 423.227967][ T7552] hsr_slave_1: entered promiscuous mode [ 423.228872][ T7552] debugfs: 'hsr0' already exists in 'hsr' [ 423.228897][ T7552] Cannot create hsr debugfs directory [ 423.814077][ T7665] netlink: 128 bytes leftover after parsing attributes in process `syz.0.466'. [ 423.814096][ T7665] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 424.003379][ T5633] Bluetooth: hci4: command tx timeout [ 424.725140][ T3327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 425.203067][ T5633] Bluetooth: hci5: command tx timeout [ 425.905553][ T7626] lo speed is unknown, defaulting to 1000 [ 427.284456][ T5633] Bluetooth: hci5: command tx timeout [ 427.787075][ T7634] lo speed is unknown, defaulting to 1000 [ 428.153225][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 428.468112][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.470'. [ 428.500743][ T101] IPVS: starting estimator thread 0... [ 428.668347][ T7699] IPVS: using max 9 ests per chain, 21600 per kthread [ 428.883317][ T7652] lo speed is unknown, defaulting to 1000 [ 429.002908][ T66] hsr_slave_0: left promiscuous mode [ 429.155026][ T66] hsr_slave_1: left promiscuous mode [ 429.155989][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.156083][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.185752][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.185778][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.373188][ T5633] Bluetooth: hci5: command tx timeout [ 429.496038][ T66] veth1_macvtap: left promiscuous mode [ 429.496396][ T66] veth0_macvtap: left promiscuous mode [ 429.528148][ T66] veth1_vlan: left promiscuous mode [ 429.532635][ T66] veth0_vlan: left promiscuous mode [ 431.388827][ T1372] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 432.056053][ T3429] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 437.146305][ T66] team0 (unregistering): Port device team_slave_1 removed [ 437.253880][ T66] team0 (unregistering): Port device team_slave_0 removed [ 440.179727][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.179813][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.758956][ T7552] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 442.673683][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.721627][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 442.722080][ T7552] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 442.778541][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.828887][ T7552] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 442.924167][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.065929][ T7552] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 443.254533][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.044578][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.044723][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.044986][ T7634] bridge_slave_0: entered allmulticast mode [ 444.087595][ T7634] bridge_slave_0: entered promiscuous mode [ 444.106389][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.107841][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.108245][ T7626] bridge_slave_0: entered allmulticast mode [ 444.111590][ T7626] bridge_slave_0: entered promiscuous mode [ 444.170202][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.170350][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.170613][ T7634] bridge_slave_1: entered allmulticast mode [ 444.232720][ T7634] bridge_slave_1: entered promiscuous mode [ 444.234172][ T7626] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.234306][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.234499][ T7626] bridge_slave_1: entered allmulticast mode [ 444.237817][ T7626] bridge_slave_1: entered promiscuous mode [ 445.104029][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.132240][ T7626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.590491][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.798859][ T7626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.333337][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.333574][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.333895][ T7652] bridge_slave_0: entered allmulticast mode [ 446.340886][ T7652] bridge_slave_0: entered promiscuous mode [ 446.416559][ T7634] team0: Port device team_slave_0 added [ 446.421136][ T7626] team0: Port device team_slave_0 added [ 446.457840][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.458804][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.459131][ T7652] bridge_slave_1: entered allmulticast mode [ 446.484686][ T7652] bridge_slave_1: entered promiscuous mode [ 446.517393][ T7634] team0: Port device team_slave_1 added [ 446.538238][ T7626] team0: Port device team_slave_1 added [ 447.040467][ T7652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.055777][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.055797][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.055826][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.114711][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.114730][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.114760][ T7626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.191017][ T7652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.192430][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.192448][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.192476][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.357284][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 447.359075][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.359092][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.359122][ T7626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.695224][ T7652] team0: Port device team_slave_0 added [ 447.701233][ T7652] team0: Port device team_slave_1 added [ 448.156040][ T7634] hsr_slave_0: entered promiscuous mode [ 448.156998][ T7634] hsr_slave_1: entered promiscuous mode [ 448.192847][ T7626] hsr_slave_0: entered promiscuous mode [ 448.194453][ T7626] hsr_slave_1: entered promiscuous mode [ 448.195350][ T7626] debugfs: 'hsr0' already exists in 'hsr' [ 448.195368][ T7626] Cannot create hsr debugfs directory [ 448.197902][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.197916][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.197941][ T7652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.280946][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.280966][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.280992][ T7652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.517522][ T7652] hsr_slave_0: entered promiscuous mode [ 450.519329][ T7652] hsr_slave_1: entered promiscuous mode [ 450.520590][ T7652] debugfs: 'hsr0' already exists in 'hsr' [ 450.520619][ T7652] Cannot create hsr debugfs directory [ 451.097372][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 451.328571][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.180734][ T7552] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.181384][ T7822] kAFS: No cell specified [ 452.197906][ T1359] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.198104][ T1359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.236213][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.236360][ T7504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.004761][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 454.400194][ T66] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.168547][ T66] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.854542][ T3327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 455.949033][ T66] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.767816][ T66] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.842518][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 456.966128][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.085995][ T7552] veth0_vlan: entered promiscuous mode [ 458.170858][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 458.184278][ T7552] veth1_vlan: entered promiscuous mode [ 458.467801][ T66] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.142640][ T66] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.546013][ T7552] veth0_macvtap: entered promiscuous mode [ 459.569311][ T7552] veth1_macvtap: entered promiscuous mode [ 459.779952][ T66] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.929751][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 460.083405][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.120580][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.338445][ T66] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.410327][ T55] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.437441][ T55] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.437621][ T55] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.437664][ T55] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.720760][ T1359] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 462.968744][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.979598][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 463.012203][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 463.018944][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 463.027808][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 463.535322][ T1359] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 463.965768][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 464.235137][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 465.212914][ T5633] Bluetooth: hci3: command tx timeout [ 467.282897][ T5633] Bluetooth: hci3: command tx timeout [ 468.059740][ T7937] lo speed is unknown, defaulting to 1000 [ 469.363149][ T5633] Bluetooth: hci3: command tx timeout [ 471.442837][ T5633] Bluetooth: hci3: command tx timeout [ 472.383416][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.385003][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.385329][ T7937] bridge_slave_0: entered allmulticast mode [ 472.391872][ T7937] bridge_slave_0: entered promiscuous mode [ 472.435536][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.435755][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.436026][ T7937] bridge_slave_1: entered allmulticast mode [ 472.438906][ T7937] bridge_slave_1: entered promiscuous mode [ 472.520686][ T7937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.538887][ T7937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.604901][ T7937] team0: Port device team_slave_0 added [ 472.609146][ T7937] team0: Port device team_slave_1 added [ 472.689133][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.689152][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.689187][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.691512][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.691528][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.691552][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.752955][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.494'. [ 472.964654][ T7937] hsr_slave_0: entered promiscuous mode [ 472.966374][ T7937] hsr_slave_1: entered promiscuous mode [ 472.967530][ T7937] debugfs: 'hsr0' already exists in 'hsr' [ 472.967557][ T7937] Cannot create hsr debugfs directory [ 474.427770][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 474.478977][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 474.503287][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 474.506244][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 474.533116][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 475.500954][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 475.573353][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 475.612403][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 475.629621][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 475.630611][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 476.803064][ T5633] Bluetooth: hci1: command tx timeout [ 477.764500][ T5633] Bluetooth: hci6: command tx timeout [ 478.882965][ T5633] Bluetooth: hci1: command tx timeout [ 479.856747][ T5633] Bluetooth: hci6: command tx timeout [ 480.332201][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 480.388644][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 480.391659][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 480.409261][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 480.412082][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 480.963830][ T5633] Bluetooth: hci1: command tx timeout [ 481.923250][ T5633] Bluetooth: hci6: command tx timeout [ 482.644849][ T5633] Bluetooth: hci7: command tx timeout [ 483.011638][ T8016] lo speed is unknown, defaulting to 1000 [ 483.043123][ T5633] Bluetooth: hci1: command tx timeout [ 483.169673][ T5633] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 483.201010][ T8022] lo speed is unknown, defaulting to 1000 [ 484.004105][ T5633] Bluetooth: hci6: command tx timeout [ 484.077530][ T8049] lo speed is unknown, defaulting to 1000 [ 484.732882][ T5633] Bluetooth: hci7: command tx timeout [ 486.788552][ T3429] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 486.802869][ T5633] Bluetooth: hci7: command tx timeout [ 488.883328][ T5633] Bluetooth: hci7: command tx timeout [ 490.898000][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 491.920786][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.920828][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.256801][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.256966][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.257278][ T8016] bridge_slave_0: entered allmulticast mode [ 492.298232][ T8016] bridge_slave_0: entered promiscuous mode [ 492.317328][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.317499][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.317746][ T8022] bridge_slave_0: entered allmulticast mode [ 492.346846][ T8022] bridge_slave_0: entered promiscuous mode [ 492.363939][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.364090][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.364377][ T8016] bridge_slave_1: entered allmulticast mode [ 492.368678][ T8016] bridge_slave_1: entered promiscuous mode [ 492.370679][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.371569][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.371828][ T8022] bridge_slave_1: entered allmulticast mode [ 492.425382][ T8022] bridge_slave_1: entered promiscuous mode [ 493.027539][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.079542][ T8022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.160904][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.176414][ T8022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.846115][ T1019] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 494.010998][ T8016] team0: Port device team_slave_0 added [ 494.041581][ T8022] team0: Port device team_slave_0 added [ 494.078152][ T8016] team0: Port device team_slave_1 added [ 494.101638][ T8022] team0: Port device team_slave_1 added [ 494.563071][ T3327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 494.794190][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.794210][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.794239][ T8016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.797768][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.798002][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.798268][ T8049] bridge_slave_0: entered allmulticast mode [ 494.877287][ T8049] bridge_slave_0: entered promiscuous mode [ 494.977576][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.977595][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.977622][ T8022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.981193][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.981211][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.981240][ T8016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.078559][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.080288][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.080608][ T8049] bridge_slave_1: entered allmulticast mode [ 495.133580][ T8049] bridge_slave_1: entered promiscuous mode [ 495.155896][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.155910][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.155926][ T8022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.391967][ T8157] vlan2: entered allmulticast mode [ 495.391994][ T8157] macsec0: entered allmulticast mode [ 495.392009][ T8157] veth1_macvtap: entered allmulticast mode [ 496.115736][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 496.168374][ T8049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.561158][ T8049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.707680][ T8016] hsr_slave_0: entered promiscuous mode [ 496.712454][ T8016] hsr_slave_1: entered promiscuous mode [ 496.715474][ T8016] debugfs: 'hsr0' already exists in 'hsr' [ 496.715502][ T8016] Cannot create hsr debugfs directory [ 496.941050][ T8164] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5615] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8164] [ 496.942201][ T8164] fuse: fd is not a fuse device [ 496.974026][ T8164] netlink: 200 bytes leftover after parsing attributes in process `syz.0.505'. [ 497.798815][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.798859][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.617092][ T8022] hsr_slave_0: entered promiscuous mode [ 498.618944][ T8022] hsr_slave_1: entered promiscuous mode [ 498.620212][ T8022] debugfs: 'hsr0' already exists in 'hsr' [ 498.620239][ T8022] Cannot create hsr debugfs directory [ 498.651271][ T8049] team0: Port device team_slave_0 added [ 498.846460][ T8049] team0: Port device team_slave_1 added [ 499.070227][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.070246][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.070275][ T8049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.164814][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.164834][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.164864][ T8049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.530504][ T7634] netdevsim netdevsim7: probe with driver netdevsim failed with error -12 [ 500.717706][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 501.860400][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.860483][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.941263][ T8049] hsr_slave_0: entered promiscuous mode [ 501.950222][ T8049] hsr_slave_1: entered promiscuous mode [ 501.961343][ T8049] debugfs: 'hsr0' already exists in 'hsr' [ 501.961374][ T8049] Cannot create hsr debugfs directory [ 508.932010][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.932051][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.830971][ T7937] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.864804][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 518.010726][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.855760][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 522.892308][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 522.906871][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 522.908990][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 522.910027][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 523.225766][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.225808][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.509799][ T8312] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 525.049360][ T5633] Bluetooth: hci2: command tx timeout [ 525.313569][ T7937] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.383187][ T8208] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 525.998376][ T3429] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 526.101976][ T8303] lo speed is unknown, defaulting to 1000 [ 526.701294][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 527.132030][ T5633] Bluetooth: hci2: command tx timeout [ 527.458859][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.459095][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.459347][ T8303] bridge_slave_0: entered allmulticast mode [ 527.462554][ T8303] bridge_slave_0: entered promiscuous mode [ 527.466447][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.466730][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.466945][ T8303] bridge_slave_1: entered allmulticast mode [ 527.469596][ T8303] bridge_slave_1: entered promiscuous mode [ 527.554335][ T8303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.586842][ T8303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.915910][ T8303] team0: Port device team_slave_0 added [ 527.970045][ T8303] team0: Port device team_slave_1 added [ 528.141360][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.141381][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.141429][ T8303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.184039][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.184059][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.184090][ T8303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.475846][ T8303] hsr_slave_0: entered promiscuous mode [ 528.480182][ T8303] hsr_slave_1: entered promiscuous mode [ 528.485842][ T8303] debugfs: 'hsr0' already exists in 'hsr' [ 528.485873][ T8303] Cannot create hsr debugfs directory [ 529.202990][ T5633] Bluetooth: hci2: command tx timeout [ 530.178548][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 531.282894][ T5633] Bluetooth: hci2: command tx timeout [ 531.631970][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 533.345945][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 534.628926][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 534.739462][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 534.753267][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 534.899677][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 534.900608][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 535.689936][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 535.761375][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 535.913373][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 535.958202][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 535.959261][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 536.659610][ T8398] lo speed is unknown, defaulting to 1000 [ 537.044526][ T59] Bluetooth: hci4: command tx timeout [ 538.082952][ T59] Bluetooth: hci5: command tx timeout [ 538.201301][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.201552][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.201802][ T8398] bridge_slave_0: entered allmulticast mode [ 538.234706][ T8398] bridge_slave_0: entered promiscuous mode [ 538.238886][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.239116][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.239363][ T8398] bridge_slave_1: entered allmulticast mode [ 538.242575][ T8398] bridge_slave_1: entered promiscuous mode [ 538.366775][ T8398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.372055][ T8398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.476844][ T8398] team0: Port device team_slave_0 added [ 538.482141][ T8398] team0: Port device team_slave_1 added [ 538.582920][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.582940][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.582969][ T8398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.585819][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.585835][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.585864][ T8398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.939641][ T8398] hsr_slave_0: entered promiscuous mode [ 538.955842][ T8398] hsr_slave_1: entered promiscuous mode [ 538.975684][ T8398] debugfs: 'hsr0' already exists in 'hsr' [ 538.975719][ T8398] Cannot create hsr debugfs directory [ 539.124711][ T59] Bluetooth: hci4: command tx timeout [ 540.162899][ T59] Bluetooth: hci5: command tx timeout [ 541.202852][ T59] Bluetooth: hci4: command tx timeout [ 541.410357][ T5633] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 541.468733][ T5633] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 541.504883][ T5633] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 541.507854][ T5633] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 541.510687][ T5633] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 541.978404][ T8409] lo speed is unknown, defaulting to 1000 [ 542.242862][ T59] Bluetooth: hci5: command tx timeout [ 543.284441][ T59] Bluetooth: hci4: command tx timeout [ 543.682861][ T5633] Bluetooth: hci8: command tx timeout [ 544.323005][ T5633] Bluetooth: hci5: command tx timeout [ 544.463101][ T8471] lo speed is unknown, defaulting to 1000 [ 545.324450][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.324683][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.325025][ T8409] bridge_slave_0: entered allmulticast mode [ 545.329432][ T8409] bridge_slave_0: entered promiscuous mode [ 546.329891][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.330033][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.330379][ T8409] bridge_slave_1: entered allmulticast mode [ 546.347306][ T8409] bridge_slave_1: entered promiscuous mode [ 546.467763][ T59] Bluetooth: hci8: command tx timeout [ 548.398088][ T8409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.493739][ T5633] Bluetooth: hci8: command tx timeout [ 548.542136][ T8409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.145996][ T8409] team0: Port device team_slave_0 added [ 549.221193][ T8409] team0: Port device team_slave_1 added [ 550.369963][ T1043] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 550.505731][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.505751][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.505782][ T8409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.574627][ T5633] Bluetooth: hci8: command tx timeout [ 551.338611][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.338652][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.338683][ T8409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.630323][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.630567][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.631229][ T8471] bridge_slave_0: entered allmulticast mode [ 551.658599][ T8471] bridge_slave_0: entered promiscuous mode [ 551.711542][ T8409] hsr_slave_0: entered promiscuous mode [ 551.720187][ T8409] hsr_slave_1: entered promiscuous mode [ 551.721944][ T8409] debugfs: 'hsr0' already exists in 'hsr' [ 551.721973][ T8409] Cannot create hsr debugfs directory [ 551.722451][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.722592][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.761818][ T8471] bridge_slave_1: entered allmulticast mode [ 551.777223][ T8471] bridge_slave_1: entered promiscuous mode [ 551.988498][ T8471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.053532][ T8471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.216966][ T8471] team0: Port device team_slave_0 added [ 552.251678][ T8471] team0: Port device team_slave_1 added [ 552.393979][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.394000][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.394031][ T8471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.473704][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.473724][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.473756][ T8471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.832434][ T5626] kworker/1:3 (5626) used greatest stack depth: 18672 bytes left [ 554.224673][ T8471] hsr_slave_0: entered promiscuous mode [ 554.227746][ T8471] hsr_slave_1: entered promiscuous mode [ 554.229442][ T8471] debugfs: 'hsr0' already exists in 'hsr' [ 554.229473][ T8471] Cannot create hsr debugfs directory [ 556.514263][ T1356] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 557.130752][ T1043] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 560.727237][ T7937] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.052513][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.052595][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.982566][ T66] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.581440][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 580.604400][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14 [ 581.400894][ T3336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 583.145367][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 583.251432][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 583.254919][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 583.258066][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 583.258860][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 584.391160][ T8726] lo speed is unknown, defaulting to 1000 [ 584.519466][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15 [ 585.372851][ T5633] Bluetooth: hci9: command tx timeout [ 585.616441][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 586.621226][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.633201][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.633593][ T8726] bridge_slave_0: entered allmulticast mode [ 586.641351][ T8726] bridge_slave_0: entered promiscuous mode [ 586.671712][ T8726] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.671961][ T8726] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.687325][ T8726] bridge_slave_1: entered allmulticast mode [ 586.690612][ T8726] bridge_slave_1: entered promiscuous mode [ 586.762207][ T8726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.780014][ T8726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.844672][ T8726] team0: Port device team_slave_0 added [ 586.849204][ T8726] team0: Port device team_slave_1 added [ 586.960755][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.960775][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.960804][ T8726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.032597][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.036521][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.036560][ T8726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.331176][ T8726] hsr_slave_0: entered promiscuous mode [ 587.345661][ T8726] hsr_slave_1: entered promiscuous mode [ 587.347044][ T8726] debugfs: 'hsr0' already exists in 'hsr' [ 587.347071][ T8726] Cannot create hsr debugfs directory [ 587.454255][ T59] Bluetooth: hci9: command tx timeout [ 588.168862][ T5270] 8021q: adding VLAN 0 to HW filter on device eth16 [ 588.463015][ T4363] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 588.770783][ T3336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 589.524085][ T59] Bluetooth: hci9: command tx timeout [ 592.391629][ T59] Bluetooth: hci9: command tx timeout [ 593.569051][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 594.726665][ T5633] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 594.801088][ T5633] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 594.820549][ T5633] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 594.844033][ T5633] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 594.868685][ T5633] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 596.369015][ T8803] lo speed is unknown, defaulting to 1000 [ 596.442259][ T5633] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 