last executing test programs: 13m53.233976731s ago: executing program 0 (id=2531): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000120001000000000000000a1c000200090a010100000000000000000a0000060800054000000002140000001100010000000000000000000100000af3928ce5bd4e9262dcefe8d9ad51c2008c07c6adcc6f3175cea57dc89d917de2cb29decb2ee8893b243c83e17e022d2df7c50aa1962b788fc70000000000"], 0xfffffffffffffe64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x18, 0x1419, 0x901, 0x0, 0x0, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x18}}, 0x0) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="0300000000000000ed79370d3e55de8f6777317eaa65"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x400c0c6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000400)={0x0, 0x17, 0x5, 0x1, 0x25, 0x7fffffff, &(0x7f0000000340)="1ee12d2952530854cdb4b4fff96c0f782b5924ecfb6a15c4e8cfff5927bbee1efbb1f325d8"}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000140), &(0x7f0000000240), 0x2, 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) splice(r2, &(0x7f00000002c0)=0x52b7, r2, &(0x7f00000003c0)=0x7, 0x0, 0x6) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={0x34, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x300}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="772de4c6fbadf6400b3266af79b43d2cb45dad466394f5685a4b4d6143b5491c85968a3d0f8b434bd5403462923a9b8645dfc5492029d4401fbc1d55afbc1fcdb5099983327b57fcac9b089081d78f3230f09aee6fa03d3571d0f5a4ed8c29c63e6087a5a133f6c86d4b5b745ac7564ff4a32f564c9e36bb9ed212cde165aee6d25258fd7bf3ab8bdf8b39e797be2040625e1b232af318aaf70340786eaacdfb75598087ccc3d11f5de85d031ef13e287e5560e62e", @ANYRESOCT=r7, @ANYRES64, @ANYRES64, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xc2, &(0x7f0000000340)=""/194, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0x2, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x6, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8a}, 0x0) 13m53.101278327s ago: executing program 0 (id=2532): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0x80400, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000080)=0x4, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x24, r1, 0x306f4486fceed48b, 0x2070bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1}, r4) 13m52.9962658s ago: executing program 0 (id=2533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xdf6b3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f0000000000)) r2 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x3, 0x2, 0x2, 0x4000020}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000002c0)={&(0x7f0000001000)={[{&(0x7f0000000000)="4309378b4ec85d493bdd3e497ca3db9bc7fa79cfd13bc2b9ada1eaccae893d45b4d20e5c50d4c990c943", 0x2a, 0x2}, {&(0x7f0000000040)="ad63c46c22ad71da72281fe1136892e3615f928212d19e35572e2b5566d493453a164530c488c1d687dabf81dec01db4f95bb43085bb6f5938521b7586247ab8fccd75c8b91a9f70e23ef218776b33ec584fb17e97a3198c060c54b54314de65ddaa43d73965907fd5faa8f9e5861f6d4493f3d67dec7b1628dcd90a69b98c747b9548cece4500c473a89e616a092e8fd0f6c382720036155361c3aba98631bf2878afe4a18707ee4ece59749dd8a11965bb0536a8332693e30ffe96e8fc1e1d5b7144dabb1ef1565723320b8ab4c7a19a3560", 0xd3}, {&(0x7f0000000140)="0de427d849e1f799aba13ecafcb6c9aa554b14aeb5825ff25564ba65998d6367b53652d59470e3f5b52d6c16f3acafc1eb6663e5192af47862048b6c39cc15b79b2088df4b65bd66b7753987ffbdee7c72099727f9680d948f66eb1c8883df19ae960ec05688dba0e2372ac5fae8aa0c45366bcfcf685716abff762fdf157b9c702e86845c390dfddbdf125f1d7be1b981ee24dfa7aa42e9188fba428d849583906e54ec569219d8daf5da06d467b07f84e1e4ccfb6e8032aa54a55520a0e5547618320ed5728745264d437fb549581f5c9f87fbc42ad685b4", 0xd9}, {&(0x7f0000000240)="ed750d44d6533a46a8806d809c8300bcfd8aa8feb50fd49d4e1ea4b173e93dd5ded806a8bc5f94f6539afb4beb85cd86ec7520c4bf9c2e1cdccf9935c5f63e21087c519e48dab6c483275ade1158ed900841fbdb92a10d147479d34261b7c453367419198a8d6aa729f69d", 0x6b, 0x2}]}, 0x4, 0x3}, 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x6}], 0xf000, 0x10123, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x38, 0x0, 0x0, 0x48}) close_range(r2, 0xffffffffffffffff, 0x0) 13m52.75810817s ago: executing program 0 (id=2534): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x40410) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) openat$kvm(0xffffffffffffff9c, 0x0, 0xea100, 0x0) uname(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m52.696554688s ago: executing program 0 (id=2535): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r5 = socket(0x18, 0x3, 0x1) sendfile(r5, r4, 0x0, 0x8) r6 = openat$mice(0xffffff9c, &(0x7f00000001c0), 0x4002) bind$phonet(r6, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x10, r0}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x2, 0x3, {{0x20, 0x4, 0x0, 0x14, 0x80, 0x68, 0x0, 0x81, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x6c, 0xcd, 0x3, 0x1, [{@loopback, 0x80000001}, {@local, 0xcec}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffe}, {@empty, 0x1}, {@local}, {@empty, 0x8}, {@empty, 0x1}, {@multicast1, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@multicast2, 0xffffffa3}, {@private=0xa010102, 0x180000}, {@remote, 0x1400}]}]}}}}}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000600)=""/220, 0xdc, 0x0, &(0x7f0000000700)=""/187, 0xbb}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x20, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000009000000000000009d040000852000000300000018000000049a0000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000aa0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000094d000040000000182b0000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x7fff0, 0x0, 0x0, 0x41000, 0x50, '\x00', r9, @netfilter, r10, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x6, 0x91c, 0x100}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000840)=[0x1], &(0x7f0000000880)=[{0x5, 0x3, 0xf, 0x2}], 0x10, 0x80}, 0x94) r11 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r11) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r13 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r13, 0x4c0a, &(0x7f0000001ac0)={r12, 0x4000, {0x0, 0x300, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 13m51.834050398s ago: executing program 0 (id=2540): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x20, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) creat(&(0x7f00000000c0)='./file0\x00', 0x42) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) (async) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) shutdown(r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) (async) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003040)=@newchain={0x68, 0x64, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x9}, {0x8, 0x3}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_sample={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x891) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000009000000850000000f00000018010000646c6c250000000e9a6618047ea59eff00000000bfa100000000000007010000f8ffe2ffb702000008000000b70300000000000085000099"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r10, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r10, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r12, 0x0, 0xae6, 0x4) (async) splice(r9, 0x0, r12, 0x0, 0xae6, 0x4) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) (async) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) 13m37.29718919s ago: executing program 32 (id=2540): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x20, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) creat(&(0x7f00000000c0)='./file0\x00', 0x42) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) (async) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) shutdown(r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) (async) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003040)=@newchain={0x68, 0x64, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x9}, {0x8, 0x3}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_sample={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x891) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000009000000850000000f00000018010000646c6c250000000e9a6618047ea59eff00000000bfa100000000000007010000f8ffe2ffb702000008000000b70300000000000085000099"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r10, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r10, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r12, 0x0, 0xae6, 