last executing test programs: 53.448061753s ago: executing program 2 (id=49): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="e6014d40c960bf3e2c1110c649f6b56f7baee4bc44727da7ecc58cc2695d611df9eb23f9cec15875f30e76d3a8efcc3781b422469915abe22f689d8cc841df97c33cf0a77ced9816e27d83d5185afcdc031fdbfceff23260a5a7b55d50c9cd7545d43826df36b1542aa6ecfcab20e678f1691e73a68659ba48d780b31a1ee32a318ca65c9795e224f351511ee15bfae2a4ca18ac02f4016a4b8d524ae04c7d75b29b145abf13c1b232e2ebb9cb23db2a587fc9305e10d60fc4293bcdc0c3fc523dcada1c6c6cb19f9423cf733a3df5f39bfa82d97139", @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x806, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x5be5}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) r5 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r5, 0x0) ftruncate(r5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f00000000c0)=0x10000) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) ioctl$SNDCTL_SYNTH_ID(r7, 0xc08c5114, &(0x7f0000000040)={"8c2352f9dec81003b921fadad1c6ad00f3ff00", 0xce9, 0x1, 0x1, 0x2, 0xff, 0xf, 0xfffffffe, 0x7, [0x7fffffff, 0x7, 0x0, 0x2, 0x6, 0x7, 0x7, 0x6, 0x8001, 0x6, 0x3, 0x4, 0x8, 0x0, 0x6, 0x5, 0x52, 0x0, 0x3]}) 52.535286139s ago: executing program 2 (id=62): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x414000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r3 = openat$autofs(0xffffff9c, &(0x7f0000000300), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10400, 0x54) lseek(r5, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r4, r4, 0x4, 0x0, @void}, 0x10) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0x541b, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) (async, rerun: 64) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x29) (rerun: 64) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) r8 = syz_io_uring_complete(0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@multiplanar_overlay={0xfffffff8, 0x1, 0x4, 0x0, 0x2, {r10, r11/1000+10000}, {0x0, 0x1, 0x89, 0x7f, 0x6, 0x2, "9fff8892"}, 0x85, 0x3, {&(0x7f00000001c0)=[{0xa, 0xe0e, {0x800}, 0x3}, {0x8, 0x6, {0x6}, 0x1}]}, 0x3, 0x0, r9}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r12 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r8, r12, 0xc, 0x0, @val=@iter={&(0x7f0000000080)=@cgroup={0x3, r7}, 0x10}}, 0x18) 52.535039568s ago: executing program 2 (id=63): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x61) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r3, 0x2, 0x0, 0x0, 0x3, [0x0], [0x800000, 0x0, 0xffffffff], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3f}) io_uring_enter(r0, 0x6d11, 0xd3f2, 0x21, &(0x7f0000000040)={[0x4, 0xc8b6]}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4bc, 0x0, 0x168, 0x9, 0x330, 0xb, 0x3f4, 0x250, 0x250, 0x3f4, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x208, 0x330, 0x0, {0x0, 0x28e}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @local, @mcast1, @remote, @mcast1, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}, @common=@inet=@ipcomp={{0x2c}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:klogd_exec_t:s0\x00'}}}, {{@ipv6={@empty, @empty, [], [], 'veth1_vlan\x00', 'bridge_slave_0\x00'}, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x518) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) 52.470240663s ago: executing program 2 (id=64): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0xd, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x104, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpgid(0xffffffffffffffff) syz_pidfd_open(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000140)={0x3, r4, 0xffffffdb, 0x2, 0xf, 0x1fd, 0x1}) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) ioctl$BLKTRACESTART(r6, 0x1276, 0x0) 52.089687722s ago: executing program 2 (id=68): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r6], 0x38}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) (async) timerfd_create(0x1, 0x80800) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) ioprio_set$pid(0x2, r9, 0x4007) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r8, &(0x7f0000000040)=""/172, 0xac, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x6d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(r7, &(0x7f0000000140)='./file1/file0\x00', 0xf8) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010003000000ffe3664c37c46073000010000500000000002000040000000000"], 0x24, 0x1) (async) chdir(&(0x7f0000001180)='./bus\x00') (async) rmdir(&(0x7f00000001c0)='./file0\x00') 51.96045402s ago: executing program 2 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x64}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fcntl$getown(r1, 0x9) sched_setscheduler(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102397, 0xffffffffffffff5b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="200000002c0001007700000000000000040000800b0011802fe5afbf24fbcc00"], 0x20}], 0x1}, 0x40012) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) fchmod(r6, 0x22) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@loopback, 0x3505, 0x0, 0x0, 0xb7}}, 0xe4) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 8.136290385s ago: executing program 32 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x64}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fcntl$getown(r1, 0x9) sched_setscheduler(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102397, 0xffffffffffffff5b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="200000002c0001007700000000000000040000800b0011802fe5afbf24fbcc00"], 0x20}], 0x1}, 0x40012) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) fchmod(r6, 0x22) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@loopback, 0x3505, 0x0, 0x0, 0xb7}}, 0xe4) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 4.020831859s ago: executing program 0 (id=154): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@secondary) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x600000) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x269, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$autofs(0xffffff9c, 0x0, 0x301543, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x3ee5}, {0x6, 0x0, 0x0, 0x4}]}, 0x8) r9 = syz_open_dev$vim2m(&(0x7f0000001a00), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000001a40)={0x0, 0x1, 0x0, "86b8be4655977a34d795acdb603fcaaf9387b3f2fe4830857853480e7119f90e", 0xb5315241}) sendmmsg$unix(r7, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x300, 0x0) 3.920363934s ago: executing program 3 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa9ed2bf935937073, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e000100000000000000000007"], 0x24}}, 0x880) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x200a, 0x0, 0x3, 0x0, 0x3}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x3) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x0) 3.646086062s ago: executing program 0 (id=157): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000240)=0x2) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004780), 0x101000, 0x0) readv(r5, &(0x7f0000006c40)=[{&(0x7f00000048c0)=""/242, 0xf2}], 0x1) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$ptp1(0xffffff9c, &(0x7f0000000000), 0x500, 0x0) syz_open_dev$usbmon(&(0x7f00000008c0), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) recvmmsg(r9, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f0000000180)=""/189, 0xb5}, {&(0x7f0000000dc0)=""/129, 0x8f}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000002640)=""/4080, 0xff0}], 0x5, 0x0, 0x29}}, {{0x0, 0x0, 0x0}}], 0x4000000000000d9, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) timer_create(0x2, &(0x7f0000000280)={0x0, 0x1d, 0x4, @tid=r2}, &(0x7f0000000340)) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80000000400005, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3fe, 0xfffffffffffffffd, 0x0, 0x20000000}, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x0, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0, 0x2}], 0x2) 2.768746106s ago: executing program 1 (id=158): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfba, 0x2, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x800) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_clone(0x10000000, &(0x7f0000019300)="28cb1c5496b9edc3897fed72dc6709be3fa5a80b2e5159cef876b7cc156b6ab9ede22034cd484e6e48383c6df38137576382ffe9e30ce7f392654d2a9e6d2123ca42b525ff713e943ccf2de9fcd76cef0b203c2fcaa2d58da282f67447033a0dc86ad871a7e862edd9eb2bb1d1acd6a03e61148458", 0x75, &(0x7f0000019180), &(0x7f00000191c0), &(0x7f0000019540)="5980e924cf5f7668a43956092d6bfbacc74e18c9a4298fe9d9cbb150690667cf1e9ff42ca0e32dc8b82abfc3d633d1b5ea2e4671f6a86dbaf7301b2988a748538ecf4aa905244d45ab14288fad0e6d0efd1077015ffc14f248be4550cd1f290d290545d9ddca76dfb7370e4743792159483ef3e32529220160d6db2cafe1a4bbd3d7b77a8d1f00345f627aafc7bff024c71a3923e27d1d75f68100ffafcb77e7975ae8f7c4ea5f383f1fb2a636efeb") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000019080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x8004552d, 0x0) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x40}, 0x1, 0x4c00000000000000}, 0x0) setgroups(0x352, &(0x7f0000000080)=[0x0, 0xee00]) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000100)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r9, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0xf0ffff, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0) 2.748957659s ago: executing program 3 (id=159): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4c050000150019", 0x7}], 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x200000000622c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x10000, 0x0) read$msr(r8, &(0x7f0000000700)=""/4096, 0x1000) r9 = syz_open_dev$video(&(0x7f0000000040), 0x9eb, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r10, &(0x7f0000000040)='\b', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write(r10, &(0x7f0000000340)="010000ff00ffffffffff7ea8179e5100"/39, 0xffd8) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$VIDIOC_G_FMT(r9, 0xc0cc5604, &(0x7f0000000080)={0xc, @sdr={0x2036315a, 0x8}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_pi_setprio\x00', r3, 0x0, 0x5}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRES32=r0, @ANYRES8=r11], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0xc044) getpid() 2.682114272s ago: executing program 0 (id=160): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0xf, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) connect$inet6(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)="aa36a2f6b95fe980d03eb493d92337b7c293045c0d6ea1d6cf85d27639f06f250b413b0b0857f90363e027c15d5950ffe31149e6f387ae769067c319561ad96f71d9fe7ff0ee3e8bd3a0cc241011f5778b7412618e21cddb13c4f129ac1561c1f2a5a66e07de38ce3898e1eba79ad8a0b26d2ed35b65a7903983b17542c62d80e2e1aba8e50d7eaacedeec21fde3ffef8887cb361babf7fb8e595ddadc90408e7d087a4be707e7b6f08e194b0e6046b53591613c69a7bea88fe150a47ee6ab1cc3770ce66ce376ce2f099cddbcf68bbc00"/222, 0xde}, 0x1, 0x0, 0x0, 0x4}, 0x40010) 2.06122779s ago: executing program 1 (id=162): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0xd, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x104, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpgid(0xffffffffffffffff) syz_pidfd_open(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000140)={0x3, r4, 0xffffffdb, 0x2, 0xf, 0x1fd, 0x1}) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) ioctl$BLKTRACESTART(r6, 0x1276, 0x0) 1.778179351s ago: executing program 3 (id=164): r0 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xbcf5a89523270768, 0x8031, 0xffffffffffffffff, 0x28f43000) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x804) write$hidraw(r1, &(0x7f0000000100), 0x0) 1.619679745s ago: executing program 3 (id=165): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0xd, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x104, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpgid(0xffffffffffffffff) syz_pidfd_open(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000140)={0x3, r4, 0xffffffdb, 0x2, 0xf, 0x1fd, 0x1}) r5 = dup(r1) write$6lowpan_enable(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) ioctl$BLKTRACESTART(r6, 0x1276, 0x0) 1.603763099s ago: executing program 0 (id=166): r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x3d) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000040)=@sr0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1, 0x0, 0x9}, 0x18) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x240000) r6 = syz_open_dev$dri(&(0x7f00000004c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x9, 0x0, [0x0], [0xff, 0x0, 0x39a], [], [0x100000001]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9}) 1.440110214s ago: executing program 3 (id=167): r0 = socket$inet6_udp(0xa, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x9881, 0x2, 0x1}, 0x18, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000f800000000003682fb"], 0x30000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x8b, &(0x7f0000000480)={@link_local, @link_local, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x79, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @broadcast=0xe0000001}, {0x0, 0xe21, 0x65, 