596.506435][ T5633] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 596.510652][ T5633] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 596.531286][ T5633] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 596.587059][ T5633] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 597.043211][ T5633] Bluetooth: hci10: command tx timeout [ 598.729394][ T7937] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.804295][ T5633] Bluetooth: hci11: command tx timeout [ 599.190181][ T8836] Bluetooth: hci10: command tx timeout [ 599.391532][ T8803] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.392253][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.392591][ T8803] bridge_slave_0: entered allmulticast mode [ 599.452577][ T8803] bridge_slave_0: entered promiscuous mode [ 599.479481][ T8803] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.479715][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.480076][ T8803] bridge_slave_1: entered allmulticast mode [ 599.508789][ T8803] bridge_slave_1: entered promiscuous mode [ 599.865620][ T8803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.870000][ T8819] lo speed is unknown, defaulting to 1000 [ 599.925118][ T8803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.883020][ T8836] Bluetooth: hci11: command tx timeout [ 600.977703][ T5623] Bluetooth: hci6: command 0x0406 tx timeout [ 600.977768][ T8836] Bluetooth: hci1: command 0x0406 tx timeout [ 601.208256][ T8836] Bluetooth: hci10: command tx timeout [ 601.421218][ T8803] team0: Port device team_slave_0 added [ 601.549960][ T8803] team0: Port device team_slave_1 added [ 602.048354][ T8836] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 602.127960][ T8836] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 602.157679][ T8836] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 602.176685][ T8836] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 602.200395][ T8836] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 603.032891][ T8305] Bluetooth: hci11: command tx timeout [ 603.145310][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.145331][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.146786][ T8803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.221805][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.221823][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.221851][ T8803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.282891][ T8305] Bluetooth: hci10: command tx timeout [ 604.122907][ T8803] hsr_slave_0: entered promiscuous mode [ 604.124956][ T8803] hsr_slave_1: entered promiscuous mode [ 604.126149][ T8803] debugfs: 'hsr0' already exists in 'hsr' [ 604.126175][ T8803] Cannot create hsr debugfs directory [ 604.334179][ T8305] Bluetooth: hci12: command tx timeout [ 605.042794][ T8305] Bluetooth: hci11: command tx timeout [ 606.237964][ T8305] Bluetooth: hci7: command 0x0406 tx timeout [ 606.411376][ T8305] Bluetooth: hci12: command tx timeout [ 607.256810][ T8853] lo speed is unknown, defaulting to 1000 [ 608.482961][ T8305] Bluetooth: hci12: command tx timeout [ 610.327976][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.328566][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.328918][ T8819] bridge_slave_0: entered allmulticast mode [ 610.364598][ T8819] bridge_slave_0: entered promiscuous mode [ 610.413115][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.413351][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.413735][ T8819] bridge_slave_1: entered allmulticast mode [ 610.420334][ T8819] bridge_slave_1: entered promiscuous mode [ 610.567406][ T5633] Bluetooth: hci12: command tx timeout [ 610.607509][ T8819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.631537][ T8819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.904337][ T8819] team0: Port device team_slave_0 added [ 610.931140][ T8819] team0: Port device team_slave_1 added [ 612.935775][ T3336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 613.277431][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.277452][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.277482][ T8819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.341455][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.341754][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.341787][ T8819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.902110][ T8819] hsr_slave_0: entered promiscuous mode [ 613.912161][ T8819] hsr_slave_1: entered promiscuous mode [ 613.933699][ T8819] debugfs: 'hsr0' already exists in 'hsr' [ 613.933734][ T8819] Cannot create hsr debugfs directory [ 614.694961][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.695112][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.695494][ T8853] bridge_slave_0: entered allmulticast mode [ 614.701965][ T8853] bridge_slave_0: entered promiscuous mode [ 614.791972][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.792117][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.792388][ T8853] bridge_slave_1: entered allmulticast mode [ 614.825225][ T8853] bridge_slave_1: entered promiscuous mode [ 614.986941][ T8853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.048934][ T8853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.227737][ T8853] team0: Port device team_slave_0 added [ 615.241635][ T8853] team0: Port device team_slave_1 added [ 615.318826][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.318845][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.318874][ T8853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.321876][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.321892][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.321919][ T8853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.490720][ T8853] hsr_slave_0: entered promiscuous mode [ 617.491932][ T8853] hsr_slave_1: entered promiscuous mode [ 617.506114][ T8853] debugfs: 'hsr0' already exists in 'hsr' [ 617.506147][ T8853] Cannot create hsr debugfs directory [ 619.594138][ T3429] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 620.718602][ T3425] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 624.503622][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.503706][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.893209][ T8966] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5615] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8966] [ 632.894171][ T8966] fuse: fd is not a fuse device [ 632.899923][ T8966] netlink: 200 bytes leftover after parsing attributes in process `syz.0.551'. [ 643.639651][ T8305] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 643.695853][ T8836] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 643.697655][ T8836] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 643.712380][ T8836] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 643.713460][ T8836] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 644.133543][ T3336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 645.842929][ T5633] Bluetooth: hci13: command tx timeout [ 646.781260][ T8979] lo speed is unknown, defaulting to 1000 [ 647.287815][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 647.745066][ T8979] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.745311][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.745609][ T8979] bridge_slave_0: entered allmulticast mode [ 647.781591][ T8979] bridge_slave_0: entered promiscuous mode [ 647.802105][ T8979] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.816393][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.816794][ T8979] bridge_slave_1: entered allmulticast mode [ 647.846719][ T8979] bridge_slave_1: entered promiscuous mode [ 647.926866][ T5633] Bluetooth: hci13: command tx timeout [ 648.032526][ T8979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.053770][ T8979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.139381][ T8979] team0: Port device team_slave_0 added [ 648.151119][ T8979] team0: Port device team_slave_1 added [ 648.264524][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.264544][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.264574][ T8979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.334954][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.334976][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.335007][ T8979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.092144][ T8979] hsr_slave_0: entered promiscuous mode [ 649.101382][ T8979] hsr_slave_1: entered promiscuous mode [ 649.110295][ T8979] debugfs: 'hsr0' already exists in 'hsr' [ 649.110326][ T8979] Cannot create hsr debugfs directory [ 650.003247][ T8836] Bluetooth: hci13: command tx timeout [ 651.540965][ T3336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 651.747164][ T1356] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 652.082759][ T8836] Bluetooth: hci13: command tx timeout [ 652.344964][ T66] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.324516][ T8305] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 655.409436][ T8305] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 655.412162][ T8305] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 655.421913][ T8305] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 655.461982][ T8305] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 656.296305][ T9027] lo speed is unknown, defaulting to 1000 [ 657.292755][ T8836] Bluetooth: hci4: command 0x0406 tx timeout [ 657.602836][ T8836] Bluetooth: hci14: command tx timeout [ 658.358791][ T8305] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 658.417950][ T8305] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 658.421915][ T8305] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 658.447250][ T8305] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 658.448277][ T8305] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 659.501099][ T9047] lo speed is unknown, defaulting to 1000 [ 659.683083][ T5633] Bluetooth: hci14: command tx timeout [ 660.562959][ T8836] Bluetooth: hci15: command tx timeout [ 661.487239][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.487398][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.487807][ T9027] bridge_slave_0: entered allmulticast mode [ 661.516256][ T9027] bridge_slave_0: entered promiscuous mode [ 661.532146][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.532944][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.537390][ T9027] bridge_slave_1: entered allmulticast mode [ 661.559598][ T9027] bridge_slave_1: entered promiscuous mode [ 661.763029][ T8836] Bluetooth: hci14: command tx timeout [ 662.410694][ T8836] Bluetooth: hci5: command 0x0406 tx timeout [ 662.551047][ T9027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.643410][ T8836] Bluetooth: hci15: command tx timeout [ 662.819211][ T9027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.394275][ T9027] team0: Port device team_slave_0 added [ 663.412955][ T9027] team0: Port device team_slave_1 added [ 663.745316][ T37] INFO: task syz-executor:8016 blocked for more than 143 seconds. [ 663.745349][ T37] Tainted: G L syzkaller #0 [ 663.745369][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.745379][ T37] task:syz-executor state:D stack:18656 pid:8016 tgid:8016 ppid:1 task_flags:0x400140 flags:0x00080002 [ 663.745439][ T37] Call Trace: [ 663.745447][ T37] [ 663.745462][ T37] __schedule+0x16d8/0x55e0 [ 663.745507][ T37] ? rt_mutex_adjust_prio_chain+0x347/0x2140 [ 663.745545][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 663.745593][ T37] ? __pfx___schedule+0x10/0x10 [ 663.745637][ T37] rt_mutex_schedule+0x76/0xf0 [ 663.745755][ T37] rt_mutex_slowlock_block+0x55f/0x690 [ 663.745795][ T37] rt_mutex_slowlock+0x2d4/0x780 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 663.745822][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 663.745847][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 663.745883][ T37] ? del_device_store+0xd6/0x370 [ 663.745990][ T37] ? del_device_store+0xd6/0x370 [ 663.746024][ T37] ? del_device_store+0xd6/0x370 [ 663.746049][ T37] mutex_lock_nested+0x168/0x1d0 [ 663.746071][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 663.746147][ T37] del_device_store+0xd6/0x370 [ 663.746175][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 663.746204][ T37] ? __pfx_del_device_store+0x10/0x10 [ 663.746233][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 663.746264][ T37] ? sysfs_kf_write+0x166/0x260 [ 663.746298][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 663.746326][ T37] kernfs_fop_write_iter+0x3a5/0x540 [ 663.746359][ T37] vfs_write+0x61e/0xbb0 [ 663.746395][ T37] ? __pfx_vfs_write+0x10/0x10 [ 663.746422][ T37] ? do_sys_openat2+0x14c/0x200 [ 663.746473][ T37] ? kmem_cache_free+0x187/0x6c0 [ 663.746559][ T37] ksys_write+0x156/0x270 [ 663.746593][ T37] ? __pfx_ksys_write+0x10/0x10 [ 663.746659][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.746684][ T37] do_syscall_64+0x174/0x580 [ 663.746717][ T37] ? clear_bhb_loop+0x40/0x90 [ 663.746743][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.746764][ T37] RIP: 0033:0x7f514f07d68e [ 663.746784][ T37] RSP: 002b:00007ffc7ea2a118 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 663.746806][ T37] RAX: ffffffffffffffda RBX: 000055556dcc7500 RCX: 00007f514f07d68e [ 663.746822][ T37] RDX: 0000000000000001 RSI: 00007ffc7ea2a1a0 RDI: 0000000000000005 [ 663.746835][ T37] RBP: 00007f514f1535f2 R08: 0000000000000000 R09: 0000000000000000 [ 663.746848][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.746860][ T37] R13: 00007ffc7ea2a1a0 R14: 00007f514fe64620 R15: 0000000000000003 [ 663.746894][ T37] [ 663.746903][ T37] INFO: task syz-executor:8022 blocked for more than 143 seconds. [ 663.746922][ T37] Tainted: G L syzkaller #0 [ 663.746933][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.746942][ T37] task:syz-executor stat[ 663.746942][ T37] task:syz-executor state:D stack:19656 pid:8022 tgid:8022 ppid:1 task_flags:0x400140 flags:0x00080002 [ 663.746998][ T37] Call Trace: [ 663.747005][ T37] [ 663.747017][ T37] __schedule+0x16d8/0x55e0 [ 663.747051][ T37] ? rt_mutex_adjust_prio_chain+0x347/0x2140 [ 663.747087][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 663.747126][ T37] ? __pfx___schedule+0x10/0x10 [ 663.747171][ T37] rt_mutex_schedule+0x76/0xf0 [ 663.747204][ T37] rt_mutex_slowlock_block+0x55f/0x690 [ 663.747243][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 663.747270][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 663.747294][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 663.747331][ T37] ? del_device_store+0xd6/0x370 [ 663.747363][ T37] ? del_device_store+0xd6/0x370 [ 663.747397][ T37] ? del_device_store+0xd6/0x370 [ 663.747422][ T37] mutex_lock_nested+0x168/0x1d0 [ 663.747444][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 663.747477][ T37] del_device_store+0xd6/0x370 [ 663.747504][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 663.747533][ T37] ? __pfx_del_device_store+0x10/0x10 [ 663.747562][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 663.747600][ T37] ? sysfs_kf_write+0x166/0x260 [ 663.747633][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 663.747662][ T37] kernfs_fop_write_iter+0x3a5/0x540 [ 663.747695][ T37] vfs_write+0x61e/0xbb0 [ 663.747728][ T37] ? __pfx_vfs_write+0x10/0x10 [ 663.747755][ T37] ? do_sys_openat2+0x14c/0x200 [ 663.747785][ T37] ? kmem_cache_free+0x187/0x6c0 [ 663.747827][ T37] ksys_write+0x156/0x270 [ 663.747854][ T37] ? __pfx_ksys_write+0x10/0x10 [ 663.747888][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.747910][ T37] do_syscall_64+0x174/0x580 [ 663.747938][ T37] ? trace_irq_disable+0x3b/0x140 [ 