0x4) (async) splice(r9, 0x0, r12, 0x0, 0xae6, 0x4) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) (async) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) 9m42.35835338s ago: executing program 3 (id=4264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000b08000240000000000800044000000003080003400000000408000540000000010900010073797a30000000000900020073797a32"], 0x98}}, 0x20000080) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0x2020) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r6, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100"], 0x68}}, 0x0) 9m42.199158268s ago: executing program 3 (id=4265): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r2}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x99, 0x11e41e7a, 0x20000000, 0x0, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x0, 0x10001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) 9m41.298625025s ago: executing program 3 (id=4271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2008c010) 9m41.231509261s ago: executing program 3 (id=4272): getpgid(0x0) r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x4, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xc, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r6, &(0x7f0000000380)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x13, 0x1, 0x0, "61060005000000000000006c4a00000800", 0x494e4f4b}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) 9m39.921218295s ago: executing program 3 (id=4279): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r2}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x99, 0x11e41e7a, 0x20000000, 0x0, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x0, 0x10001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) 9m39.564693777s ago: executing program 3 (id=4285): syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001380)={0xd88, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x248, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x5}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0x8}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x5}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x4, 0x8}, {0x2, 0x3}, {0x6, 0x1}, {0x7, 0x7}, {0x0, 0x9}, {}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1f, 0x12, 0x16, 0x18, 0x5, 0xc, 0x65, 0x48, 0xc, 0x3, 0x6c, 0x9, 0x6a, 0x9, 0x5, 0x1, 0x12, 0x12, 0x24, 0x1, 0x6, 0x5, 0x6, 0x16, 0x30, 0x1b, 0x60, 0x16]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}]}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xae}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x1e3, 0x154, 0x7ff, 0x7, 0x4, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x5, 0xd, 0x9, 0x6, 0xfff9, 0x22]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x3}, {0x4, 0xa}, {0x4, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {}, {0x3, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x3, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x24, 0x30, 0x4, 0x12, 0x94d460f97f2b0dbf]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x100, 0xfeca, 0x5, 0x800, 0x8e, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x47, 0xb68, 0xf54e, 0x6, 0x3, 0x1, 0x2, 0x4f9f]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x101, 0x81, 0x5, 0x522, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x93}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x180000}]}]}, @NL80211_ATTR_TID_CONFIG={0x4cc, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0xa}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0xa}, {0x6, 0xa}, {0x4}, {0x2, 0x9}, {0x4, 0x8}, {0x5, 0x6}, {0x6}, {0x1, 0x1}, {0x1}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x5, 0x11}, {0x7, 0x2}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x7}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x5, 0x8}, {0x3, 0x9}, {0x6, 0x8}, {0x3, 0x6}, {0x2, 0xa}, {0x5, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x6, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x3}, {0x1, 0xa}, {}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x4, 0x5}, {0x4}, {0x4, 0x5}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0x4}, {0x4}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x7}, {0x2, 0x1}, {0x2, 0x6}, {0x4, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x1}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4ff, 0x84, 0x3, 0x10, 0xb0b5, 0x7ff, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x9, 0x401, 0x5, 0x5, 0x2, 0x1000]}}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0xc, 0x1, 0x30, 0x1b, 0x1b, 0x9, 0x1, 0x9, 0x3, 0x12, 0x9, 0x4, 0xc, 0xb, 0x36, 0x47, 0x12, 0x16, 0x5, 0x16, 0x9, 0x2a, 0x9, 0x24, 0x24, 0x6, 0x36, 0x1b, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x26, 0x5, 0x7, 0x3, 0x9, 0xc, 0x7, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x36, 0x36, 0x6, 0x1b, 0x1, 0x1, 0x36, 0x37, 0x60, 0xb, 0x30, 0x3c, 0x18, 0x1b, 0x1b, 0x9, 0x12, 0x6, 0x48, 0xb, 0x48, 0x36, 0x6, 0x30, 0x36, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x45, 0x5, 0x1, 0x8, 0x10, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x7}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x6}, {0x7, 0x4}, {0x5, 0x6}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x2, 0x6}, {0x2, 0x5}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x3, 0x18, 0x6, 0x30, 0x0, 0x9, 0x4, 0x36, 0x0, 0x30, 0x16, 0x3, 0xa, 0x4, 0x24, 0x24, 0xb, 0x3, 0x1, 0x6, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x6}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x6}, {0x7, 0x1}, {0x3, 0x3}, {0x5}, {0x4, 0x7}, {0x5, 0x6}, {0x3}, {0x4, 0x9}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x5, 0x5}, {0x7}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x2}, {0x3}, {0x2, 0x1}, {0x4, 0x1b}, {0x4, 0x6}, {0x6, 0x2}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x7}, {0x6, 0x8}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x3}, {0x5, 0x4}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x6, 0x7}, {0x7, 0x1}, {0x4, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x1, 0x2}, {0x5, 0x1}, {}, {0x1, 0x4}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x36, 0x2, 0x9, 0x60, 0xb, 0xc, 0xc, 0x0, 0x60, 0x2, 0x1, 0x1b, 0x30, 0x48, 0x2, 0x60, 0x3, 0x36, 0x4, 0x48, 0x2, 0x6e, 0x1b, 0x1, 0x6, 0x1b, 0x4, 0x24, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x190, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x6}, {0x4, 0x6}, {0x0, 0x6}, {0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x4, 0x3}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x9}, {0x3, 0x5}, {0x2}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x3}, {0x7, 0x1b}, {0x3, 0x4}, {0x6, 0x3}, {0x1, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x6, 0x24, 0x1, 0xd, 0x6c, 0x36, 0xb, 0x64, 0x12, 0x1, 0x9, 0x24, 0x6, 0x60, 0x30, 0x6c, 0x2, 0x2, 0x24, 0x2, 0x6c, 0x1, 0xc, 0x24, 0x18, 0x60, 0x60, 0x20, 0x60]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x6, 0x1, 0x7, 0x3, 0x1, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5500, 0xfff, 0x1ff, 0x45, 0x3, 0x80, 0xa5, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x6, 0x101, 0x9, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf, 0x0, 0x8000, 0x8, 0x100, 0x0, 0xc5e]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0xc, 0x2, 0x60, 0x18, 0x3, 0x2, 0x6]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x1, 0x36, 0x3, 0x16, 0x6, 0x36, 0x9, 0x60, 0x6c, 0x9, 0x9, 0x4, 0x6c, 0x1b, 0x48, 0x3, 0xb, 0x1b, 0x24, 0x9, 0x60, 0x24]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x437, 0xffff, 0x2d, 0x4, 0x5ec, 0x7ff, 0x7, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x2}, {0x7, 0x8}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x60, 0x6, 0x30, 0x9, 0x18, 0x33, 0x24, 0x4, 0x5, 0x2, 0xefaacc3bd4380ade, 0xb, 0x3, 0xf, 0x4, 0x3, 0x48, 0x3, 0x60, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd2, 0x1, 0x7, 0xffab, 0x6, 0x0, 0x0, 0x565]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x5a8, 0x11d, 0x0, 0x1, [{0x218, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x214, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe8, 0x8, 0x3, 0xfffb, 0x1, 0x1, 0x2d0]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfe, 0x7, 0x6, 0x2, 0xd, 0x1000, 0x2]}}]}, @NL80211_BAND_6GHZ={0xf4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x1b, 0x0, 0x5, 0x3, 0xb, 0x16, 0x3, 0x6, 0x4, 0x1, 0x12, 0x36, 0x1b, 0x12, 0x4, 0x5, 0x1, 0x5, 0x18, 0x1b, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x21a4, 0x200, 0x5457, 0x7ff, 