0x0, @opaque="e311666c2d07acc933df128283cc20a7100731cfd1cf225c8773c9ff96b02f6940fe2739d1b99dc381851b9ef790daf85910c8d08bd15c8b5639b9cab7054bc2504bcb3d5d38ed6b1ca1b3ab855b2873aa848e04e1e7de1ae2c77c6153"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x5, &(0x7f00000002c0)={0x0, 0x25}, &(0x7f0000000300)) r2 = signalfd(r1, &(0x7f0000000180)={[0x3034d98d, 0xe37]}, 0x8) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1, 0x0, 0x8000}}) 1.150118363s ago: executing program 3 (id=168): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) syz_usb_connect$cdc_ncm(0x58bf9c0511e3ad70, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0x1, 0x7, 0x70, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "ab6a863a"}, {0x5, 0x24, 0x0, 0x2d}, {0xd, 0x24, 0xf, 0x1, 0x22f29518, 0x7, 0xfc00, 0xe8}, {0x6, 0x24, 0x1a, 0x9, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x2, 0x4b2d}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @country_functional={0xc, 0x24, 0x7, 0x3, 0xbac, [0xfffc, 0x0, 0xb521]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x58, 0x0, 0x47}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x80, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xc, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x48, 0x0, 0x7, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xfd, 0x6, 0x8, 0x20, 0x80}, 0x84, &(0x7f00000001c0)={0x5, 0xf, 0x84, 0x4, [@generic={0x54, 0x10, 0x2, "832727b58bd26cb5a09ef93abfbd57c620335376ba69d2aad31f5e395bd2c22030b25e571b981f5a4f34d029f52b24ef7bbee97b83ace48ee76b74ecb98017d8ff499d6efb008f601221c9a9213103063b"}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "174923bd43d6d9206ca9f71a3f319672"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x6, 0x4, 0x2, 0x40}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x5, 0xf00f, 0x10}]}, 0x6, [{0x78, &(0x7f0000000280)=@string={0x78, 0x3, "2c0ccb41f60d6fc6c9efdaa482ee690c8e4e7789c72717a7c5de652e3cec0541f8cd76fdf384c5352288f703ae59988d791d56ab9e923a3e4222b6722417b84afe171f85e7ae9e20cc3c689a28daef41f25721fac4fd40ba74961f4bf3771fa96eaf383f78cb3ec30086ee111305be46007ac5496a47"}}, {0x8e, &(0x7f0000000400)=@string={0x8e, 0x3, "d1686792b8281a53cf806cb736b2c05e8fbdef92d5fa272a90dab2e2a993cad507a624509e417560b545b6684001bdb4f43a6070b4b217132a95ca11a4a9a7936ff84ce605692e65f6bb1429d7636853e77dd33aefc53ba739df3a912183bc6fa0c33ab3075f7763ecc137a52933462a1c990a03e4e0b25c2f9a3e437cf6fff34efe50f03b35492a66b500b1"}}, {0xbd, &(0x7f0000000580)=@string={0xbd, 0x3, "11e5360460151ee335b8ddad76a239a0ada6a33dad700da65c9d22ba48e93b5d505fad833d0bd5b98bbbc01cf7e55e8c3a6bf37b72ee92a85f923d52eb0cb97dade6e85003790d2ef319847c6697d9350cb623d7464a24175256e215f9e0cf55e3cc765afd35b9a5258c7b4f1671aaa97f5ef8fc1c3e75a086be5eee53a5b70cb0c296e7ea5cf407b54e598554d2b4d937c4b93d6637157e1301da973565368aa8441d8a5dfecd26d5780adefb6a905fc75abea90f84da345a4828"}}, {0xc2, &(0x7f0000000640)=@string={0xc2, 0x3, "be2c1d0ffb945355727afea55a0f4ce2cee84726a946527f3929d7001d844cd0b2e4035c28917a6a27e7f76babdd0c691837224c089df63309bbabed74113e24e471f04f98b02f4ca610c45e94cf45baf58678f71b2853e1e8f3d1db69ec7f0724694ade586d5124aead921a569084f53a02a335150b6f736398ca22395b9d0efb1629ca2c9ee96c9b26b023d7989c94c26985155dcfbb043b62e04d6b413c5c2475c3b225bdd4ec3f6afda8f45f0e0c41e80d6f287332ac2aebc19ed80e7558"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0xdc, &(0x7f0000000740)=@string={0xdc, 0x3, "a1100918dc23690d95ff09e1dbb5546e26c2bc6ddcb42705ac958832d97c54bc4e2e54b12a01c8ed8c3a963d45f2143c0b65e97ba46486a1bf24d5cd447ca81605f133132f5551e545294e64d3c129b0b165b99f09d161bd424dd4d72d321bd36bcaf28bf2f4038345d18947bf218f28f92960d247c988ebd4631cc88cfd1a5f549407803771ca76597dfda6ea60d0e727c6e7b6c28e2f763e33c262331c7a145597d98d4341d770aa55bb59125b53d6c66181ac1d003de783e7723a0ab2a714c1222ca99b5fec525e1357059e6d4c02019bd0b6ad79f86ee52a"}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r2, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r8, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 1.061751978s ago: executing program 4 (id=169): r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0xa02, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0x105, 0x3}, @fda={0x66646185, 0x3, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x18, 0x34}}, 0x40}, @acquire={0x40046305, 0x2}], 0xec, 0x0, &(0x7f0000000240)="42fc76f63d6e5dd5baa386466e7d25721a5882e4d9bcd64710886b7ce4509d09ca579751978bd4be73ced2b4571028b7500599301f557079d1a8ded1b62990f783bc44f139ae48dd4c7c0a4ba41b4b1bf73dfd06ca577e2775514e52cfe15929b408b6933cb1b3f04f2ef806a27eb6bd0e15edf5db08bc5cd4c2093a36100f20a826d917134773e3f09d04aed93e80e03f325c7459d1f77f6dd2ab971548c82a88000cacc7d0e21b8eda17dddad7e45a2b83b6c904638ab6de7a8f708a7611f94a3ddb9c4ef087b85957dea07590ee340b251b5a7e09eb0ea30059bb3c24c4d3214264a13965dc2e32bc85dc"}) (async) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x50, 0xffffffffffffffff, 0x8000000) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x800001, 0x11, 0xffffffffffffffff, 0x10000000) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SHUTDOWN={0x22, 0x72, 0x0, r3, 0x0, 0x0, 0x1}) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f00000003c0)) (async) r5 = openat$vnet(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r5, 0x8004af81, &(0x7f0000000440)) (async) rt_sigtimedwait(&(0x7f0000000480)={[0x3, 0x2]}, 0x0, &(0x7f00000004c0)={0x77359400}, 0x8) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000500)={[0x8b, 0x1, 0x0, 0x4, 0x4dbc2a1b, 0x4, 0x59bb, 0x7, 0x7, 0x401, 0xbc, 0x3, 0x3, 0x294, 0x6, 0xce53], 0x0, 0x8000}) (async) r7 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000640)={0x0, "c7fcf377a82c1093c02d768a961a63b912834051218b7e809d2d56b41a8319cdd373cd04256d0a460574196c84f1f6d25a197c69ae405fea34f733511d4df10c", 0x31}, 0x48, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x55) (async) r10 = openat$vnet(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r6, {0x0}}, './file0\x00'}) (async) fstat(r9, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0) fsetxattr$system_posix_acl(r10, &(0x7f0000000740)='system.posix_acl_access\x00', &(0x7f00000009c0)={{}, {0x1, 0x2}, [{0x2, 0x5, r11}, {0x2, 0x4, r13}], {0x4, 0x5}, [{0x8, 0x7, r14}, {0x8, 0xa, r15}], {0x10, 0x1}}, 0x44, 0x2) (async) readv(r6, &(0x7f0000000ac0)=[{&(0x7f0000000a40)=""/102, 0x66}], 0x1) setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, &(0x7f0000000b00), 0x4) (async) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000b40)={r12}) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc) 951.683331ms ago: executing program 4 (id=170): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x40842, 0x0) io_uring_setup(0x3009, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, r0}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) semget(0x1, 0x0, 0x43) semget(0x3, 0x2, 0x284) (async) r1 = semget(0x3, 0x2, 0x284) semctl$GETVAL(r1, 0x0, 0xc, 0x0) r2 = semget(0x1, 0x3, 0x204) semget(0x3, 0x0, 0x654) (async) r3 = semget(0x3, 0x0, 0x654) semctl$IPC_RMID(r2, 0x0, 0x0) semget(0x0, 0x1, 0x0) (async) semget(0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffff8, 0x0) (async) r9 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffff8, 0x0) sendmsg$tipc(r9, 0x0, 0x4c010) (async) sendmsg$tipc(r9, 0x0, 0x4c010) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000010000304002000003c0e77897399f655", @ANYRES32=0x0, @ANYBLOB="15020000000000003c0012800b00010067726574617000002c00028006000f000700000006000f0000800000060011004e220000080007007f000001050013000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x6c}, 0x1, 0xba01}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000c4925b1d0000000001000000", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000faffffff0f00000005002f000100000008000300", @ANYRES32=r11], 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) semctl$SEM_STAT_ANY(r3, 0x0, 0x14, 0x0) (async) semctl$SEM_STAT_ANY(r3, 0x0, 0x14, 0x0) r12 = msgget(0x2, 0x22f) msgrcv(r12, 0x0, 0x0, 0x3, 0x1800) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000013c0)=""/227) semctl$IPC_RMID(0x0, 0x0, 0x0) 933.655319ms ago: executing program 1 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mkdirat(r0, &(0x7f0000000180)='./file1/file0\x00', 0x8) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000280), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0x541b, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 32) connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x1e) (rerun: 32) sendmmsg$unix(r4, &(0x7f0000000a00)=[{{&(0x7f0000000340)=@file={0x1, './file1/file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000003c0)="8aaa24d7500f0bf25df8483ec2e738ea24693c0baf8b035abad727f2227872aab87770688ccbc1988283c6ddb5a99d056537a4bdcfaced9347db903aef38eb06acbf137a3ab6b2bcb905b62d5a5397c07f85f43e130b4e", 0x57}, {&(0x7f0000000440)="066fae456a51c6aea9f4aa9b3fe5433d62951bb0e9e9cad4f2aa9dbf238e2a2597cb94d47fe354642c1435ce034290ac287440864781fdc6f66be25a418e29746876961f87abc9320cbf206c7034e9e6f093ac9f8fd68f80ab424288fde053b9336e162549db13875a8a2acb1afbf48d1899659473a3158f5924333b7e00f49ed08b5ea4ec5b65002f19f191e32927b61e5cc67234a26a8f4d89305328957485", 0xa0}, {&(0x7f0000000500)="4364a9449e9bece7712d21fe6878033569d42eab08efb968f5263e8c7bb7c857a2372a559b08b285adc4669f04bc2251114c30cce1ff5910a771cdb127797ab665ce2f2034528b14102d74deabd41a14c22209b891d3cf032066a7902ef96c8c914bf8afa188f5467e3ad562764ce0961d662e323ca292578e32bfe57890e16e7f33956be9ef303f2c75a2f394f96c0029bbc414e16a76d57a84de1aa08b94c526f81202adc81adce322979eb98beb6b6ca3fc53d5605fc94585719dc34644bb6303c09c1e3f4ba55a62179f06aad1baed987146d4ee", 0xd6}, {&(0x7f00000001c0)="fb534bac3b16e3c1568d443170b719", 0xf}, {&(0x7f0000000600)="a31d06c66715854d23d3d91c4c8adbffea7b83dc569c26fde539c89d55e999ecb8ef", 0x22}, {&(0x7f0000000680)="7799e692e4ba83d386fc32acd766ad70f7638a13aae6e3de64425bad8858ec9d4d19ecbee116df4c4a07e654478a31db82c32e58c9c0685e7bafe1ff1d3010b286a367b26da1520b8dac7a443836c1ef2519acb4dc6924df0f13c49fd86cbb54c47c6f62ecad38814ad8f5ad8a696e5909c71ea5a3a52f5e1926b542ab56468b0b8599cd0fa7bedc2cbfbc7e83cfe8a5eb2f6883285ba52c88363de4d0cde6e85de77897f7ebdc252bfc0638a4293931d6bd69aafdca0bfb082b", 0xba}, {&(0x7f0000000740)="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", 0xff}, {&(0x7f0000000840)="579704f0a64d8f22992ec7104040e1c7e1293ab7b784bf070a7f6adc2136a3d26861fde4ce40e8be9d7f0e6c2c8c08e6a3963d45011d55793533f36bef22f8ff088aeb1524e1905b3f0e2e5c872c1fca937ea60fd4bddc2066886a69f351be18ac887599815c1a9bf44a42cc9dfcdc538d9971dfaa8924e8582a800954ff447bcc17d8cd51c60947924c305ea9204ffaedcb0c0a678643a8da5574ca130f9ca87eeefec3ccbfd12d0fbf6b5b81496bac638e4e68709b8775355d61fc279744", 0xbf}, {&(0x7f0000000900)="78adb3214aeb7dec2d05bf849b883d42d4915dc00c5b3286b1e6f50ecdd9934ec0ed127072a6487a84e5d69e138d0ac573a9c4637bd66fd957d09fd998911ef3a4b883c7586e7c3356aee8e7f3dec81fb6a9934c7ded3bc0e40abc96866dd266c308c75e429c34c93ce860f01f48bd97ca810d2ae61447", 0x77}], 0x9, 0x0, 0x0, 0x8044}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe8) unshare(0x400) r5 = socket(0x2b, 0x80801, 0x1) (async) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/user\x00') (async, rerun: 32) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$HCIINQUIRY(r6, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"}) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (rerun: 64) 820.207611ms ago: executing program 1 (id=172): ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="1c002c80080000006c09"], 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7179, 0x0, 0x4, 0x288}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00'}) ioctl$TIOCNOTTY(r3, 0x5422) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 820.031048ms ago: executing program 4 (id=173): r0 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xbcf5a89523270768, 0x8031, 0xffffffffffffffff, 0x28f43000) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x804) write$hidraw(r1, &(0x7f0000000100), 0x0) 679.572393ms ago: executing program 0 (id=174): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) dup(r3) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (rerun: 32) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0xc68, r2, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x61c, 0x11d, 0x0, 0x1, [{0x1a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0x3}, {0x1, 0x9}, {0x2, 0xa}, {0x6, 0x6}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x6, 0xa}, {0x6, 0x7}, {0x1, 0x7}, {0x5}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x2, 0x2}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x5, 0x4}, {0x1, 0xa}, {0x3, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x7}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x4}, {0x7, 0x6}, {0x4, 0x9}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x2}, {0x1, 0x5}, {0x4}, {0x5, 0x8}, {0x5, 0x7}, {0x5, 0x6}, {0x6, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x3}, {0x2, 0xa}, {0x6, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x5}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x7}, {0x3, 0x2}, {0x5, 0x4}, {0x0, 0x9}, {0x3, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x5, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x4, 0x4}, {0x1}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x9}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x2, 0x7}, {0x2, 