663.747991][ T37] ? clear_bhb_loop+0x40/0x90 [ 663.748017][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.748037][ T37] RIP: 0033:0x7f04c885d68e [ 663.748054][ T37] RSP: 002b:00007ffeefe2d4c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 663.748074][ T37] RAX: ffffffffffffffda RBX: 0000555592617500 RCX: 00007f04c885d68e [ 663.748088][ T37] RDX: 0000000000000001 RSI: 00007ffeefe2d550 RDI: 0000000000000005 [ 663.748101][ T37] RBP: 00007f04c89335f2 R08: 0000000000000000 R09: 0000000000000000 [ 663.748114][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.748126][ T37] R13: 00007ffeefe2d550 R14: 00007f04c9644620 R15: 0000000000000003 [ 663.748160][ T37] [ 663.748168][ T37] INFO: task syz-executor:8049 blocked for more than 143 seconds. [ 663.748186][ T37] Tainted: G L syzkaller #0 [ 663.748196][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.748206][ T37] task:syz-executor state:D stack:22368 pid:8049 tgid:8049 ppid:1 task_flags:0x400140 flags:0x00080002 [ 663.748264][ T37] Call Trace: [ 663.748270][ T37] [ 663.748283][ T37] __schedule+0x16d8/0x55e0 [ 663.748345][ T37] ? __pfx___schedule+0x10/0x10 [ 663.748390][ T37] rt_mutex_schedule+0x76/0xf0 [ 663.748422][ T37] rt_mutex_slowlock_block+0x55f/0x690 [ 663.748462][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 663.748488][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 663.748514][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 663.748551][ T37] ? del_device_store+0xd6/0x370 [ 663.748583][ T37] ? del_device_store+0xd6/0x370 [ 663.748625][ T37] ? del_device_store+0xd6/0x370 [ 663.748650][ T37] mutex_lock_nested+0x168/0x1d0 [ 663.748672][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 663.748705][ T37] del_device_store+0xd6/0x370 [ 663.748733][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 663.748763][ T37] ? __pfx_del_device_store+0x10/0x10 [ 663.748792][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 663.748822][ T37] ? sysfs_kf_write+0x166/0x260 [ 663.748857][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 663.748885][ T37] kernfs_fop_write_iter+0x3a5/0x540 [ 663.748918][ T37] vfs_write+0x61e/0xbb0 [ 663.748951][ T37] ? __pfx_vfs_write+0x10/0x10 [ 663.748978][ T37] ? do_sys_openat2+0x14c/0x200 [ 663.749007][ T37] ? kmem_cache_free+0x187/0x6c0 [ 663.749051][ T37] ksys_write+0x156/0x270 [ 663.749078][ T37] ? __pfx_ksys_write+0x10/0x10 [ 663.749111][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.749133][ T37] do_syscall_64+0x174/0x580 [ 663.749165][ T37] ? clear_bhb_loop+0x40/0x90 [ 663.749191][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.749212][ T37] RIP: 0033:0x7f2e03ead68e [ 663.749228][ T37] RSP: 002b:00007ffd3a599018 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 663.749246][ T37] RAX: ffffffffffffffda RBX: 00005555938b7500 RCX: 00007f2e03ead68e [ 663.749261][ T37] RDX: 0000000000000001 RSI: 00007ffd3a5990a0 RDI: 0000000000000005 [ 663.749274][ T37] RBP: 00007f2e03f835f2 R08: 0000000000000000 R09: 0000000000000000 [ 663.749287][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.749299][ T37] R13: 00007ffd3a5990a0 R14: 00007f2e04c94620 R15: 0000000000000003 [ 663.749333][ T37] [ 663.749392][ T37] [ 663.749392][ T37] Showing all locks held in the system: [ 663.749402][ T37] 3 locks held by rcuc/0/20: [ 663.749444][ T37] 1 lock held by khungtaskd/37: [ 663.749455][ T37] #0: ffffffff8ddc7b60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 663.749590][ T37] 3 locks held by kworker/u8:3/55: [ 663.749603][ T37] 6 locks held by kworker/u8:4/66: [ 663.749614][ T37] #0: ffff88801aac8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 663.749664][ T37] #1: ffffc9000151fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 663.749711][ T37] #2: ffffffff8f139760 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 663.749826][ T37] #3: ffff888060e63160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 663.749937][ T37] #4: ffff88803b1a4310 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 663.750015][ T37] #5: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 663.750096][ T37] 7 locks held by kworker/u8:11/1362: [ 663.750121][ T37] 2 locks held by kworker/u8:14/3327: [ 663.750132][ T37] #0: ffff88801eb21138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 663.750180][ T37] #1: ffffc9000f0bfc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 663.750231][ T37] 3 locks held by udevd/4975: [ 663.750243][ T37] 2 locks held by getty/5365: [ 663.750254][ T37] #0: ffff888032cb10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 663.750353][ T37] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1390 [ 663.750407][ T37] 3 locks held by kworker/u9:7/5633: [ 663.750418][ T37] #0: ffff88802a818938 ((wq_completion)hci16){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 663.750466][ T37] #1: ffffc90005207c40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 663.750514][ T37] #2: ffff88806c89cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1a2/0x750 [ 663.750635][ T37] 4 locks held by kworker/0:6/5746: [ 663.750656][ T37] 7 locks held by syz-executor/7937: [ 663.750667][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 663.750720][ T37] #1: ffff88801af44478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 663.750773][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 663.750829][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 663.750884][ T37] #4: ffff88803b0a7160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 663.750984][ T37] #5: ffff888025bec310 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 663.751065][ T37] #6: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 663.751111][ T37] 4 locks held by syz-executor/8016: [ 663.751122][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 663.751174][ T37] #1: ffff88805a75d878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 663.751226][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 663.751283][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 663.751356][ T37] 4 locks held by syz-executor/8022: [ 663.751367][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 663.751419][ T37] #1: ffff8880617e3078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 663.751471][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 663.751528][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 663.751582][ T37] 4 locks held by syz-executor/8049: [ 663.751619][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 663.751672][ T37] #1: ffff888071e00478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 663.751720][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 663.751771][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 663.751824][ T37] 4 locks held by syz-executor/8303: [ 663.751834][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 663.751883][ T37] #1: ffff88802418cc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 663.751931][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 663.751983][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 663.752034][ T37] 4 locks held by syz-executor/8398: [ 663.752044][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 663.752092][ T37] #1: ffff888077769878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 663.752139][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 663.752191][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 663.752241][ T37] 4 locks held by syz-executor/8409: [ 663.752251][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 663.752298][ T37] #1: ffff888058fec878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 663.752345][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 663.752397][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 663.752446][ T37] 4 locks held by syz-executor/8471: [ 663.752456][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 