0x1a34, 0xe457, 0x8]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x6}, {}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x9}, {0x7, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x7}, {0x6}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x4, 0x9}, {0x5, 0x9}, {0x4, 0x9}, {0x4, 0x7}, {0x6, 0xa}, {0x4, 0x8}, {0x4, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {0x4, 0x9}, {0x5, 0x5}, {0x6}, {0x3, 0x9}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x5, 0x9}, {0x5}, {0x7, 0x3}, {0x4, 0x6}, {0x3, 0x8}, {0x6, 0xa}, {0x2, 0xa}, {}, {0x6, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x4, 0x2}, {0x2, 0x1}, {0x7, 0x5}, {0x4, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x3, 0x8}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x2}, {0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x9}, {0x5}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0x6}, {0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x8}, {0x5, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0x5}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x6, 0x9}, {0x2, 0x8}, {0x6}, {0x2, 0x5}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x2}, {0x3, 0xa}, {0x3, 0x7}, {0x5, 0x7}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {}, {0x5, 0x5}, {0x5}, {0x7, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x7}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x2}, {0x7, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x5}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8f4, 0x9a, 0x8, 0xf, 0x9, 0xcc37, 0x8, 0x100]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x6, 0xd, 0x7, 0xf52, 0x800, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x36, 0x10, 0x2, 0x24, 0x1b, 0x60, 0xc, 0x18, 0x60, 0x2, 0x34, 0x36, 0xb, 0x48, 0x16, 0x12, 0xb, 0x6c, 0x5, 0x30, 0x5, 0x2, 0x1, 0x5a]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc6f, 0xc281, 0x4, 0x5, 0x8, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x9, 0x100, 0xe52, 0xfffb, 0x7, 0x9f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x2, 0x4, 0x10, 0x4d, 0x401, 0x71c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xffff, 0x101, 0x1, 0x2, 0xde, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0xb, 0x16, 0x48, 0x30, 0x3, 0x0, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x100, 0x2, 0x6, 0x400, 0x0, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x8a, 0x6, 0x5, 0x7, 0x7ff, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x18, 0x1b, 0xb, 0x6c, 0x1b, 0x48, 0x21e58c52cbafbd17, 0x6c, 0x48, 0x6c, 0x2, 0x3, 0xc, 0x30, 0x1, 0xc, 0x0, 0x2d, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x6, 0x36, 0x9, 0x36, 0x12, 0x30, 0x16, 0x5, 0x1, 0xc, 0xc, 0x2, 0xb, 0x24, 0x30, 0xe61ec45d1754c29f, 0x12, 0x12, 0x16, 0x9, 0x30, 0x6c, 0x18, 0x18, 0x2a, 0x24, 0x30, 0xba, 0x6c, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf8b6, 0x9, 0xd0, 0x7fff, 0xfff8, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x9, 0x60, 0x6, 0x24, 0x18, 0x3, 0x16, 0x48, 0x18, 0x16, 0x48, 0x12, 0x48, 0x16, 0x48, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x2, 0x765, 0x1, 0x2, 0x9, 0xa]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x5, 0x6, 0x6, 0xe5e4, 0x0, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xf, 0x1, 0x24, 0x76, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x1ff, 0x200, 0x1, 0x40, 0xff35, 0x800]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x496c, 0xb, 0xff01, 0x2, 0x8, 0x7, 0x800, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x6, 0x4}, {0x3, 0x6}, {0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x4, 0x7}, {0x1}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x3, 0xa}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0xa, 0x69fb, 0x81, 0x4, 0x11eb, 0x8]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x3}, {0x1, 0x8}, {0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x5}, {0x3, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x2}, {0x7, 0x6}, {0x2, 0x9}, {0x1, 0xa}, {0x6, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x4, 0x4}, {0x3, 0x6}, {0x6}, {0x7, 0x5}, {}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x6}, {0x2, 0x4}, {0x5, 0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x9}, {0x2, 0x4}, {0x3, 0x3}, {0x4}, {0x2}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x9}, {0x3, 0xa}, {0x5, 0x8}, {0x6, 0x9}, {0x6, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x4, 0x16, 0x2, 0x4, 0x17, 0x30, 0xb, 0x4, 0x16, 0x1, 0x0, 0x5, 0x18, 0x5, 0x5081175b87f94109, 0x60, 0x4, 0x3, 0x36, 0x65, 0x1, 0x5, 0x3, 0x5, 0x12, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x7fff, 0xbc9, 0xa8f8, 0x9, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfba, 0x41a, 0xdc0, 0x0, 0x4, 0x9, 0x3, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x66}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x9, 0x0, 0xc0, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x5}, {0x6, 0x4}, {0x6, 0xa}, {0x7, 0x6}, {0x1}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x2, 0x4}, {0x5, 0x2}, {0x5, 0xa}, {0x4, 0x3}, {0x2, 0x8}, {0x0, 0x5}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x2}, {0x5, 0x9}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x6}, {0x1, 0xa}, {0x2, 0x8}, {0x3}, {0x2, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x2, 0x7}, {0x6, 0x7}, {0x7, 0xe}, {0x5, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x7}, {}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x6c, 0xb, 0xb8]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1c, 0x1, 0x9, 0x543, 0x2, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x9e9, 0x5, 0x8, 0xfff9, 0xe8, 0x3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8, 0x8, 0x7f, 0xfffc, 0x47]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x401, 0x1ff, 0x3, 0xd5, 0xfff7, 0x40, 0x2]}}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xd88}}, 0x20044001) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fchdir(r1) exit(0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00') socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(0x0, 0x2, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x64e7, r3, 0x0, 0x0, 0x8}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x80, r4, &(0x7f0000000440), 0x0, 0x8}]) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050) 9m39.525191387s ago: executing program 33 (id=4285): syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001380)={0xd88, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x248, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x5}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0x8}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x5}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x4, 0x8}, {0x2, 0x3}, {0x6, 0x1}, {0x7, 0x7}, {0x0, 0x9}, {}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1f, 0x12, 0x16, 0x18, 0x5, 0xc, 0x65, 0x48, 0xc, 0x3, 0x6c, 0x9, 0x6a, 0x9, 0x5, 0x1, 0x12, 0x12, 0x24, 0x1, 0x6, 0x5, 0x6, 0x16, 0x30, 0x1b, 0x60, 0x16]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}]}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xae}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x1e3, 0x154, 0x7ff, 0x7, 0x4, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x5, 0xd, 0x9, 0x6, 0xfff9, 0x22]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x3}, {0x4, 0xa}, {0x4, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {}, {0x3, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x3, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x24, 0x30, 0x4, 0x12, 0x94d460f97f2b0dbf]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x100, 0xfeca, 0x5, 0x800, 0x8e, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x47, 0xb68, 0xf54e, 0x6, 0x3, 0x1, 0x2, 0x4f9f]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x101, 0x81, 0x5, 0x522, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x93}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x180000}]}]}, @NL80211_ATTR_TID_CONFIG={0x4cc, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0xa}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0xa}, {0x6, 0xa}, {0x4}, {0x2, 0x9}, {0x4, 0x8}, {0x5, 0x6}, {0x6}, {0x1, 0x1}, {0x1}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x5, 0x11}, {0x7, 0x2}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x7}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x5, 0x8}, {0x3, 0x9}, {0x6, 0x8}, {0x3, 0x6}, {0x2, 0xa}, {0x5, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x6, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x3}, {0x1, 