0x5}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x4}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x5, 0x1}, {0x5, 0x7}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x3, 0x3}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x1}, {0x1}, {0x6, 0x8}, {0x2, 0x2}, {0x6, 0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x3, 0x4}, {0x2}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0xb, 0x24, 0x0, 0x16, 0x1, 0x6, 0xb, 0x1, 0xc, 0x6c]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x1}, {0x7, 0x1}, {0x1}, {0x3, 0xa}, {0x1, 0x7}, {}, {0x1, 0x8}, {0x6, 0x6}, {0x0, 0x7}, {0x4, 0x2}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x2, 0x7}, {0x7}, {0x0, 0x6}, {0x7, 0x2}, {}, {0x5, 0x5}, {0x5, 0x9}, {0x5, 0x7}, {0x2, 0x9}, {0x3, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0xa}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x6}, {0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x9}, {0x3, 0x6}, {0x6, 0x3}, {0x7, 0x6}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x9}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x8}, {0x5, 0x9}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x3, 0x9, 0x200, 0x81, 0x81, 0x7d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x5, 0x9, 0x6c, 0x1, 0xc, 0x2, 0x1b, 0x16, 0x36, 0xc, 0x6, 0xc, 0x60, 0x2, 0x12, 0x12, 0x6, 0x60]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x4, 0x2, 0xe1, 0x6, 0x0, 0x7, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x1, 0x1b, 0x9, 0x6c, 0xc, 0x1, 0x48, 0x2, 0x1b, 0x1b, 0x24, 0x3, 0x30, 0xb, 0x6c, 0x9, 0x69, 0xc, 0xb, 0x1, 0x18, 0x1, 0x16, 0x1, 0x6, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x3, 0xfffa, 0x4, 0x4, 0xfff7, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb9}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9c}]}, {0x438, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x5}, {0x2, 0x8}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x4}, {0x7}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x2}, {0x6, 0x7}, {0x3, 0x7}, {0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x2, 0x5}, {0x7, 0x7}, {0x1, 0x9}, {0x2}, {0x0, 0x7}, {0x3, 0x8}, {0x5, 0xa}, {0x2, 0x9}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x7}, {0x6, 0x1}, {0x7, 0x1}, {0x2, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x7, 0x1}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x4}, {0x2, 0x5}, {0x7, 0x2}, {}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x2, 0x8}, {0x0, 0x6}, {0x6, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {0x7, 0x7}, {0x6}, {0x1, 0xa}, {0x6, 0x3}, {0x5, 0xa}, {0x7, 0xa}, {0x1, 0x9}, {0x3, 0x9}, {0x6, 0x8}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0xc, 0xb]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x6, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x4}, {0x1, 0xa}, {0x5, 0x1}, {0x3, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x5, 0x4}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7ff, 0x3, 0x6, 0x2254, 0x10, 0x3, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x81, 0x1, 0x5, 0x3, 0x3, 0x9, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{}, {0x7, 0x1}, {0x6, 0x2}, {0x7, 0x7}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x6, 0x4}, {0x1, 0x6}, {0x1, 0x9}, {0x3, 0x1}, {0x2}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x0, 0x8}, {0x2, 0x5}, {0x1, 0x1}, {0x6, 0xa}, {0x7, 0x9}, {0x0, 0x8}, {0x6, 0x2}]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x6c, 0x9, 0x5, 0x4, 0x6, 0x4, 0x1, 0x4, 0x48, 0x4, 0x1b, 0x2, 0x36, 0x30, 0x1]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x5, 0x48, 0x30, 0x3, 0x1, 0x1, 0x9, 0x30, 0x7a, 0x0, 0x5, 0x5, 0xb, 0x48, 0x4, 0x48, 0x36, 0x5, 0x18, 0x5, 0x4, 0x11, 0x18, 0x6, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x3}, {0x1, 0x1}, {0x1}, {0x3, 0x2}, {0x3, 0x9}, {0x3, 0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x6}, {0x4, 0x6}, {0x6, 0x8}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0xa}, {}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x6}, {0x4, 0x8}, {0x3, 0x7}, {0x6, 0xa}, {0x4, 0xa}, {0x6}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x5}, {0x7, 0x6}, {0x3, 0x7}, {0x0, 0x9}, {0x1, 0x8}, {0x3, 0x8}, {0x5, 0x4}, {0x4, 0x5}, {0x7, 0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x5, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x3, 0x6}, {0x1, 0x3}, {0x7, 0x3}, {0x1, 0x9}, {0x3, 0x5}, {0x6}, {0x6, 0x3}, {0x1, 0x2}, {0x5, 0x8}]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9934, 0xff1b, 0xa, 0x800, 0x2a9c, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x57ec, 0x8, 0x92, 0xfae7, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x5}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x6}, {0x3, 0x4}, {0x0, 0x6}, {0x3, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0xa}, {0x7, 0x3}, {0x2, 0xa}, {0x6, 0x1}, {0x2}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x6}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x8}, {0x3, 0x7}, {0x4, 0x9}, {0x2, 0x1}, {0x1, 0x9}, {0x3, 0x5}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x5}, {0x5, 0x2}, {0x6, 0x1}, {0x6, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x4}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x4}, {0x2, 0x3}, {0x3, 0x7}, {0x2, 0x4}, {0x6, 0xa}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x48, 0x3, 0x30, 0x60, 0x12, 0xc, 0x30, 0x60, 0x18, 0x48, 0x24, 0x2, 0x12, 0x36, 0x6c, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x1}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x6, 0x7}, {0x1, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0x3}, {0x6, 0x6}, {0x5, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x9}, {0x2, 0x6}, {0x6, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0xa}, {0x7, 0x1}, {0x3, 0x5}, {0x1, 0x3}, {0x5, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0xa}, {0x5}, {0x5, 0x5}, {0x6, 0x3}, {0x7, 0x1}, {0x6, 0x8}, {0x1, 0xa}, {0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x3, 0x5}, {0x5, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x7}, {0x3, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x34, 0x8, 0xb, 0x4793, 0x1, 0x2, 0x346]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x6, 0xe, 0x7, 0x0, 0x9, 0xe, 0xfffc]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x1b, 0x36, 0x16, 0x12, 0x0, 0x16, 0x4, 0x6c]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x3, 0x20, 0x6a, 0x30, 0x12, 0x60, 0x2, 0x6c, 0x9, 0x9, 0x1, 0x4, 0x12, 0x5, 0x18, 0x7b, 0x1b, 0x36, 0x16, 0x1b, 0x4, 0x16, 0x0, 0xb, 0x18, 0x3, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc, 0x4, 0x7fff, 0xfbff, 0x1, 0x1, 0x80]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x2}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x7}, {0x5, 0x2}, {0x2, 0x4}, {0x3, 0xa}, {0x1, 0x3}, {0x5, 0x4}, {0x0, 0x5}, {0x3, 0x8}, {0x4, 0x2}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x1}, {0x7}, {0x3, 0x4}, {0x7, 0xa}, {0x5}, {0x5, 0x8}, {0x2, 0x9}, {0x4}, {}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x3, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x6c]}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf09, 0x101, 0x6, 0x8, 0x7, 0x0, 0x9, 0xd]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0x9}, {0x1, 0x2}, {0x1}, {0x5, 0xa}, {0x7, 0x7}, {0x5, 0x5}, {0x2, 0x3}, {0x3, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x8}, {0x5, 0x8}, {0x5, 0xa}, {0x2, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x6}, {0x6}, {0x6, 0x2}, {0x5, 0x2}, {0x1, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x4}, {0x5}, {0x2, 0x1}, {}, {0x6, 0x9}, {0x1, 0x2}, {0x3}, {0x2, 0x9}, {0x7, 0x3}, {0x2, 0x3}, {0x6, 0x9}, {0x7}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0x8}, {0x3, 0x9}, {0x6, 0x2}, {0x1, 0x4}, {0x1, 0x8}, {0x4, 0x2}, {0x4, 0x7}, {0x5}, {0x3, 0x7}, {0x7}, {0x1}, {0x0, 0x6}, {0x1}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0xa}, {0x7, 0xa}, {0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x7}, {0x2, 0x1}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0x7}, {0x6, 0x17}, {0x5, 0xa}, {0x3, 0x7}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb163, 0xfff8, 0x9, 0x8, 0x6, 0x1a63, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x36, 0xb, 0x6, 0xa, 0x0, 0x6, 0x3, 0x6, 0x24, 0x60, 0x1, 0x36, 0x2, 0x6, 0x60, 0x30, 0xb, 0x4, 0x26]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x62c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x61c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xef}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x198, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x7, 0x5}, {0x7, 0x6}, {0x7, 0xa}, {0x3, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x2}, {0x3, 0x3}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x7, 0x7}, {0x7, 0x8}, {0x5, 0x7}, {0x6, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x5}, {0x5, 0x4}, {0x3, 0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x5, 0x40, 0x6, 0xecf, 0x0, 0x15, 0x6]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xff, 0x6267, 0x1, 0x10, 0x9, 0x3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x7, 0x4, 0x1, 0x78, 0xe3, 0x1683]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x6}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {}, {0x7, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x2}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x2, 0x9}, {}, {0x6, 0x3}, {0x0, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x5}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x3, 0x4}, {0x6, 0x6}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x5}, {0x2, 0x3}, {0x3, 0x6}, {0x2, 0x4}, {0x3, 0x7}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x6, 0x4}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x7}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x5}, {0x6, 0x8}, {0x5, 0x8}, {0x4, 0x3}, {0x6, 0x6}, {0x6, 0x1}, {0x7, 0x1}, {0x4, 0x15}, {0x3, 0x5}, {0x7}, {0x3, 0x8}, {0x5, 0xa}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8, 0x1, 0x9d, 0x5, 0x8001, 0x1000, 0x4]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x2}, {0x5, 0x9}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x5, 0x7}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x4}, {0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x6}, {0x3, 0x8}, {0x7, 0x2}, {0x4, 0x2}, {0x3}, {}, {0x6, 0x2}, {0x3, 0x2}, {0x3, 0x3}, {0x4}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x79c3, 0x9d, 0x9b53, 0x101, 0x75e, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x5, 0x3, 0x2, 0x30, 0xc, 0x3, 0x1, 0x6c, 0xb, 0x4, 0x6, 0x48, 0x5, 0x12, 0x48, 0x2, 0x24, 0x36, 0x18, 0x12, 0x1b, 0x6c, 0x18, 0x1b, 0x24, 0x1b, 0xb, 0x24, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x400, 0x6, 0x81, 0x7, 0x9, 0x5, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x6, 0x3ff, 0xb, 0x2, 0x7, 0x0, 0xffff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x7}, {0x7, 0x2}, {0x7, 0x8}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0x7}, {0x4, 0x9}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x3, 0xa}, {0x0, 0xa}, {0x7, 0x6}, {0x5, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x4}, {0x2, 0x8}, {0x2, 0x2}, {0x4}, {0x6, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x2, 0x3}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x4, 0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x0, 0x2}, {}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x3, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x4, 0x1}, {0x4, 0x2}, {}, {0x1, 0x3}, {0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x3, 0x7}, {0x6, 0x1}, {0x4, 0x7}, {0x0, 0x1}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x6, 0x4, 0x36, 0x24, 0x67, 0x5, 0x30, 0x6, 0x24, 0x16, 0x1, 0xc, 0xc, 0x1, 0x36, 0x1b, 0x4, 0x36, 0x73586be0f0e16c9a]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x4}, {0x7}, {0x6, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x1}, {0x5, 0xa}, {0x4, 0x3}, {0x0, 0x9}, {0x5, 0x6}, {0x6, 0x3}, {0x3, 0x4}, {0x3, 0x8}, {0x6, 0x7}, {0x7, 0x6}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x7}, {0x7, 0x8}, {0x4, 0x7}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0x4}, {0x2, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x4}, {0x0, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x1}, {}, {0x0, 0x9}, {0x3, 0x7}, {0x7, 0x1}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x4, 0x2}, {0x1}, {0x4, 0x1}, {0x1, 0xa}, {0x7, 0xa}, {0x2}, {0x4, 0x8}, {0x4, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x6, 0x1, 0x9, 0xfffe, 0x5, 0x0, 0xab]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x358, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x0, 0x5, 0x2, 0x8000, 0x3, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0xa}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0xa}, {0x5, 0x3}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0xa}, {}, {0x6}, {0x4, 0x9}, {0x7, 0x6}, {0x5, 0x9}, {}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0x3}, {0x4}, {0x1, 0x9}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x8}, {0x6, 0x3}, {0x4, 0x4}, {0x2}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}, {0x5, 0x8}, {0x7, 0x8}, {0x4, 0x4}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4bcb, 0x5, 0x5, 0x81, 0xfffb, 0x8001, 0x9]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x4}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x4}, {0x7, 0x2}, {0x4, 0x3}, {0x7, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x8}, {0x2, 