663.752505][ T37] #1: ffff88805339a078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 663.752553][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0} [ 663.901846][ T9084] fuse: fd is not a fuse device [ 664.771698][ T8836] Bluetooth: hci14: command tx timeout [ 664.771763][ T8836] Bluetooth: hci15: command tx timeout [ 664.872346][ T8836] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 664.980771][ T8836] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 664.989427][ T8836] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 664.998129][ T8836] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 665.013074][ T8836] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 665.072538][ T37] , at: kernfs_fop_write_iter+0x22c/0x540 [ 665.072578][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 665.073043][ T37] 4 locks held by syz-executor/8726: [ 665.073055][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 665.073107][ T37] #1: ffff88806f90b878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 665.073156][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 665.073209][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 665.073260][ T37] 4 locks held by syz-executor/8803: [ 665.073270][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 665.073318][ T37] #1: ffff88802a2d1478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 665.073366][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 665.073417][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 665.073468][ T37] 4 locks held by syz-executor/8819: [ 665.073479][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 665.073528][ T37] #1: ffff888063286878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 665.073576][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 665.073628][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 665.073686][ T37] 4 locks held by syz-executor/8853: [ 665.073697][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 665.073746][ T37] #1: ffff88803ab3ac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 665.073794][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 665.073846][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 665.073898][ T37] 4 locks held by syz-executor/8979: [ 665.073908][ T37] #0: ffff888037420480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 665.073957][ T37] #1: ffff888056f4a878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 665.074007][ T37] #2: ffff888028fed5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 665.074063][ T37] #3: ffffffff8e9ce938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 665.074113][ T37] 3 locks held by syz-executor/9027: [ 665.074124][ T37] 2 locks held by syz-executor/9047: [ 665.074135][ T37] #0: ffffffff8e8bf3a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 665.074284][ T37] #1: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 665.074334][ T37] 1 lock held by syz-executor/9078: [ 665.074349][ T37] [ 665.074355][ T37] ============================================= [ 665.074355][ T37] [ 665.074364][ T37] NMI backtrace for cpu 0 [ 665.074381][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 665.074407][ T37] Tainted: [L]=SOFTLOCKUP [ 665.074413][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.074424][ T37] Call Trace: [ 665.074432][ T37] [ 665.074441][ T37] dump_stack_lvl+0xe8/0x150 [ 665.074466][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 665.074516][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 665.074553][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 665.074577][ T37] sys_info+0x135/0x170 [ 665.074595][ T37] watchdog+0xfd7/0x1030 [ 665.074624][ T37] ? watchdog+0x1c7/0x1030 [ 665.074658][ T37] kthread+0x388/0x470 [ 665.074684][ T37] ? __pfx_watchdog+0x10/0x10 [ 665.074703][ T37] ? __pfx_kthread+0x10/0x10 [ 665.074729][ T37] ret_from_fork+0x514/0xb70 [ 665.074770][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 665.074792][ T37] ? __switch_to+0xc89/0x1420 [ 665.074822][ T37] ? __pfx_kthread+0x10/0x10 [ 665.074848][ T37] ret_from_fork_asm+0x1a/0x30 [ 665.074886][ T37] [ 665.074909][ T37] Sending NMI from CPU 0 to CPUs 1: [ 665.074934][ C1] NMI backtrace for cpu 1 [ 665.074951][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 665.074975][ C1] Tainted: [L]=SOFTLOCKUP [ 665.074981][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.074991][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 665.075075][ C1] Code: e8 de 9a 91 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f c2 f8 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 665.075090][ C1] RSP: 0018:ffffc90000167a08 EFLAGS: 00000202 [ 665.075106][ C1] RAX: 1ffffffff331d900 RBX: 00000000000003fd RCX: 0000000000000000 [ 665.075118][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 665.075129][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.075140][ C1] R10: dffffc0000000000 R11: ffffffff85326c70 R12: dffffc0000000000 [ 665.075159][ C1] R13: 0000000000000000 R14: ffffffff998ec920 R15: 0000000000000000 [ 665.075171][ C1] FS: 0000000000000000(0000) GS:ffff8881264a1000(0000) knlGS:0000000000000000 [ 665.075185][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 665.075197][ C1] CR2: 00007f9597c17e20 CR3: 000000000dbb6000 CR4: 00000000003526f0 [ 665.075214][ C1] Call Trace: [ 665.075220][ C1] [ 665.075228][ C1] wait_for_lsr+0x190/0x300 [ 665.075250][ C1] serial8250_console_write+0x1232/0x1bd0 [ 665.075276][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 665.075295][ C1] ? console_flush_one_record+0xfa/0xb50 [ 665.075339][ C1] ? console_flush_one_record+0x472/0xb50 [ 665.075362][ C1] console_flush_one_record+0x642/0xb50 [ 665.075385][ C1] ? console_flush_one_record+0xfa/0xb50 [ 665.075406][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 665.075428][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 665.075453][ C1] legacy_kthread_func+0x1b6/0x250 [ 665.075475][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 665.075494][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 665.075534][ C1] ? __kthread_parkme+0x71/0x1f0 [ 665.075553][ C1] ? __kthread_parkme+0x196/0x1f0 [ 665.075573][ C1] kthread+0x388/0x470 [ 665.075594][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 665.075619][ C1] ? __pfx_kthread+0x10/0x10 [ 665.075640][ C1] ret_from_fork+0x514/0xb70 [ 665.075659][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 665.075676][ C1] ? __switch_to+0xc89/0x1420 [ 665.075701][ C1] ? __pfx_kthread+0x10/0x10 [ 665.075722][ C1] ret_from_fork_asm+0x1a/0x30 [ 665.075749][ C1] [ 665.092891][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 665.092916][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 665.092944][ T37] Tainted: [L]=SOFTLOCKUP [ 665.092951][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.092963][ T37] Call Trace: [ 665.092971][ T37] [ 665.092979][ T37] vpanic+0x56c/0xa60 [ 665.093009][ T37] ? __pfx___schedule+0x10/0x10 [ 665.093038][ T37] ? __pfx_vpanic+0x10/0x10 [ 665.093070][ T37] panic+0xc5/0xd0 [ 665.093092][ T37] ? __pfx_panic+0x10/0x10 [ 665.093113][ T37] ? preempt_schedule_common+0x82/0xd0 [ 665.093140][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 665.093170][ T37] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 665.093194][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 665.093220][ T37] watchdog+0x1030/0x1030 [ 665.093253][ T37] ? watchdog+0x1c7/0x1030 [ 665.093281][ T37] kthread+0x388/0x470 [ 665.093307][ T37] ? __pfx_watchdog+0x10/0x10 [ 665.093325][ T37] ? __pfx_kthread+0x10/0x10 [ 665.093351][ T37] ret_from_fork+0x514/0xb70 [ 665.093375][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 665.093395][ T37] ? __switch_to+0xc89/0x1420 [ 665.093426][ T37] ? __pfx_kthread+0x10/0x10 [ 665.093452][ T37] ret_from_fork_asm+0x1a/0x30 [ 665.093490][ T37] [ 665.093830][ T37] Kernel Offset: disabled