0xa}, {}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x4, 0x5}, {0x4}, {0x4, 0x5}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0x4}, {0x4}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x7}, {0x2, 0x1}, {0x2, 0x6}, {0x4, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x1}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4ff, 0x84, 0x3, 0x10, 0xb0b5, 0x7ff, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x9, 0x401, 0x5, 0x5, 0x2, 0x1000]}}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0xc, 0x1, 0x30, 0x1b, 0x1b, 0x9, 0x1, 0x9, 0x3, 0x12, 0x9, 0x4, 0xc, 0xb, 0x36, 0x47, 0x12, 0x16, 0x5, 0x16, 0x9, 0x2a, 0x9, 0x24, 0x24, 0x6, 0x36, 0x1b, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x26, 0x5, 0x7, 0x3, 0x9, 0xc, 0x7, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x36, 0x36, 0x6, 0x1b, 0x1, 0x1, 0x36, 0x37, 0x60, 0xb, 0x30, 0x3c, 0x18, 0x1b, 0x1b, 0x9, 0x12, 0x6, 0x48, 0xb, 0x48, 0x36, 0x6, 0x30, 0x36, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x45, 0x5, 0x1, 0x8, 0x10, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x7}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x6}, {0x7, 0x4}, {0x5, 0x6}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x2, 0x6}, {0x2, 0x5}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x3, 0x18, 0x6, 0x30, 0x0, 0x9, 0x4, 0x36, 0x0, 0x30, 0x16, 0x3, 0xa, 0x4, 0x24, 0x24, 0xb, 0x3, 0x1, 0x6, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x6}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x6}, {0x7, 0x1}, {0x3, 0x3}, {0x5}, {0x4, 0x7}, {0x5, 0x6}, {0x3}, {0x4, 0x9}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x5, 0x5}, {0x7}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x2}, {0x3}, {0x2, 0x1}, {0x4, 0x1b}, {0x4, 0x6}, {0x6, 0x2}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x7}, {0x6, 0x8}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x3}, {0x5, 0x4}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x6, 0x7}, {0x7, 0x1}, {0x4, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x1, 0x2}, {0x5, 0x1}, {}, {0x1, 0x4}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x36, 0x2, 0x9, 0x60, 0xb, 0xc, 0xc, 0x0, 0x60, 0x2, 0x1, 0x1b, 0x30, 0x48, 0x2, 0x60, 0x3, 0x36, 0x4, 0x48, 0x2, 0x6e, 0x1b, 0x1, 0x6, 0x1b, 0x4, 0x24, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x190, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x6}, {0x4, 0x6}, {0x0, 0x6}, {0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x4, 0x3}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x9}, {0x3, 0x5}, {0x2}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x3}, {0x7, 0x1b}, {0x3, 0x4}, {0x6, 0x3}, {0x1, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x6, 0x24, 0x1, 0xd, 0x6c, 0x36, 0xb, 0x64, 0x12, 0x1, 0x9, 0x24, 0x6, 0x60, 0x30, 0x6c, 0x2, 0x2, 0x24, 0x2, 0x6c, 0x1, 0xc, 0x24, 0x18, 0x60, 0x60, 0x20, 0x60]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x6, 0x1, 0x7, 0x3, 0x1, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5500, 0xfff, 0x1ff, 0x45, 0x3, 0x80, 0xa5, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x6, 0x101, 0x9, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf, 0x0, 0x8000, 0x8, 0x100, 0x0, 0xc5e]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0xc, 0x2, 0x60, 0x18, 0x3, 0x2, 0x6]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x1, 0x36, 0x3, 0x16, 0x6, 0x36, 0x9, 0x60, 0x6c, 0x9, 0x9, 0x4, 0x6c, 0x1b, 0x48, 0x3, 0xb, 0x1b, 0x24, 0x9, 0x60, 0x24]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x437, 0xffff, 0x2d, 0x4, 0x5ec, 0x7ff, 0x7, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x2}, {0x7, 0x8}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x60, 0x6, 0x30, 0x9, 0x18, 0x33, 0x24, 0x4, 0x5, 0x2, 0xefaacc3bd4380ade, 0xb, 0x3, 0xf, 0x4, 0x3, 0x48, 0x3, 0x60, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd2, 0x1, 0x7, 0xffab, 0x6, 0x0, 0x0, 0x565]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x5a8, 0x11d, 0x0, 0x1, [{0x218, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x214, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe8, 0x8, 0x3, 0xfffb, 0x1, 0x1, 0x2d0]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfe, 0x7, 0x6, 0x2, 0xd, 0x1000, 0x2]}}]}, @NL80211_BAND_6GHZ={0xf4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x1b, 0x0, 0x5, 0x3, 0xb, 0x16, 0x3, 0x6, 0x4, 0x1, 0x12, 0x36, 0x1b, 0x12, 0x4, 0x5, 0x1, 0x5, 0x18, 0x1b, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x21a4, 0x200, 0x5457, 0x7ff, 0x1a34, 0xe457, 0x8]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x6}, {}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x9}, {0x7, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x7}, {0x6}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x4, 0x9}, {0x5, 0x9}, {0x4, 0x9}, {0x4, 0x7}, {0x6, 0xa}, {0x4, 0x8}, {0x4, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {0x4, 0x9}, {0x5, 0x5}, {0x6}, {0x3, 0x9}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x5, 0x9}, {0x5}, {0x7, 0x3}, {0x4, 0x6}, {0x3, 0x8}, {0x6, 0xa}, {0x2, 0xa}, {}, {0x6, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x4, 0x2}, {0x2, 0x1}, {0x7, 0x5}, {0x4, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x3, 0x8}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x2}, {0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x9}, {0x5}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0x6}, {0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x8}, {0x5, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0x5}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x6, 0x9}, {0x2, 0x8}, {0x6}, {0x2, 0x5}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x2}, {0x3, 0xa}, {0x3, 0x7}, {0x5, 0x7}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {}, {0x5, 0x5}, {0x5}, {0x7, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x7}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x2}, {0x7, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x5}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8f4, 0x9a, 0x8, 0xf, 0x9, 0xcc37, 0x8, 0x100]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x6, 0xd, 0x7, 0xf52, 0x800, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x36, 0x10, 0x2, 0x24, 0x1b, 0x60, 0xc, 0x18, 0x60, 0x2, 0x34, 0x36, 0xb, 0x48, 0x16, 0x12, 0xb, 0x6c, 0x5, 0x30, 0x5, 0x2, 0x1, 0x5a]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc6f, 0xc281, 0x4, 0x5, 0x8, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x9, 0x100, 0xe52, 0xfffb, 0x7, 0x9f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x2, 0x4, 0x10, 0x4d, 0x401, 0x71c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xffff, 0x101, 0x1, 0x2, 0xde, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0xb, 0x16, 0x48, 0x30, 0x3, 0x0, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x100, 0x2, 0x6, 0x400, 0x0, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x8a, 0x6, 0x5, 0x7, 0x7ff, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x18, 0x1b, 0xb, 0x6c, 0x1b, 0x48, 0x21e58c52cbafbd17, 0x6c, 0x48, 0x6c, 0x2, 0x3, 0xc, 0x30, 0x1, 0xc, 0x0, 0x2d, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x6, 0x36, 0x9, 0x36, 0x12, 0x30, 0x16, 0x5, 0x1, 0xc, 0xc, 0x2, 0xb, 0x24, 0x30, 0xe61ec45d1754c29f, 0x12, 0x12, 0x16, 0x9, 0x30, 0x6c, 0x18, 0x18, 0x2a, 0x24, 0x30, 0xba, 0x6c, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf8b6, 0x9, 0xd0, 0x7fff, 0xfff8, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x9, 0x60, 0x6, 0x24, 0x18, 0x3, 0x16, 0x48, 0x18, 0x16, 0x48, 0x12, 0x48, 0x16, 0x48, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x2, 0x765, 0x1, 0x2, 0x9, 0xa]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x5, 0x6, 0x6, 0xe5e4, 0x0, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xf, 0x1, 0x24, 0x76, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x1ff, 0x200, 0x1, 0x40, 0xff35, 0x800]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x496c, 0xb, 0xff01, 0x2, 0x8, 0x7, 0x800, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x6, 0x4}, {0x3, 0x6}, {0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x4, 0x7}, {0x1}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x3, 0xa}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0xa, 0x69fb, 0x81, 0x4, 0x11eb, 0x8]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x3}, {0x1, 0x8}, {0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x5}, {0x3, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x2}, {0x7, 