0x6}, {0x6, 0x1}, {0x5, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x2, 0xa}, {0x3, 0x4}, {0x2, 0x4}, {0x6, 0x4}, {0x2, 0x3}, {0x4, 0x6}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x8}, {0x3, 0x9}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0xa}, {0x7, 0x7}, {0x2, 0x8}, {0x2, 0x3}, {0x6, 0x6}, {0x4, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {}, {0x6, 0x2}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x12, 0x6c, 0x3, 0x16, 0x16, 0x3]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x8}, {0x1, 0xa}, {0x0, 0xa}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x6, 0x6}, {0x1, 0x1}, {0x2, 0x3}, {0x3, 0x7}, {0x4, 0x2}, {0x5}, {0x1, 0x3}, {0x3, 0x2}, {0x7, 0x7}, {0x5, 0xa}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x6}, {0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x2, 0x4}, {0x4}, {0x4, 0x5}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc50, 0x7, 0xfff, 0xa, 0x4, 0x7ff, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0xc4, 0x3, 0x3, 0x80, 0x8, 0x9]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{}, {0x5, 0x4}, {0x3, 0x8}, {0x2, 0x6}, {0x3, 0x4}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x3}, {0x7, 0x3}, {0x1}, {0x4, 0x5}, {0x5, 0x1}, {0x6, 0x2}, {0x3, 0x3}, {0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x5, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x9}, {0x4}, {0x3, 0xa}, {0x6, 0x2}, {0x6, 0x5}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0x2}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x6}, {0x3, 0x2}, {0x4, 0x7}, {0x7, 0x4}, {0x6, 0x8}, {0x2, 0x1}, {}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x6}, {0x2, 0xa}, {0x5, 0xa}, {0x6, 0x8}, {0x1, 0x2}, {0x4, 0x8}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x5}, {0x3, 0x5}, {0x5, 0x9}, {}, {0x2, 0x6}, {0x1}, {0x4, 0x5}, {0x5, 0x4}, {0x2}, {0x7, 0x4}, {0x5, 0x9}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0xa}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0x7}, {0x4}, {0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x2}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x5}, {0x4, 0x7}, {0x2}, {0x3, 0x4}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x2}, {0x4, 0x7}, {0x1, 0x2}, {0x4, 0x7}, {0x6, 0x7}, {0x2, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x4, 0x4}, {0x7}, {0x2, 0x5}, {0x5, 0x8}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x1}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x0, 0x1}, {0x2, 0x9}, {}, {0x6, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf, 0x5, 0x55e8, 0x1, 0x7, 0xfff7, 0xff42]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x7}, {0x0, 0x6}, {0x5, 0x1}, {0x2, 0x9}, {0x3, 0x6}, {0x4, 0x9}, {0x3, 0xa}, {0x3, 0x4}, {0x4, 0x6}, {0x7, 0x1}, {}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x9}, {}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0xa}, {0x4, 0x1}, {0x3, 0x8}, {0x1, 0x9}, {0x4}, {0x4}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x5, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x6, 0x2}, {0x3, 0x9}, {0x3, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x9}, {0x5, 0x3}, {0x5, 0x1}, {0x4, 0xa}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x200, 0x9, 0xee3, 0x7, 0x3ff, 0x4a48, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x9, 0x200, 0x0, 0x80, 0x4, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x2af5, 0x4, 0xff, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x9, 0x2519, 0x1, 0x40, 0x8, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x7}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x6, 0x2}, {0x6, 0x3}, {0x4, 0x9}, {0x7}, {0x5, 0x9}, {0x3, 0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x1, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x1}, {0x5, 0x4}, {0x4, 0x5}, {0x7, 0x4}, {0x7, 0x1}, {0x3}, {0x3, 0x4}, {0x5, 0x4}, {0x0, 0x7}, {0x1}, {0x4, 0x8}, {0x4}, {0x4, 0x8}, {0x4, 0x9}, {0x2, 0x1}, {0x5, 0x3}, {0x7, 0x9}, {0x3, 0x7}, {0x4, 0x8}, {0x4}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0xb, 0x30, 0x36, 0x5c, 0x4, 0x4, 0xf, 0x6c, 0x36, 0x1, 0x4, 0x12, 0x4, 0x5, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x30, 0x4, 0x0, 0x6, 0x2, 0x1, 0x1b, 0x3, 0x5, 0x48, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x1, 0xdeeb, 0x0, 0xc, 0x2, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x30, 0xb, 0x1b, 0x3, 0x16, 0x36, 0x2, 0x16, 0x6c, 0x2, 0x60, 0x6c, 0x6c, 0x3, 0x24, 0x12, 0x6c, 0x2, 0x60, 0x3, 0x6, 0x9, 0x6d, 0x3, 0xb, 0x30]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x6}, {0x3, 0x4}, {0x6, 0x2}, {0x1}, {0x5, 0x7}, {0x2, 0x2}, {0x5, 0x1}, {0x6, 0xa}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x6}, {0x0, 0x2}, {0x6, 0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x3}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x7, 0x4}, {0x0, 0x4}, {0x4, 0x8}, {0x3, 0x4}, {0x5, 0xa}, {0x2, 0x6}, {0x4, 0x2}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x6}, {0x5, 0x1}]}]}]}]}]}]}, 0xc68}}, 0x0) (async) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="44000280808c0100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00047374000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r13, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x8}) (async) ioctl$sock_netdev_private(r13, 0x8949, &(0x7f0000000000)) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) 679.318319ms ago: executing program 4 (id=175): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0xd, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x104, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpgid(0xffffffffffffffff) syz_pidfd_open(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000140)={0x3, r4, 0xffffffdb, 0x2, 0xf, 0x1fd, 0x1}) r5 = dup(r1) write$6lowpan_enable(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) ioctl$BLKTRACESTART(r6, 0x1276, 0x0) 520.163309ms ago: executing program 0 (id=176): openat(0xffffffffffffff9c, 0x0, 0x140, 0x0) syz_io_uring_setup(0x2432, &(0x7f0000000380)={0x0, 0x17a3, 0x13090, 0x0, 0x3e4}, 0x0, &(0x7f00000002c0)) (async) syz_io_uring_setup(0x2432, &(0x7f0000000380)={0x0, 0x17a3, 0x13090, 0x0, 0x3e4}, 0x0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0xe9cfde1da0cf1f28) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, r1, 0x0, &(0x7f0000000100)='./file0\x00', 0x204, 0x42, 0x12345}) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = io_uring_setup(0x2104, &(0x7f0000000300)={0x0, 0x80000001, 0x2, 0x3, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x19, 0x20000000, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) socket(0x1e, 0x5, 0x0) (async) socket(0x1e, 0x5, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) (async) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000740), 0x76, 0x109701) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000740), 0x76, 0x109701) mq_open(&(0x7f0000000280)='!+/%\x00', 0x40, 0x84, &(0x7f0000000500)={0xfffff800, 0x4, 0xb3, 0x5}) (async) mq_open(&(0x7f0000000280)='!+/%\x00', 0x40, 0x84, &(0x7f0000000500)={0xfffff800, 0x4, 0xb3, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0x0, 0x0, 0x2, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0x0, 0x0, 0x2, 0x0}) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000001c0)=0x800, 0x5, 0x4) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240), &(0x7f0000000000)) (async) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x50, 0x8, {{0x5, 0x4, 0x3, 0x34, 0x14, 0x65, 0x0, 0x20, 0x0, 0x0, @multicast2, @rand_addr=0x64010102}}}}) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x28, 0x3, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x4}}) io_uring_enter(r6, 0x47ff, 0xd377, 0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) 327.955317ms ago: executing program 4 (id=177): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x10, 0x8, 0x2, 0x3, {{0x14, 0x4, 0x2, 0x3, 0x50, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0x4d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x20, 0x5b, 0x0, 0x1, [0x9, 0x17, 0x1, 0x8, 0x9, 0x6, 0x8]}, @generic={0x44, 0x12, "72c67bb067959207c090ca4a2ae0cff9"}]}}}}}) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x15c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xe, 0x2, 0xb, 0x1, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0xffff, 0x101, 0x6]}}, {{0x1c, 0x1, {0xa, 0x3, 0x8, 0x5, 0x3, 0x2, 0x3ff, 0x9}}, {0x16, 0x2, [0x8, 0x5, 0x800, 0x40, 0x8e51, 0x3, 0x81, 0x274b, 0x0]}}, {{0x1c, 0x1, {0x5, 0x2, 0x1, 0x2, 0x0, 0xef, 0x80000001, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x6, 0x7ff, 0x7, 0x4cd9, 0x101]}}, {{0x1c, 0x1, {0x7, 0xf9, 0x6, 0xe, 0x0, 0x10001, 0xb, 0x4}}, {0xc, 0x2, [0x1, 0x8, 0x7, 0x0]}}, {{0x1c, 0x1, {0x0, 0x7, 0x7d, 0x814f, 0x1, 0x9b, 0xfff, 0x4}}, {0xc, 0x2, [0xfe00, 0x4, 0x3, 0x3ff]}}, {{0x1c, 0x1, {0xf4, 0x2, 0x7, 0x8, 0x1, 0x8000, 0x50f, 0x3}}, {0xa, 0x2, [0x1, 0x6, 0x6db]}}, {{0x1c, 0x1, {0x8, 0x1, 0x5, 0x3, 0x0, 0x3, 0x7de1da32, 0x8}}, {0x14, 0x2, [0x1, 0x3, 0x5, 0xb, 0x5, 0x6, 0x5, 0x0]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x240009d4}, 0x8840) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x15c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xe, 0x2, 0xb, 0x1, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0xffff, 0x101, 0x6]}}, {{0x1c, 0x1, {0xa, 0x3, 0x8, 0x5, 0x3, 0x2, 0x3ff, 0x9}}, {0x16, 0x2, [0x8, 0x5, 0x800, 0x40, 0x8e51, 0x3, 0x81, 0x274b, 0x0]}}, {{0x1c, 0x1, {0x5, 0x2, 0x1, 0x2, 0x0, 0xef, 0x80000001, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x6, 0x7ff, 0x7, 0x4cd9, 0x101]}}, {{0x1c, 0x1, {0x7, 0xf9, 0x6, 0xe, 0x0, 0x10001, 0xb, 0x4}}, {0xc, 0x2, [0x1, 0x8, 0x7, 0x0]}}, {{0x1c, 0x1, {0x0, 0x7, 0x7d, 0x814f, 0x1, 0x9b, 0xfff, 0x4}}, {0xc, 0x2, [0xfe00, 0x4, 0x3, 0x3ff]}}, {{0x1c, 0x1, {0xf4, 0x2, 0x7, 0x8, 0x1, 0x8000, 0x50f, 0x3}}, {0xa, 0x2, [0x1, 0x6, 0x6db]}}, {{0x1c, 0x1, {0x8, 0x1, 0x5, 0x3, 0x0, 0x3, 0x7de1da32, 0x8}}, {0x14, 0x2, [0x1, 0x3, 0x5, 0xb, 0x5, 0x6, 0x5, 0x0]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x240009d4}, 0x8840) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'geneve1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r12, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000e80)={'xfrm0\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r14, @ANYBLOB="da"], 0x20}}, 0x0) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r14, 0x22a0b}}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x7, 0x0, 0x10000, 0x2, {{0xa, 0x4, 0x0, 0xd, 0x28, 0x67, 0x0, 0x6, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x12, "2eef32382ce74ab8b79ff01ceff604c0"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1e8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000100)={0x2, 0x6, 0x401}) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000100)={0x2, 0x6, 0x401}) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="130000004bac0021000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="130000004bac0021000000", @ANYRES32=0x0], 0x18}}, 0x0) 169.986276ms ago: executing program 4 (id=178): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x2d) listen(r0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) lseek(r4, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r3, r1, 0x4, r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x6, 0x4, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00004f0000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) 169.679162ms ago: executing program 1 (id=179): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000090000040"]) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0xb}, 0x20) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) 0s ago: executing program 1 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_io_uring_setup(0x1000110d, &(0x7f0000000140)={0x0, 0x0, 0x40, 0x1}, &(0x7f00000000c0), &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT=r3], 0x125) io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x9, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x25b, 0x1e, &(0x7f00000007c0)=""/30, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x9, 0x6, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x0, 0x10, 0x76, @void, @value}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000080)="1a00006d6ad96f66a7d9c191", 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) listen(r4, 0x20000005) socket$inet6(0xa, 0x6, 0x0) 0s ago: executing program 0 (id=181): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001e000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="7fb0f769f410f34eb339d2418d164bd81e70f3eb84060f"], 0x24}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x1, 0x3, 0x80}}, 0x2e) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:38215' (ED25519) to the list of known hosts. [ 41.825392][ T5929] cgroup: Unknown subsys name 'net' [ 41.952362][ T5929] cgroup: Unknown subsys name 'cpuset' [ 41.955555][ T5929] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.711825][ T5929] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.682228][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.685697][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.688531][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.690873][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.693193][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.695360][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.698053][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.700356][ T5949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.702496][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.704607][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.706602][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.708291][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.708423][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.709671][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.711046][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.711343][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.712751][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.713080][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.713197][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.714588][ T5954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.714711][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.716027][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.730993][ T5953] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.733095][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.872199][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 44.882614][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 44.928052][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 44.965692][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 45.001202][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.003653][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.005852][ T5941] bridge_slave_0: entered allmulticast mode [ 45.008894][ T5941] bridge_slave_0: entered promiscuous mode [ 45.048580][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.051562][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.054291][ T5941] bridge_slave_1: entered allmulticast mode [ 45.057337][ T5941] bridge_slave_1: entered promiscuous mode [ 45.145159][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.148024][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.151258][ T5950] bridge_slave_0: entered allmulticast mode [ 45.153412][ T5950] bridge_slave_0: entered promiscuous mode [ 45.175973][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.179719][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.181894][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.183923][ T5950] bridge_slave_1: entered allmulticast mode [ 45.186052][ T5950] bridge_slave_1: entered promiscuous mode [ 45.208940][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.211790][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.214470][ T5944] bridge_slave_0: entered allmulticast mode [ 45.217410][ T5944] bridge_slave_0: entered promiscuous mode [ 45.221260][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.255144][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.258042][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.264440][ T5944] bridge_slave_1: entered allmulticast mode [ 45.267675][ T5944] bridge_slave_1: entered promiscuous mode [ 45.301300][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.303996][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.306445][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.308528][ T5948] bridge_slave_0: entered allmulticast mode [ 45.311177][ T5948] bridge_slave_0: entered promiscuous mode [ 45.313733][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.315777][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.317976][ T5948] bridge_slave_1: entered allmulticast mode [ 45.320221][ T5948] bridge_slave_1: entered promiscuous mode [ 45.351900][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.366967][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.372032][ T5941] team0: Port device team_slave_0 added [ 45.398061][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.402573][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.406833][ T5941] team0: Port device team_slave_1 added [ 45.409970][ T5950] team0: Port device team_slave_0 added [ 45.412511][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.431994][ T5950] team0: Port device team_slave_1 added [ 45.457805][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.460776][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.470730][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.498887][ T5948] team0: Port device team_slave_0 added [ 45.502497][ T5944] team0: Port device team_slave_0 added [ 45.504623][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.507344][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.517152][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.540907][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.542866][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.550302][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.555120][ T5948] team0: Port device team_slave_1 added [ 45.567098][ T5944] team0: Port device team_slave_1 added [ 45.569772][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.571897][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.579131][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.631793][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.633836][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.641823][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.646302][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.648256][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.655705][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.660866][ T5941] hsr_slave_0: entered promiscuous mode [ 45.663612][ T5941] hsr_slave_1: entered promiscuous mode [ 45.666884][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.670825][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.679172][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.684047][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.686105][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.694038][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.718346][ T5950] hsr_slave_0: entered promiscuous mode [ 45.721413][ T5950] hsr_slave_1: entered promiscuous mode [ 45.724204][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.727188][ T5950] Cannot create hsr debugfs directory [ 45.781587][ T5948] hsr_slave_0: entered promiscuous mode [ 45.784083][ T5948] hsr_slave_1: entered promiscuous mode [ 45.786046][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.788226][ T5948] Cannot create hsr debugfs directory [ 45.854049][ T5944] hsr_slave_0: entered promiscuous mode [ 45.856181][ T5944] hsr_slave_1: entered promiscuous mode [ 45.858156][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.860432][ T5944] Cannot create hsr debugfs directory [ 46.074884][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.081426][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.086969][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.095561][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.121731][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.129171][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.132510][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.137130][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.149707][ T5950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.159756][ T5950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.164762][ T5950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.168229][ T5950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.196936][ T5944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.201337][ T5944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.211132][ T5944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.221071][ T5944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.234564][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.260161][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.267326][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.269655][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.273405][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.279146][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.281958][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.302502][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.317063][ T5941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.321999][ T214] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.324000][ T214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.330507][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.335478][ T214] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.338285][ T214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.362070][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.365664][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.376753][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.385684][ T214] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.387713][ T214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.396361][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.398381][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.401946][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.403938][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.406551][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.408521][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.424700][ T5948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.453856][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.472606][ T5941] veth0_vlan: entered promiscuous mode [ 46.477197][ T5941] veth1_vlan: entered promiscuous mode [ 46.487294][ T5941] veth0_macvtap: entered promiscuous mode [ 46.492285][ T5941] veth1_macvtap: entered promiscuous mode [ 46.503966][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.508009][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.515010][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.517553][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.521056][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.524431][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.546589][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.551461][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.563334][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.594578][ T5948] veth0_vlan: entered promiscuous mode [ 46.597829][ T214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.603969][ T5948] veth1_vlan: entered promiscuous mode [ 46.604069][ T214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.627299][ T5950] veth0_vlan: entered promiscuous mode [ 46.633211][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.635473][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.638267][ T5950] veth1_vlan: entered promiscuous mode [ 46.648374][ T5944] veth0_vlan: entered promiscuous mode [ 46.654062][ T5948] veth0_macvtap: entered promiscuous mode [ 46.657231][ T5944] veth1_vlan: entered promiscuous mode [ 46.661706][ T5948] veth1_macvtap: entered promiscuous mode [ 46.669913][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.677871][ T5950] veth0_macvtap: entered promiscuous mode [ 46.682124][ T5950] veth1_macvtap: entered promiscuous mode [ 46.687527][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.692826][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.696113][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.701166][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.704133][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.707494][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.718263][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.723520][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.726386][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.729462][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.733245][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.737566][ T5948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.740514][ T5948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.743934][ T5948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.747392][ T5948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.750298][ T5953] Bluetooth: hci3: command tx timeout [ 46.751175][ T5947] Bluetooth: hci0: command tx timeout [ 46.753171][ T5942] Bluetooth: hci2: command tx timeout [ 46.755663][ T5947] Bluetooth: hci1: command tx timeout [ 46.766816][ T5944] veth0_macvtap: entered promiscuous mode [ 46.770789][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.773858][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.776679][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.780148][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.783545][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.787501][ T5944] veth1_macvtap: entered promiscuous mode [ 46.794967][ T5950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.798415][ T5950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.801449][ T5950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.803930][ T5950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.816528][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.820226][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.823086][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.826349][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.830315][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.833544][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.837655][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.855979][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.859766][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.862594][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.865561][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.868559][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.872209][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.875570][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.879007][ T5944] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.881854][ T5944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.884257][ T5944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.886750][ T5944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.894699][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.897154][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.916387][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.919148][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.927831][ T214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.933189][ T214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.954774][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.957072][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.976393][ T214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.978693][ T214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.994652][ T214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.996944][ T214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.008035][ T6008] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1'. [ 47.513345][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'. [ 47.516058][ T6019] openvswitch: netlink: Flow actions attr not present in new flow. [ 47.607308][ T6021] xt_time: unknown flags 0xf0 [ 47.746137][ T6023] capability: warning: `syz.3.6' uses deprecated v2 capabilities in a way that may be insecure [ 47.829753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.919453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 48.830570][ T5956] Bluetooth: hci2: command tx timeout [ 48.832181][ T5956] Bluetooth: hci0: command tx timeout [ 48.833798][ T5947] Bluetooth: hci3: command tx timeout [ 48.839722][ T5947] Bluetooth: hci1: command tx timeout [ 49.404702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.481790][ T6045] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.690708][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.715252][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.744738][ T6049] bridge_slave_0 (unregistering): left allmulticast mode [ 49.746827][ T6049] bridge_slave_0 (unregistering): left promiscuous mode [ 49.748882][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.814854][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'. [ 49.869480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.871684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.873778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.889956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 49.893360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 49.895485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 49.897638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 50.444462][ T6070] input: syz1 as /devices/virtual/input/input6 [ 50.589820][ T39] audit: type=1326 audit(1737019817.417:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.0.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 50.859074][ T6086] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 50.863285][ T74] Bluetooth: hci4: Frame reassembly failed (-84) [ 50.920128][ T5953] Bluetooth: hci1: command tx timeout [ 50.920151][ T5956] Bluetooth: hci3: command tx timeout [ 50.922440][ T5953] Bluetooth: hci0: command tx timeout [ 50.923996][ T5956] Bluetooth: hci2: command tx timeout [ 51.458703][ T39] audit: type=1326 audit(1737019818.287:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.0.19" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7fc00000 [ 52.909687][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 52.909831][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 52.990113][ T5947] Bluetooth: hci2: command tx timeout [ 52.999380][ T5947] Bluetooth: hci0: command tx timeout [ 52.999607][ T5942] Bluetooth: hci3: command tx timeout [ 53.000982][ T5947] Bluetooth: hci1: command tx timeout [ 53.061516][ T6115] cgroup: noprefix used incorrectly [ 53.188186][ T6133] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 53.690746][ T6152] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 54.008459][ T6161] netlink: 'syz.0.40': attribute type 21 has an invalid length. [ 54.011353][ T6161] netlink: 128 bytes leftover after parsing attributes in process `syz.0.40'. [ 54.014256][ T6161] netlink: 'syz.0.40': attribute type 5 has an invalid length. [ 54.016431][ T6161] netlink: 3 bytes leftover after parsing attributes in process `syz.0.40'. [ 54.222469][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 54.327155][ T6173] netlink: 52 bytes leftover after parsing attributes in process `syz.1.43'. [ 54.331829][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 54.645856][ T6183] tun0: tun_chr_ioctl cmd 1074025675 [ 54.647929][ T6183] tun0: persist enabled [ 54.650181][ T6183] tun0: tun_chr_ioctl cmd 1074025675 [ 54.652261][ T6183] tun0: persist enabled [ 54.982866][ T6195] netlink: 68 bytes leftover after parsing attributes in process `syz.1.48'. [ 55.088142][ T5947] Bluetooth: hci1: command tx timeout [ 55.247080][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 55.323584][ T6212] zonefs (loop1) ERROR: Not a zoned block device [ 55.489354][ T833] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.543099][ T6222] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.642145][ T833] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 55.645355][ T833] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 55.648615][ T833] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 55.652081][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.658066][ T6209] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 55.664497][ T833] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 55.751393][ T39] audit: type=1326 audit(1737019822.587:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 55.759161][ T39] audit: type=1326 audit(1737019822.587:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 55.765011][ T39] audit: type=1326 audit(1737019822.587:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.61" exe="/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 55.771520][ T39] audit: type=1326 audit(1737019822.587:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 55.777432][ T39] audit: type=1326 audit(1737019822.587:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.61" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 55.783407][ T39] audit: type=1326 audit(1737019822.587:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 55.792359][ T39] audit: type=1326 audit(1737019822.587:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 55.798581][ T39] audit: type=1326 audit(1737019822.587:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.61" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 55.804921][ T39] audit: type=1326 audit(1737019822.587:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 55.811430][ T39] audit: type=1326 audit(1737019822.587:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 55.875358][ T35] usb 8-1: USB disconnect, device number 2 [ 55.925302][ T6246] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 55.932123][ T6238] netlink: 36 bytes leftover after parsing attributes in process `syz.0.61'. [ 55.934869][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.61'. [ 55.937413][ T6238] netlink: 36 bytes leftover after parsing attributes in process `syz.0.61'. [ 56.360439][ T6255] input: syz1 as /devices/virtual/input/input7 [ 56.982915][ T6287] capability: warning: `syz.1.73' uses 32-bit capabilities (legacy support in use) [ 57.159390][ T5947] Bluetooth: hci1: command tx timeout [ 58.931414][ T6340] process 'syz.1.83' launched './file1' with NULL argv: empty string added [ 58.958826][ T6342] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 59.112687][ T6343] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 59.114973][ T6343] __nla_validate_parse: 3 callbacks suppressed [ 59.114979][ T6343] netlink: 224 bytes leftover after parsing attributes in process `syz.1.83'. [ 59.163246][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 59.163635][ T6348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.84'. [ 59.165942][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.84'. [ 59.168502][ T6348] tipc: Enabling of bearer rejected, failed to enable media [ 59.171902][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.84'. [ 60.211751][ T6377] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 60.213765][ T6377] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.220793][ T6377] vhci_hcd vhci_hcd.0: Device attached [ 60.409428][ T832] vhci_hcd: vhci_device speed not set [ 60.469351][ T832] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 60.662934][ T6389] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 60.981102][ T6379] vhci_hcd: connection reset by peer [ 60.984692][ T74] vhci_hcd: stop threads [ 60.986036][ T6396] netlink: 'syz.3.96': attribute type 1 has an invalid length. [ 60.986240][ T74] vhci_hcd: release socket [ 60.991113][ T74] vhci_hcd: disconnect device [ 61.988753][ T6420] 9pnet_fd: p9_fd_create_tcp (6420): problem binding to privport [ 62.560660][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.0.105'. [ 62.563320][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.0.105'. [ 62.565898][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.0.105'. [ 62.568452][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.0.105'. [ 62.571263][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.0.105'. [ 62.580936][ T6429] bond1: entered promiscuous mode [ 62.583124][ T6429] bond1: entered allmulticast mode [ 62.584745][ T6429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.219514][ T6469] block nbd1: Device being setup by another task [ 63.222634][ T6468] block nbd1: shutting down sockets [ 63.352662][ T6473] vivid-007: disconnect [ 63.362563][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 63.383288][ T6473] vivid-007: reconnect [ 63.691160][ T6496] syzkaller1: entered promiscuous mode [ 63.692774][ T6496] syzkaller1: entered allmulticast mode [ 64.208868][ T6505] __nla_validate_parse: 30 callbacks suppressed [ 64.209015][ T6505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.122'. [ 64.655340][ T6512] vivid-002: disconnect [ 64.658440][ T6512] random: crng reseeded on system resumption [ 64.667592][ T6512] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 65.279188][ T6510] vivid-002: reconnect [ 65.285802][ T6537] gretap0 speed is unknown, defaulting to 1000 [ 65.288912][ T6537] gretap0 speed is unknown, defaulting to 1000 [ 65.293797][ T6537] gretap0 speed is unknown, defaulting to 1000 [ 65.297429][ T6537] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 65.303186][ T6537] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 65.317167][ T6537] gretap0 speed is unknown, defaulting to 1000 [ 65.321321][ T6537] gretap0 speed is unknown, defaulting to 1000 [ 65.328041][ T6537] gretap0 speed is unknown, defaulting to 1000 [ 65.332705][ T6537] gretap0 speed is unknown, defaulting to 1000 [ 65.398539][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 65.403030][ T6544] gretap0: entered allmulticast mode [ 65.408231][ T6005] gretap0 speed is unknown, defaulting to 1000 [ 65.528175][ T6556] Falling back ldisc for ttyS3. [ 65.630038][ T832] vhci_hcd: vhci_device speed not set [ 65.635460][ T6560] hid-generic 0003:0627:0001.0001: pid 6560 passed too short report [ 70.752697][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 80.990395][ T9] cfg80211: failed to load regulatory.db [ 100.352354][ T6606] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.140'. [ 100.488040][ T5956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.492328][ T5956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.497092][ T5956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.500664][ T5956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.503571][ T5956] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.506026][ T5956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.524579][ T6613] gretap0 speed is unknown, defaulting to 1000 [ 100.642389][ T6613] chnl_net:caif_netlink_parms(): no params data found [ 100.703723][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.706238][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.710846][ T6613] bridge_slave_0: entered allmulticast mode [ 100.713008][ T6613] bridge_slave_0: entered promiscuous mode [ 100.723736][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.725832][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.755222][ T6613] bridge_slave_1: entered allmulticast mode [ 100.763438][ T6613] bridge_slave_1: entered promiscuous