0x6}, {0x2, 0x9}, {0x1, 0xa}, {0x6, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x4, 0x4}, {0x3, 0x6}, {0x6}, {0x7, 0x5}, {}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x6}, {0x2, 0x4}, {0x5, 0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x9}, {0x2, 0x4}, {0x3, 0x3}, {0x4}, {0x2}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x9}, {0x3, 0xa}, {0x5, 0x8}, {0x6, 0x9}, {0x6, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x4, 0x16, 0x2, 0x4, 0x17, 0x30, 0xb, 0x4, 0x16, 0x1, 0x0, 0x5, 0x18, 0x5, 0x5081175b87f94109, 0x60, 0x4, 0x3, 0x36, 0x65, 0x1, 0x5, 0x3, 0x5, 0x12, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x7fff, 0xbc9, 0xa8f8, 0x9, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfba, 0x41a, 0xdc0, 0x0, 0x4, 0x9, 0x3, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x66}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x9, 0x0, 0xc0, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x5}, {0x6, 0x4}, {0x6, 0xa}, {0x7, 0x6}, {0x1}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x2, 0x4}, {0x5, 0x2}, {0x5, 0xa}, {0x4, 0x3}, {0x2, 0x8}, {0x0, 0x5}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x2}, {0x5, 0x9}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x6}, {0x1, 0xa}, {0x2, 0x8}, {0x3}, {0x2, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x2, 0x7}, {0x6, 0x7}, {0x7, 0xe}, {0x5, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x7}, {}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x6c, 0xb, 0xb8]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1c, 0x1, 0x9, 0x543, 0x2, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x9e9, 0x5, 0x8, 0xfff9, 0xe8, 0x3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8, 0x8, 0x7f, 0xfffc, 0x47]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x401, 0x1ff, 0x3, 0xd5, 0xfff7, 0x40, 0x2]}}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xd88}}, 0x20044001) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fchdir(r1) exit(0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00') socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(0x0, 0x2, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x64e7, r3, 0x0, 0x0, 0x8}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x80, r4, &(0x7f0000000440), 0x0, 0x8}]) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050) 4m46.615800282s ago: executing program 1 (id=5834): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000000)=""/156, 0x9c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x8880}, 0x24000015) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x6a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 4m46.544712229s ago: executing program 1 (id=5835): open$dir(&(0x7f00000003c0)='./file0/file0\x00', 0x200, 0xc8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, r6, 0xe14, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000040) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x84, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x7ffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x200002, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000], 0x8000000, 0x2010d3}) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r8}, &(0x7f0000000180), &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="26c80000a30ff8ab000000003e6667c1cc762665f26f0fc75b00c4e275291caec4c1405f580cea00000100b40066baf80cb82e928686ef66bafc0cec0f18b500980000", 0x43}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) 4m46.210331436s ago: executing program 1 (id=5838): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2000000015, 0x80005, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x20004002) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r3}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, {{&(0x7f00000022c0)=@can={0x1d, r3}, 0x80, 0x0}}], 0x2, 0x0) 4m46.105532689s ago: executing program 1 (id=5840): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0xf4, 0x1}, 0xf4240}, 0x94) 4m46.10493668s ago: executing program 1 (id=5842): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104080000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x2, &(0x7f00000001c0)) timer_create(0x3, 0x0, &(0x7f00000003c0)) timer_delete(0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0xd, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x9c2, 0x0, 0x6000, 0x100, 0x0, 0x0, 0x0, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r3, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r5}, &(0x7f0000000380), &(0x7f0000000300)) syz_io_uring_setup(0x7585, &(0x7f0000000140)={0x0, 0xafed, 0x2, 0x2, 0x261, 0x0, r4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x5, 0x0, 0x200000000000}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x10001, 0x0, 0x0, 0x6, 0x180000, 0x2, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x6, 0x8, 0x4, 0x12, 0x80, 0xabf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x7ffc, 0x0, 0x10, 0x1, 0x4000000, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x2, 0x0, 0x0, 0x1b], [0xffffffff, 0x1, 0x2000, 0x0, 0x4, 0x20, 0x20, 0x0, 0xfffffffc, 0x400, 0x0, 0xb, 0xffffffff, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80000004, 0x0, 0x3, 0x0, 0x0, 0xa, 0x2, 0x400000, 0xfffffffe, 0x0, 0x800, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x5, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x2800], [0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffeffff, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x4, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000001, 0x0, 0xdb2bb47c, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x20, 0x20], [0xb, 0x0, 0x0, 0x0, 0x0, 0x705, 0x2, 0x0, 0x0, 0x403, 0x0, 0xcc5, 0x10000, 0x0, 0x0, 0x1000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x10001, 0x59, 0x0, 0x0, 0xbcd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0xcf0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x889, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200001, 0x0, 0x320146f1, 0x4, 0x0, 0x0, 0x1]}, 0x45c) 4m41.682293179s ago: executing program 1 (id=5858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x500, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4m41.574321606s ago: executing program 34 (id=5858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x500, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4.678976699s ago: executing program 4 (id=7603): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file5\x00'}) 4.482415795s ago: executing program 4 (id=7606): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0x1, 0x0, 0x7e, 0x5, "00800000000000f51000", "00598b00", "bf513d1c", '\x00', ["dc0000000800", "0000000000000000025a00", "4a218322000000215c384d00", "790000a5a16706008c00edbf"]}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x5, 0x4, 0x81) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendfile(r6, r7, 0x0, 0x1ffffe) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000100)=0xffff, 0x4) recvmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}, 0x400000}], 0x1, 0x10100, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000040)={0x8000, 0x1, {}, {0x0}, 0x1, 0x800}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r9, r10) 3.939696441s ago: executing program 5 (id=7610): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file5\x00'}) 3.87602864s ago: executing program 5 (id=7612): socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) mkdir(&(0x7f0000000000)='./file3\x00', 0x3) mount$cgroup(0x0, &(0x7f0000000140)='./file3\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000340)={[{@subsystem='io'}]}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/78, 0x4e}], 0x2}, 0x4}, {{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f00000007c0)=""/126, 0x7e}, {&(0x7f0000000880)=""/8, 0x8}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f0000001240)=""/4082, 0xff2}, {&(0x7f0000000900)=""/51, 0x33}, {&(0x7f0000000940)=""/59, 0x3b}], 0x7, &(0x7f00000009c0)=""/221, 0xdd}, 0x5}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/236, 0xec}], 0x1, &(0x7f0000000c40)=""/136, 0x88}, 0x6}, {{&(0x7f0000000d00)=@rc={0x1f, @none}, 0x80, &(0x7f0000000ec0), 0x0, &(0x7f0000004000)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000f00)=""/42, 0x2a}, {&(0x7f0000000f40)=""/200, 0xc8}, {&(0x7f0000001040)=""/1, 0x1}, {&(0x7f0000001080)=""/48, 0x30}, {&(0x7f0000005000)=""/4096, 0x1000}], 0x5, &(0x7f0000001100)=""/97, 0x61}}, {{&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003240)=""/119, 0x77}, {&(0x7f00000032c0)=""/144, 0x90}, {&(0x7f0000003380)=""/108, 0x6c}, {&(0x7f0000003400)=""/227, 0xe3}, {&(0x7f0000003500)=""/160, 0xa0}], 0x5, &(0x7f0000003600)=""/246, 0xf6}}], 0x6, 0x40002043, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', 0x0, 0x0, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@txtime={{0x14, 0x1, 0x3d, 0x757e}}], 0x14}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[@timestamping={{0x10, 0x1, 0x25, 0xc7}}], 0x10}}], 0x2, 0x841) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r6, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 3.524459703s ago: executing program 4 (id=7613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000240)={r4, 0x7ff, 0x2, r4}) ioctl$KVM_SET_IRQCHIP(r3, 0xae64, 0x0) mmap(&(0x7f00004ac000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x82104000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x3, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4604}, 0x0) 2.84727007s ago: executing program 5 (id=7618): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0)) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x2}) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x4, 0x2, 0x63, 0x0, r1}, &(0x7f0000000380), &(0x7f0000000300)) syz_io_uring_setup(0x7585, &(0x7f0000000140)={0x0, 0xafed, 0x2, 0x2, 0x261, 0x0, r0}, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0xc0800) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000000080)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x2a) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x5, 0x0, 0x200000000000}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0xd, 0x6, 0x0, 0x10001, 0x0, 0x0, 0x6, 0x180000, 0x2, 0xffffffff, 0x9, 0x3, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x6, 0x8, 0x4, 0x12, 0x80, 0xabf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x7ffc, 0x0, 0x10, 0x1, 0x4000000, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x2, 0x0, 0x0, 0x1b], [0xffffffff, 0x1, 0x2000, 0x0, 0x4, 0x20, 0x20, 0x0, 0xfffffffc, 0x400, 0x0, 0xb, 0xffffffff, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x80000004, 0x0, 0x3, 0x0, 0x0, 0xa, 0x2, 0x400000, 0x7, 0x0, 0x800, 0x0, 0x0, 0x724, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x5, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x2800], [0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffeffff, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x4, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0xfffffffe, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000001, 0x2, 0xdb2bb47c, 0x9, 0x0, 0xffffffff, 0x2, 0x0, 0x20, 0x20], [0xb, 0x0, 0x0, 0x0, 0x0, 0x705, 0x2, 0x0, 0x5, 0x403, 0x0, 0xcc5, 0x10000, 0x0, 0x0, 0x1000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x10001, 0x5b, 0x0, 0x0, 0xbcd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0xcf0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x889, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200001, 0x0, 0x320146f1, 0x4, 0x0, 0x0, 0x1]}, 0x45c) 2.642295493s ago: executing program 4 (id=7619): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xfffc, &(0x7f0000000040)={&(0x7f0000004340)={0x85c, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x844, 0x1, 0x0, 0x1, [@nested={0x840, 0x40, 0x0, 0x1, [@generic="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", @nested={0x39, 0x78, 0x0, 0x1, [@typed={0x11, 0x13a, 0x0, 0x0, @binary="faa8da715ac07d490ce2e599d4"}, @generic="65f86e6b395e7fb99ba0d90ceea58b88ee39be67", @typed={0x8, 0x144, 0x0, 0x0, @fd}, @generic="62fdbdda90"]}]}]}]}, 0x85c}}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x7bcf, 0x2830, 0x9, 0x1, 0x2, 0x7, 0x2]}}]}]}]}, 0x38}}, 0x4000) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001380)={0xd88, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x248, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x5}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0x8}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x5}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x4, 0x8}, {0x2, 0x3}, {0x6, 0x1}, {0x7, 0x7}, {0x0, 0x9}, {}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1f, 0x12, 0x16, 0x18, 0x5, 0xc, 0x65, 0x48, 0xc, 0x3, 0x6c, 0x9, 0x6a, 0x9, 0x5, 0x1, 0x12, 0x12, 0x24, 0x1, 0x6, 0x5, 0x6, 0x16, 0x30, 0x1b, 0x60, 0x16]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}]}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xae}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x1e3, 0x154, 0x7ff, 0x7, 0x4, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x5, 0xd, 0x9, 0x6, 0xfff9, 0x22]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x3}, {0x4, 0xa}, {0x4, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {}, {0x3, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x3, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x24, 0x30, 0x4, 0x12, 0x94d460f97f2b0dbf]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x100, 0xfeca, 0x5, 0x800, 0x8e, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x47, 0xb68, 0xf54e, 0x6, 0x3, 0x1, 0x2, 0x4f9f]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x101, 0x81, 0x5, 0x522, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x93}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x180000}]}]}, @NL80211_ATTR_TID_CONFIG={0x4cc, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0xa}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0xa}, {0x6, 0xa}, {0x4}, {0x2, 0x9}, {0x4, 0x8}, {0x5, 0x6}, {0x6}, {0x1, 0x1}, {0x1}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x5, 0x11}, {0x7, 0x2}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x7}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x5, 0x8}, {0x3, 0x9}, {0x6, 0x8}, {0x3, 0x6}, {0x2, 0xa}, {0x5, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x6, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x3}, {0x1, 0xa}, {}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x4, 0x5}, {0x4}, {0x4, 0x5}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0x4}, {0x4}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x7}, {0x2, 0x1}, {0x2, 0x6}, {0x4, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x1}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4ff, 0x84, 0x3, 0x10, 0xb0b5, 0x7ff, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x9, 0x401, 0x5, 0x5, 0x2, 0x1000]}}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0xc, 0x1, 0x30, 0x1b, 0x1b, 0x9, 0x1, 0x9, 0x3, 0x12, 0x9, 0x4, 0xc, 0xb, 0x36, 0x47, 0x12, 0x16, 0x5, 0x16, 0x9, 0x2a, 0x9, 0x24, 0x24, 0x6, 0x36, 0x1b, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x26, 0x5, 0x7, 0x3, 0x9, 0xc, 0x7, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x36, 0x36, 0x6, 0x1b, 0x1, 0x1, 0x36, 0x37, 0x60, 0xb, 0x30, 0x3c, 0x18, 0x1b, 0x1b, 0x9, 0x12, 0x6, 0x48, 0xb, 0x48, 0x36, 0x6, 0x30, 0x36, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x45, 0x5, 0x1, 0x8, 0x10, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x7}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x6}, {0x7, 0x4}, {0x5, 0x6}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x2, 0x6}, {0x2, 0x5}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x3, 0x18, 0x6, 0x30, 0x0, 0x9, 0x4, 0x36, 0x0, 0x30, 0x16, 0x3, 0xa, 0x4, 0x24, 0x24, 0xb, 0x3, 0x1, 0x6, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x6}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x6}, {0x7, 0x1}, {0x3, 0x3}, {0x5}, {0x4, 0x7}, {0x5, 0x6}, {0x3}, {0x4, 0x9}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x5, 0x5}, {0x7}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x2}, {0x3}, {0x2, 0x1}, {0x4, 0x1b}, {0x4, 0x6}, {0x6, 0x2}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x7}, {0x6, 0x8}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x3}, {0x5, 0x4}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x6, 0x7}, {0x7, 0x1}, {0x4, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x1, 0x2}, {0x5, 0x1}, {}, {0x1, 0x4}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x36, 0x2, 0x9, 0x60, 0xb, 0xc, 0xc, 0x0, 0x60, 0x2, 0x1, 0x1b, 0x30, 0x48, 0x2, 0x60, 0x3, 0x36, 0x4, 0x48, 0x2, 0x6e, 0x1b, 0x1, 0x6, 0x1b, 0x4, 0x24, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x190, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x6}, {0x4, 0x6}, {0x0, 0x6}, {0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x4, 0x3}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x9}, {0x3, 0x5}, {0x2}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x3}, {0x7, 