mode [ 100.864858][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.868803][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.887527][ T6613] team0: Port device team_slave_0 added [ 100.890259][ T6613] team0: Port device team_slave_1 added [ 100.912542][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.915068][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.922769][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.926658][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.928725][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.936164][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.963578][ T6613] hsr_slave_0: entered promiscuous mode [ 100.965750][ T6613] hsr_slave_1: entered promiscuous mode [ 100.967752][ T6613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.970043][ T6613] Cannot create hsr debugfs directory [ 101.046624][ T6613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.049985][ T6613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.054043][ T6613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.057798][ T6613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.067829][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.070359][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.072636][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.074781][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.098625][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.106706][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.114241][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.124741][ T6613] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.133732][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.135706][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.138142][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.140100][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.227585][ T6613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.343106][ T6613] veth0_vlan: entered promiscuous mode [ 101.347115][ T6613] veth1_vlan: entered promiscuous mode [ 101.358322][ T6613] veth0_macvtap: entered promiscuous mode [ 101.366770][ T6613] veth1_macvtap: entered promiscuous mode [ 101.373710][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.376797][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.381249][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.384300][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.387140][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.390570][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.393397][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.396372][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.401206][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.440908][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.444047][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.447617][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.452875][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.456779][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.462063][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.464907][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.467959][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.473788][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.478119][ T6613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.481490][ T6613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.484035][ T6613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.486529][ T6613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.515981][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.518271][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.533482][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.536014][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.069342][ T833] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 102.221131][ T833] usb 9-1: Using ep0 maxpacket: 8 [ 102.224586][ T833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.228421][ T833] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.233264][ T833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.237540][ T833] usb 9-1: config 0 descriptor?? [ 102.256224][ T6696] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 102.589929][ T5947] Bluetooth: hci4: command tx timeout [ 103.129905][ T6714] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 103.131976][ T6714] UDF-fs: Scanning with blocksize 2048 failed [ 103.142722][ T6714] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 103.144915][ T6714] UDF-fs: Scanning with blocksize 4096 failed [ 103.254906][ T6717] gretap0 speed is unknown, defaulting to 1000 [ 103.350193][ T6718] xt_TPROXY: Can be used only with -p tcp or -p udp [ 104.006144][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 104.193092][ T6729] Bluetooth: MGMT ver 1.23 [ 104.618998][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 104.691331][ T5947] Bluetooth: hci4: command tx timeout [ 104.766545][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'. [ 105.564438][ T833] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 105.624100][ T833] usb 9-1: USB disconnect, device number 2 [ 105.846289][ T6770] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.159'. [ 106.759566][ T5947] Bluetooth: hci4: command tx timeout [ 106.771666][ T6784] hid-generic 0003:0627:0001.0001: pid 6784 passed too short report [ 107.054070][ T6791] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 107.526731][ T6805] gretap1: entered allmulticast mode [ 107.544478][ T6805] bridge0: port 3(gretap1) entered blocking state [ 107.549439][ T6805] bridge0: port 3(gretap1) entered disabled state [ 107.555368][ T6805] gretap1: entered promiscuous mode [ 107.560145][ T6805] bridge0: port 3(gretap1) entered blocking state [ 107.562221][ T6805] bridge0: port 3(gretap1) entered forwarding state [ 107.574162][ T6803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'. [ 107.591610][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ca:82:a4:88:1f:fe, vlan:0) [ 107.592726][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 108.083196][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ca:82:a4:88:1f:fe, vlan:0) [ 108.203006][ T6834] xfrm0: entered allmulticast mode [ 108.282406][ T6839] rpc_pipefs: Unknown parameter 'fd' [ 108.429702][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ca:82:a4:88:1f:fe, vlan:0) [ 108.829522][ C3] [ 108.830561][ C3] ============================= [ 108.832437][ C3] [ BUG: Invalid wait context ] [ 108.833849][ C3] 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 Not tainted [ 108.836778][ C3] ----------------------------- [ 108.837481][ T5947] Bluetooth: hci4: command tx timeout [ 108.839164][ C3] syz.0.181/6851 is trying to lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 108.839171][ C3] ffff88807ffd7298 (&zone->lock){..-.}-{3:3}, at: get_page_from_freelist+0xbbe/0x2f80 [ 108.839212][ C3] other info that might help us debug this: [ 108.839214][ C3] context-{2:2} [ 108.839217][ C3] 2 locks held by syz.0.181/6851: [ 108.839222][ C3] #0: ffff88804eb6c100 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: walk_component+0x342/0x5b0 [ 108.852507][ C3] #1: ffff88802b744f18 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x350/0x2f80 [ 108.855833][ C3] stack backtrace: [ 108.857357][ C3] CPU: 3 UID: 0 PID: 6851 Comm: syz.0.181 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 108.861236][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.865402][ C3] Call Trace: [ 108.866695][ C3] [ 108.867779][ C3] dump_stack_lvl+0x116/0x1f0 [ 108.869674][ C3] __lock_acquire+0x878/0x3c40 [ 108.871422][ C3] ? __pfx_mark_lock+0x10/0x10 [ 108.873283][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 108.875268][ C3] ? mark_lock+0xb5/0xc60 [ 108.876778][ C3] lock_acquire.part.0+0x11b/0x380 [ 108.878665][ C3] ? get_page_from_freelist+0xbbe/0x2f80 [ 108.880370][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 108.882348][ C3] ? rcu_is_watching+0x12/0xc0 [ 108.884180][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 108.886286][ C3] ? do_raw_spin_trylock+0x66/0x180 [ 108.888052][ C3] ? get_page_from_freelist+0xbbe/0x2f80 [ 108.890071][ C3] ? lock_acquire+0x2f/0xb0 [ 108.891792][ C3] ? get_page_from_freelist+0xbbe/0x2f80 [ 108.894141][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 108.896182][ C3] ? get_page_from_freelist+0xbbe/0x2f80 [ 108.898316][ C3] get_page_from_freelist+0xbbe/0x2f80 [ 108.900554][ C3] ? __pfx_get_page_from_freelist+0x10/0x10 [ 108.902227][ C3] ? should_fail_alloc_page+0xee/0x130 [ 108.903916][ C3] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 108.906405][ C3] __alloc_pages_noprof+0x223/0x25b0 [ 108.908246][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 108.909896][ C3] ? __pfx_mark_lock+0x10/0x10 [ 108.911291][ C3] ? hlock_class+0x4e/0x130 [ 108.912844][ C3] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 108.915077][ C3] ? find_held_lock+0x2d/0x110 [ 108.916781][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 108.918619][ C3] ? lock_acquire+0x2f/0xb0 [ 108.920273][ C3] ? is_bpf_text_address+0x30/0x1a0 [ 108.922026][ C3] ? bpf_ksym_find+0x124/0x1c0 [ 108.923377][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.925131][ C3] ? policy_nodemask+0xea/0x4e0 [ 108.926570][ C3] alloc_pages_mpol_noprof+0x2c8/0x620 [ 108.928141][ C3] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 108.929840][ C3] stack_depot_save_flags+0x8e0/0x9e0 [ 108.931401][ C3] ? __lock_acquire+0xcc5/0x3c40 [ 108.932778][ C3] kasan_save_stack+0x42/0x60 [ 108.934134][ C3] ? kasan_save_stack+0x33/0x60 [ 108.935564][ C3] ? __kasan_record_aux_stack+0xba/0xd0 [ 108.937209][ C3] ? task_work_add+0xc0/0x3b0 [ 108.938544][ C3] ? run_posix_cpu_timers+0x69f/0x7d0 [ 108.940050][ C3] ? update_process_times+0x1a1/0x2d0 [ 108.941607][ C3] ? tick_nohz_handler+0x376/0x530 [ 108.943038][ C3] ? __hrtimer_run_queues+0x5fb/0xae0 [ 108.944533][ C3] ? hrtimer_interrupt+0x392/0x8e0 [ 108.946006][ C3] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 108.947809][ C3] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 108.949514][ C3] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.951273][ C3] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 108.952957][ C3] ? __rmqueue_pcplist+0x5b1/0x1600 [ 108.954432][ C3] ? get_page_from_freelist+0x3d2/0x2f80 [ 108.956029][ C3] ? __alloc_pages_noprof+0x223/0x25b0 [ 108.957592][ C3] ? alloc_pages_mpol_noprof+0x2c8/0x620 [ 108.959196][ C3] ? stack_depot_save_flags+0x8e0/0x9e0 [ 108.960787][ C3] ? kasan_save_stack+0x42/0x60 [ 108.962195][ C3] ? kasan_save_track+0x14/0x30 [ 108.963580][ C3] ? kasan_save_free_info+0x3b/0x60 [ 108.965046][ C3] ? __kasan_slab_free+0x51/0x70 [ 108.966458][ C3] ? kfree+0x14f/0x4b0 [ 108.967632][ C3] ? ovl_lookup_index+0x4a4/0x870 [ 108.969102][ C3] ? ovl_lookup+0xbf5/0x21f0 [ 108.970449][ C3] ? __lookup_slow+0x24f/0x460 [ 108.971805][ C3] ? walk_component+0x350/0x5b0 [ 108.973225][ C3] ? path_lookupat+0x17f/0x770 [ 108.974625][ C3] ? filename_lookup+0x221/0x5f0 [ 108.976002][ C3] ? user_path_at+0x3a/0x60 [ 108.977287][ C3] ? do_fchownat+0xfa/0x200 [ 108.978596][ C3] ? __ia32_sys_lchown16+0xe6/0x120 [ 108.980098][ C3] ? __do_fast_syscall_32+0x73/0x120 [ 108.981624][ C3] ? do_fast_syscall_32+0x32/0x80 [ 108.983047][ C3] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.984878][ C3] __kasan_record_aux_stack+0xba/0xd0 [ 108.986451][ C3] task_work_add+0xc0/0x3b0 [ 108.987762][ C3] ? __pfx_task_work_add+0x10/0x10 [ 108.989260][ C3] ? lock_acquire.part.0+0x11b/0x380 [ 108.990768][ C3] ? find_held_lock+0x2d/0x110 [ 108.992145][ C3] run_posix_cpu_timers+0x69f/0x7d0 [ 108.993662][ C3] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 108.995319][ C3] ? __raise_softirq_irqoff+0x59/0xa0 [ 108.996850][ C3] ? sched_balance_trigger+0x3d4/0xea0 [ 108.998416][ C3] ? __pfx_sched_balance_trigger+0x10/0x10 [ 109.000104][ C3] ? sched_tick+0x286/0x4f0 [ 109.001439][ C3] update_process_times+0x1a1/0x2d0 [ 109.002934][ C3] ? __pfx_update_process_times+0x10/0x10 [ 109.004548][ C3] ? read_tsc+0x9/0x20 [ 109.005728][ C3] ? ktime_get+0x1ac/0x300 [ 109.007002][ C3] tick_nohz_handler+0x376/0x530 [ 109.008417][ C3] ? __pfx_tick_nohz_handler+0x10/0x10 [ 109.009992][ C3] __hrtimer_run_queues+0x5fb/0xae0 [ 109.011449][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 109.013113][ C3] ? read_tsc+0x9/0x20 [ 109.014316][ C3] hrtimer_interrupt+0x392/0x8e0 [ 109.015736][ C3] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 109.017419][ C3] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 109.019044][ C3] [ 109.019924][ C3] [ 109.020774][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.022340][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 109.023973][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 41 59 f6 48 89 df e8 fe c0 59 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 b1 4a f6 65 8b 05 96 d2 e6 74 85 c0 74 16 5b [ 109.029308][ C3] RSP: 0018:ffffc9000317ee98 EFLAGS: 00000246 [ 109.031034][ C3] RAX: 0000000000000006 RBX: ffff88807ffd7280 RCX: 1ffffffff2d37810 [ 109.033321][ C3] RDX: 0000000000000000 RSI: ffffffff8b4cd300 RDI: ffffffff8bb172c0 [ 109.035600][ C3] RBP: 0000000000000202 R08: 0000000000000001 R09: fffffbfff2d37398 [ 109.037787][ C3] R10: ffffffff969b9cc7 R11: dffffc0000000000 R12: 000000000000000f [ 109.040093][ C3] R13: dffffc0000000000 R14: ffff88802b744fc8 R15: ffff88802b744f00 [ 109.042399][ C3] __rmqueue_pcplist+0x5b1/0x1600 [ 109.043870][ C3] ? do_raw_spin_trylock+0xb1/0x180 [ 109.045409][ C3] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 109.046995][ C3] ? lock_acquire+0x2f/0xb0 [ 109.048339][ C3] ? get_page_from_freelist+0x350/0x2f80 [ 109.049965][ C3] get_page_from_freelist+0x3d2/0x2f80 [ 109.051543][ C3] ? __pfx_get_page_from_freelist+0x10/0x10 [ 109.053322][ C3] ? should_fail_alloc_page+0xee/0x130 [ 109.054979][ C3] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 109.056863][ C3] __alloc_pages_noprof+0x223/0x25b0 [ 109.058353][ C3] ? hlock_class+0x4e/0x130 [ 109.059629][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 109.061056][ C3] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 109.062659][ C3] ? find_held_lock+0x2d/0x110 [ 109.064024][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 109.065501][ C3] ? lock_acquire+0x2f/0xb0 [ 109.066824][ C3] ? is_bpf_text_address+0x30/0x1a0 [ 109.068294][ C3] ? bpf_ksym_find+0x124/0x1c0 [ 109.069627][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.071242][ C3] ? policy_nodemask+0xea/0x4e0 [ 109.072612][ C3] alloc_pages_mpol_noprof+0x2c8/0x620 [ 109.074193][ C3] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 109.075912][ C3] stack_depot_save_flags+0x8e0/0x9e0 [ 109.077458][ C3] kasan_save_stack+0x42/0x60 [ 109.078793][ C3] ? kasan_save_stack+0x33/0x60 [ 109.080180][ C3] ? kasan_save_track+0x14/0x30 [ 109.081612][ C3] ? kasan_save_free_info+0x3b/0x60 [ 109.083083][ C3] ? __kasan_slab_free+0x51/0x70 [ 109.084700][ C3] ? kfree+0x14f/0x4b0 [ 109.086096][ C3] ? ovl_lookup_index+0x4a4/0x870 [ 109.087554][ C3] ? ovl_lookup+0xbf5/0x21f0 [ 109.088890][ C3] ? __lookup_slow+0x24f/0x460 [ 109.090301][ C3] ? walk_component+0x350/0x5b0 [ 109.091698][ C3] ? path_lookupat+0x17f/0x770 [ 109.093080][ C3] ? filename_lookup+0x221/0x5f0 [ 109.094520][ C3] ? user_path_at+0x3a/0x60 [ 109.095841][ C3] ? do_fchownat+0xfa/0x200 [ 109.097169][ C3] ? __ia32_sys_lchown16+0xe6/0x120 [ 109.098612][ C3] ? __do_fast_syscall_32+0x73/0x120 [ 109.100108][ C3] ? do_fast_syscall_32+0x32/0x80 [ 109.101552][ C3] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.103408][ C3] kasan_save_track+0x14/0x30 [ 109.104747][ C3] kasan_save_free_info+0x3b/0x60 [ 109.106187][ C3] __kasan_slab_free+0x51/0x70 [ 109.107539][ C3] kfree+0x14f/0x4b0 [ 109.108650][ C3] ? dput.part.0+0x4b1/0x9b0 [ 109.110027][ C3] ? ovl_lookup_index+0x4a4/0x870 [ 109.111471][ C3] ovl_lookup_index+0x4a4/0x870 [ 109.112805][ C3] ? __pfx_ovl_lookup_index+0x10/0x10 [ 109.114302][ C3] ? trace_kmalloc+0x2d/0xd0 [ 109.115652][ C3] ? ovl_lookup+0x116a/0x21f0 [ 109.117010][ C3] ovl_lookup+0xbf5/0x21f0 [ 109.118296][ C3] ? __pfx_ovl_lookup+0x10/0x10 [ 109.119690][ C3] ? __pfx_d_alloc_parallel+0x10/0x10 [ 109.121176][ C3] ? lockdep_init_map_type+0x16d/0x7d0 [ 109.122670][ C3] __lookup_slow+0x24f/0x460 [ 109.123990][ C3] ? __pfx___lookup_slow+0x10/0x10 [ 109.125506][ C3] ? walk_component+0x342/0x5b0 [ 109.126908][ C3] ? lookup_fast+0x155/0x540 [ 109.128159][ C3] walk_component+0x350/0x5b0 [ 109.129480][ C3] path_lookupat+0x17f/0x770 [ 109.130824][ C3] filename_lookup+0x221/0x5f0 [ 109.132223][ C3] ? __virt_addr_valid+0x2b4/0x590 [ 109.133733][ C3] ? __pfx_filename_lookup+0x10/0x10 [ 109.135200][ C3] ? getname_flags.part.0+0x1c5/0x550 [ 109.136704][ C3] user_path_at+0x3a/0x60 [ 109.138021][ C3] do_fchownat+0xfa/0x200 [ 109.139219][ C3] ? __pfx_do_fchownat+0x10/0x10 [ 109.140649][ C3] ? __pfx___ia32_sys_chdir+0x10/0x10 [ 109.142227][ C3] __ia32_sys_lchown16+0xe6/0x120 [ 109.143705][ C3] __do_fast_syscall_32+0x73/0x120 [ 109.145233][ C3] do_fast_syscall_32+0x32/0x80 [ 109.146693][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.148585][ C3] RIP: 0023:0xf70de579 [ 109.149757][ C3] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 109.149781][ C2] bridge0: received packet on gretap1 with own address as source address (addr:ca:82:a4:88:1f:fe, vlan:0) [ 109.154983][ C3] RSP: 002b:00000000f50d055c EFLAGS: 00000296 ORIG_RAX: 0000000000000010 [ 109.159670][ C2] bridge0: received packet on gretap1 with own address as source address (addr:ca:82:a4:88:1f:fe, vlan:0) [ 109.160330][ C3] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000000000 [ 109.165663][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.167915][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.170197][ C3] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 109.172420][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.174678][ C3] [ 109.184199][ T6851] evm: overlay not supported [ 109.537218][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.591971][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.681463][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.754071][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.831481][ T45] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.893651][ T45] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.940704][ T45] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.949999][ C2] bridge0: received packet on gretap1 with own address as source address (addr:ca:82:a4:88:1f:fe, vlan:0) [ 110.006448][ T45] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.159438][ T45] bridge_slave_1: left allmulticast mode [ 110.161768][ T45] bridge_slave_1: left promiscuous mode [ 110.163581][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.167090][ T45] bridge_slave_0: left allmulticast mode [ 110.168791][ T45] bridge_slave_0: left promiscuous mode [ 110.170784][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.173857][ T45] gretap1: left promiscuous mode [ 110.175364][ T45] bridge0: port 3(gretap1) entered disabled state [ 110.180392][ T45] bridge_slave_1: left allmulticast mode [ 110.182508][ T45] bridge_slave_1: left promiscuous mode [ 110.184599][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.187662][ T45] bridge_slave_0: left allmulticast mode [ 110.190539][ T45] bridge_slave_0: left promiscuous mode [ 110.192164][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.393143][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.396616][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.400070][ T45] bond0 (unregistering): Released all slaves [ 110.411185][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.414957][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.418060][ T45] bond0 (unregistering): Released all slaves [ 110.867658][ T45] hsr_slave_0: left promiscuous mode [ 110.871916][ T45] hsr_slave_1: left promiscuous mode [ 110.874527][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.877375][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.881411][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.884119][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.892329][ T45] hsr_slave_0: left promiscuous mode [ 110.894751][ T45] hsr_slave_1: left promiscuous mode [ 110.897472][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.900434][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.903900][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.906679][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.913167][ T45] veth1_macvtap: left promiscuous mode [ 110.915153][ T45] veth0_macvtap: left promiscuous mode [ 110.917227][ T45] veth1_vlan: left promiscuous mode [ 110.919152][ T45] veth0_vlan: left promiscuous mode [ 110.922774][ T45] veth1_macvtap: left promiscuous mode [ 110.924812][ T45] veth0_macvtap: left promiscuous mode [ 110.926866][ T45] veth1_vlan: left promiscuous mode [ 110.928786][ T45] veth0_vlan: left promiscuous mode [ 111.122353][ T45] team0 (unregistering): Port device team_slave_1 removed [ 111.152390][ T45] team0 (unregistering): Port device team_slave_0 removed [ 111.454151][ T45] team0 (unregistering): Port device team_slave_1 removed [ 111.485347][ T45] team0 (unregistering): Port device team_slave_0 removed [ 112.345116][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.402489][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.462054][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.529105][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.654543][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.712968][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.774040][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.852558][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.930544][ T45] bridge_slave_1: left allmulticast mode [ 112.932820][ T45] bridge_slave_1: left promiscuous mode [ 112.936232][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.939017][ T45] bridge_slave_0: left allmulticast mode [ 112.941421][ T45] bridge_slave_0: left promiscuous mode [ 112.943010][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.946024][ T45] bridge_slave_1: left allmulticast mode [ 112.947646][ T45] bridge_slave_1: left promiscuous mode [ 112.949334][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.952041][ T45] bridge_slave_0: left allmulticast mode [ 112.953617][ T45] bridge_slave_0: left promiscuous mode [ 112.955172][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.169454][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.173107][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.176346][ T45] bond0 (unregistering): Released all slaves [ 113.238100][ T45] bond1 (unregistering): Released all slaves [ 113.245221][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.251202][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.254811][ T45] bond0 (unregistering): Released all slaves [ 113.692755][ T45] hsr_slave_0: left promiscuous mode [ 113.695690][ T45] hsr_slave_1: left promiscuous mode [ 113.697654][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.700349][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.703176][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.705794][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.710534][ T45] hsr_slave_0: left promiscuous mode [ 113.712907][ T45] hsr_slave_1: left promiscuous mode [ 113.720198][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.722331][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.724592][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.726675][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.731499][ T45] veth1_macvtap: left promiscuous mode [ 113.733573][ T45] veth0_macvtap: left promiscuous mode [ 113.735738][ T45] veth1_vlan: left promiscuous mode [ 113.737595][ T45] veth0_vlan: left promiscuous mode [ 113.741802][ T45] veth1_macvtap: left promiscuous mode [ 113.743463][ T45] veth0_macvtap: left promiscuous mode [ 113.745130][ T45] veth1_vlan: left promiscuous mode [ 113.746685][ T45] veth0_vlan: left promiscuous mode [ 113.975795][ T45] team0 (unregistering): Port device team_slave_1 removed [ 114.004793][ T45] team0 (unregistering): Port device team_slave_0 removed [ 114.278619][ T45] team0 (unregistering): Port device team_slave_1 removed [ 114.311425][ T45] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 09:31:15 Registers: info registers vcpu 0 CPU#0 RAX=ffff8880452393a0 RBX=ffff888045238000 RCX=0000000000000000 RDX=dffffc0000000000 RSI=1ffff11008a47274 RDI=0000000000000005 RBP=1ffff92000036f6a RSP=ffffc900001b7ad8 R8 =0000000000000005 R9 =0000000000000002 R10=0000000000000005 R11=0000000000000001 R12=ffff888045238f98 R13=ffff8880452393d8 R14=0000000000000000 R15=ffff888045238d80 RIP=ffffffff8657dedc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f404ffc CR3=0000000024ec8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fea0ffd0 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe84270030 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ffffffff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5851ec56536d2087 73732556bf84bf05 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000161 0000000000000000 30706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd0d5f1bb0 00005620aefdac10 00000000000000c1 000000000000302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000091 6b636f6c622d3036 00005620aefd5300 306d656d702f6b63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000003a77c4 RBX=0000000000000001 RCX=ffffffff8b1a8889 RDX=ffffed10056a6fee RSI=ffffffff8bb17240 RDI=ffffffff81703079 RBP=ffffed10039dc910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001 R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901cf6d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f510dc80 CR3=0000000025d10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 EAX=8497a4f1 EBX=ffffffff ECX=8497a533 EDX=f7493ff4 ESI=f74c5078 EDI=f6557008 EBP=f7ff5610 ESP=ff999880 EIP=f719b20c EFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56f88440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c340a03 CR3=0000000025d10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145e25 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc900005f7de0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85145dc0 R15=0000000000000000 RIP=ffffffff85145e4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001000 CR3=0000000068444000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000