0x1b}, {0x3, 0x4}, {0x6, 0x3}, {0x1, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x6, 0x24, 0x1, 0xd, 0x6c, 0x36, 0xb, 0x64, 0x12, 0x1, 0x9, 0x24, 0x6, 0x60, 0x30, 0x6c, 0x2, 0x2, 0x24, 0x2, 0x6c, 0x1, 0xc, 0x24, 0x18, 0x60, 0x60, 0x20, 0x60]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x6, 0x1, 0x7, 0x3, 0x1, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5500, 0xfff, 0x1ff, 0x45, 0x3, 0x80, 0xa5, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x6, 0x101, 0x9, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf, 0x0, 0x8000, 0x8, 0x100, 0x0, 0xc5e]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0xc, 0x2, 0x60, 0x18, 0x3, 0x2, 0x6]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x1, 0x36, 0x3, 0x16, 0x6, 0x36, 0x9, 0x60, 0x6c, 0x9, 0x9, 0x4, 0x6c, 0x1b, 0x48, 0x3, 0xb, 0x1b, 0x24, 0x9, 0x60, 0x24]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x437, 0xffff, 0x2d, 0x4, 0x5ec, 0x7ff, 0x7, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x2}, {0x7, 0x8}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x60, 0x6, 0x30, 0x9, 0x18, 0x33, 0x24, 0x4, 0x5, 0x2, 0xefaacc3bd4380ade, 0xb, 0x3, 0xf, 0x4, 0x3, 0x48, 0x3, 0x60, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd2, 0x1, 0x7, 0xffab, 0x6, 0x0, 0x0, 0x565]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x5a0, 0x11d, 0x0, 0x1, [{0x218, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x214, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe8, 0x8, 0x3, 0xfffb, 0x1, 0x1, 0x2d0]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfe, 0x7, 0x6, 0x2, 0xd, 0x1000, 0x2]}}]}, @NL80211_BAND_6GHZ={0xf4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x1b, 0x0, 0x5, 0x3, 0xb, 0x16, 0x3, 0x6, 0x4, 0x1, 0x12, 0x36, 0x1b, 0x12, 0x4, 0x5, 0x1, 0x5, 0x18, 0x1b, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x21a4, 0x200, 0x5457, 0x7ff, 0x1a34, 0xe457, 0x8]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x6}, {}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x9}, {0x7, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x7}, {0x6}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x4, 0x9}, {0x5, 0x9}, {0x4, 0x9}, {0x4, 0x7}, {0x6, 0xa}, {0x4, 0x8}, {0x4, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {0x4, 0x9}, {0x5, 0x5}, {0x6}, {0x3, 0x9}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x5, 0x9}, {0x5}, {0x7, 0x3}, {0x4, 0x6}, {0x3, 0x8}, {0x6, 0xa}, {0x2, 0xa}, {}, {0x6, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x4, 0x2}, {0x2, 0x1}, {0x7, 0x5}, {0x4, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x3, 0x8}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x2}, {0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x9}, {0x5}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0x6}, {0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x8}, {0x5, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0x5}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x6, 0x9}, {0x2, 0x8}, {0x6}, {0x2, 0x5}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x2}, {0x3, 0xa}, {0x3, 0x7}, {0x5, 0x7}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {}, {0x5, 0x5}, {0x5}, {0x7, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x7}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x2}, {0x7, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x5}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8f4, 0x9a, 0x8, 0xf, 0x9, 0xcc37, 0x8, 0x100]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x6, 0xd, 0x7, 0xf52, 0x800, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x36, 0x10, 0x2, 0x24, 0x1b, 0x60, 0xc, 0x18, 0x60, 0x2, 0x34, 0x36, 0xb, 0x48, 0x16, 0x12, 0xb, 0x6c, 0x5, 0x30, 0x5, 0x2, 0x1, 0x5a]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc6f, 0xc281, 0x4, 0x5, 0x8, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x9, 0x100, 0xe52, 0xfffb, 0x7, 0x9f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x2, 0x4, 0x10, 0x4d, 0x401, 0x71c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xffff, 0x101, 0x1, 0x2, 0xde, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0xb, 0x16, 0x48, 0x30, 0x3, 0x0, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x368, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x100, 0x2, 0x6, 0x400, 0x0, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x8a, 0x6, 0x5, 0x7, 0x7ff, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x18, 0x1b, 0xb, 0x6c, 0x1b, 0x48, 0x21e58c52cbafbd17, 0x6c, 0x48, 0x6c, 0x2, 0x3, 0xc, 0x30, 0x1, 0xc, 0x0, 0x2d, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x6, 0x36, 0x9, 0x36, 0x12, 0x30, 0x16, 0x5, 0x1, 0xc, 0xc, 0x2, 0xb, 0x24, 0x30, 0xe61ec45d1754c29f, 0x12, 0x12, 0x16, 0x9, 0x30, 0x6c, 0x18, 0x18, 0x2a, 0x24, 0x30, 0xba, 0x6c, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf8b6, 0x9, 0xd0, 0x7fff, 0xfff8, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x9, 0x60, 0x6, 0x24, 0x18, 0x3, 0x16, 0x48, 0x18, 0x16, 0x48, 0x12, 0x48, 0x16, 0x48, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x2, 0x765, 0x1, 0x2, 0x9, 0xa]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x5, 0x6, 0x6, 0xe5e4, 0x0, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xf, 0x1, 0x24, 0x76, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x1ff, 0x200, 0x1, 0x40, 0xff35, 0x800]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x496c, 0xb, 0xff01, 0x2, 0x8, 0x7, 0x800, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x6, 0x4}, {0x3, 0x6}, {0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x4, 0x7}, {0x1}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x3, 0xa}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0xa, 0x69fb, 0x81, 0x4, 0x11eb, 0x8]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x3}, {0x1, 0x8}, {0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x5}, {0x3, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x2}, {0x7, 0x6}, {0x2, 0x9}, {0x1, 0xa}, {0x6, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x4, 0x4}, {0x3, 0x6}, {0x6}, {0x7, 0x5}, {}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x6}, {0x2, 0x4}, {0x5, 0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x9}, {0x2, 0x4}, {0x3, 0x3}, {0x4}, {0x2}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x9}, {0x3, 0xa}, {0x5, 0x8}, {0x6, 0x9}, {0x6, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x4, 0x16, 0x2, 0x4, 0x17, 0x30, 0xb, 0x4, 0x16, 0x1, 0x0, 0x5, 0x18, 0x5, 0x5081175b87f94109, 0x60, 0x4, 0x3, 0x36, 0x65, 0x1, 0x5, 0x3, 0x5, 0x12, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x7fff, 0xbc9, 0xa8f8, 0x9, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfba, 0x41a, 0xdc0, 0x0, 0x4, 0x9, 0x3, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x66}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x9, 0x0, 0xc0, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x5}, {0x6, 0x4}, {0x6, 0xa}, {0x7, 0x6}, {0x1}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x2, 0x4}, {0x5, 0x2}, {0x5, 0xa}, {0x4, 0x3}, {0x2, 0x8}, {0x0, 0x5}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x2}, {0x5, 0x9}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x6}, {0x1, 0xa}, {0x2, 0x8}, {0x3}, {0x2, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x2, 0x7}, {0x6, 0x7}, {0x7, 0xe}, {0x5, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x7}, {}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x6c, 0xb, 0xb8]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1c, 0x1, 0x9, 0x543, 0x2, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x9e9, 0x5, 0x8, 0xfff9, 0xe8, 0x3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8, 0x8, 0x7f, 0xfffc, 0x47]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x401, 0x1ff, 0x3, 0xd5, 0xfff7, 0x40, 0x2]}}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xd88}}, 0x20044001) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fchdir(r3) exit(0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00') socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r6, 0x2, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x64e7, r5, 0x0, 0x0, 0x8}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x80, r7, &(0x7f0000000440), 0x0, 0x8}]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) 2.596689303s ago: executing program 2 (id=7620): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e040005c000000000000110000ac14"], 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000563000/0x2000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r3}, 0x38) 2.009030819s ago: executing program 5 (id=7622): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xfffc, &(0x7f0000000040)={&(0x7f0000004340)={0x85c, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x844, 0x1, 0x0, 0x1, [@nested={0x840, 0x40, 0x0, 0x1, [@generic="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", @nested={0x39, 0x78, 0x0, 0x1, [@typed={0x11, 0x13a, 0x0, 0x0, @binary="faa8da715ac07d490ce2e599d4"}, @generic="65f86e6b395e7fb99ba0d90ceea58b88ee39be67", @typed={0x8, 0x144, 0x0, 0x0, @fd}, @generic="62fdbdda90"]}]}]}]}, 0x85c}}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x7bcf, 0x2830, 0x9, 0x1, 0x2, 0x7, 0x2]}}]}]}]}, 0x38}}, 0x4000) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001380)={0xd88, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x248, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x5}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0x8}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x5}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x4, 0x8}, {0x2, 0x3}, {0x6, 0x1}, {0x7, 0x7}, {0x0, 0x9}, {}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1f, 0x12, 0x16, 0x18, 0x5, 0xc, 0x65, 0x48, 0xc, 0x3, 0x6c, 0x9, 0x6a, 0x9, 0x5, 0x1, 0x12, 0x12, 0x24, 0x1, 0x6, 0x5, 0x6, 0x16, 0x30, 0x1b, 0x60, 0x16]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}]}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xae}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x1e3, 0x154, 0x7ff, 0x7, 0x4, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x5, 0xd, 0x9, 0x6, 0xfff9, 0x22]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x3}, {0x4, 0xa}, {0x4, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {}, {0x3, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x3, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x24, 0x30, 0x4, 0x12, 0x94d460f97f2b0dbf]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x100, 0xfeca, 0x5, 0x800, 0x8e, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x47, 0xb68, 0xf54e, 0x6, 0x3, 0x1, 0x2, 0x4f9f]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x101, 0x81, 0x5, 0x522, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x93}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x180000}]}]}, @NL80211_ATTR_TID_CONFIG={0x4cc, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0xa}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0xa}, {0x6, 0xa}, {0x4}, {0x2, 0x9}, {0x4, 0x8}, {0x5, 0x6}, {0x6}, {0x1, 0x1}, {0x1}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x5, 0x11}, {0x7, 0x2}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x7}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x5, 0x8}, {0x3, 0x9}, {0x6, 0x8}, {0x3, 0x6}, {0x2, 0xa}, {0x5, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x6, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x3}, {0x1, 0xa}, {}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x4, 0x5}, {0x4}, {0x4, 0x5}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0x4}, {0x4}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x7}, {0x2, 0x1}, {0x2, 0x6}, {0x4, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x1}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4ff, 0x84, 0x3, 0x10, 0xb0b5, 0x7ff, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x9, 0x401, 0x5, 0x5, 0x2, 0x1000]}}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0xc, 0x1, 0x30, 0x1b, 0x1b, 0x9, 0x1, 0x9, 0x3, 0x12, 0x9, 0x4, 0xc, 0xb, 0x36, 0x47, 0x12, 0x16, 0x5, 0x16, 0x9, 0x2a, 0x9, 0x24, 0x24, 0x6, 0x36, 0x1b, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x26, 0x5, 0x7, 0x3, 0x9, 0xc, 0x7, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x36, 0x36, 0x6, 0x1b, 0x1, 0x1, 0x36, 0x37, 0x60, 0xb, 0x30, 0x3c, 0x18, 0x1b, 0x1b, 0x9, 0x12, 0x6, 0x48, 0xb, 0x48, 0x36, 0x6, 0x30, 0x36, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x45, 0x5, 0x1, 0x8, 0x10, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x7}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x6}, {0x7, 0x4}, {0x5, 0x6}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x2, 0x6}, {0x2, 0x5}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x3, 0x18, 0x6, 0x30, 0x0, 0x9, 0x4, 0x36, 0x0, 0x30, 0x16, 0x3, 0xa, 0x4, 0x24, 0x24, 0xb, 0x3, 0x1, 0x6, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x6}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x6}, {0x7, 0x1}, {0x3, 0x3}, {0x5}, {0x4, 0x7}, {0x5, 0x6}, {0x3}, {0x4, 0x9}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x5, 0x5}, {0x7}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x2}, {0x3}, {0x2, 0x1}, {0x4, 0x1b}, {0x4, 0x6}, {0x6, 0x2}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x7}, {0x6, 0x8}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x3}, {0x5, 0x4}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x6, 0x7}, {0x7, 0x1}, {0x4, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x1, 0x2}, {0x5, 0x1}, {}, {0x1, 0x4}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x36, 0x2, 0x9, 0x60, 0xb, 0xc, 0xc, 0x0, 0x60, 0x2, 0x1, 0x1b, 0x30, 0x48, 0x2, 0x60, 0x3, 0x36, 0x4, 0x48, 0x2, 0x6e, 0x1b, 0x1, 0x6, 0x1b, 0x4, 0x24, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x190, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x6}, {0x4, 0x6}, {0x0, 0x6}, {0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x4, 0x3}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x9}, {0x3, 0x5}, {0x2}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x3}, {0x7, 0x1b}, {0x3, 0x4}, {0x6, 0x3}, {0x1, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x6, 0x24, 0x1, 0xd, 0x6c, 0x36, 0xb, 0x64, 0x12, 0x1, 0x9, 0x24, 0x6, 0x60, 0x30, 0x6c, 0x2, 0x2, 0x24, 0x2, 0x6c, 0x1, 0xc, 0x24, 0x18, 0x60, 0x60, 0x20, 0x60]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x6, 0x1, 0x7, 0x3, 0x1, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5500, 0xfff, 0x1ff, 0x45, 0x3, 0x80, 0xa5, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x6, 0x101, 0x9, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf, 0x0, 0x8000, 0x8, 0x100, 0x0, 0xc5e]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0xc, 0x2, 0x60, 0x18, 0x3, 0x2, 0x6]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x1, 0x36, 0x3, 0x16, 0x6, 0x36, 0x9, 0x60, 0x6c, 0x9, 0x9, 0x4, 0x6c, 0x1b, 0x48, 0x3, 0xb, 0x1b, 0x24, 0x9, 0x60, 0x24]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x437, 0xffff, 0x2d, 0x4, 0x5ec, 0x7ff, 0x7, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x2}, {0x7, 0x8}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x60, 0x6, 0x30, 0x9, 0x18, 0x33, 0x24, 0x4, 0x5, 0x2, 0xefaacc3bd4380ade, 0xb, 0x3, 0xf, 0x4, 0x3, 0x48, 0x3, 0x60, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd2, 0x1, 0x7, 0xffab, 0x6, 0x0, 0x0, 0x565]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x5a0, 0x11d, 0x0, 0x1, [{0x218, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x214, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe8, 0x8, 0x3, 0xfffb, 0x1, 0x1, 0x2d0]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfe, 0x7, 0x6, 0x2, 0xd, 0x1000, 0x2]}}]}, @NL80211_BAND_6GHZ={0xf4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x1b, 0x0, 0x5, 0x3, 0xb, 0x16, 0x3, 0x6, 0x4, 0x1, 0x12, 0x36, 0x1b, 0x12, 0x4, 0x5, 0x1, 0x5, 0x18, 0x1b, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x21a4, 0x200, 0x5457, 0x7ff, 0x1a34, 0xe457, 0x8]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x6}, {}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x9}, {0x7, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x7}, {0x6}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x4, 0x9}, {0x5, 0x9}, {0x4, 0x9}, {0x4, 0x7}, {0x6, 0xa}, {0x4, 0x8}, {0x4, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {0x4, 0x9}, {0x5, 0x5}, {0x6}, {0x3, 0x9}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x5, 0x9}, {0x5}, {0x7, 0x3}, {0x4, 0x6}, {0x3, 0x8}, {0x6, 0xa}, {0x2, 0xa}, {}, {0x6, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x4, 0x2}, {0x2, 0x1}, {0x7, 0x5}, {0x4, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x3, 0x8}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x2}, {0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x9}, {0x5}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0x6}, {0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x8}, {0x5, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0x5}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x6, 0x9}, {0x2, 0x8}, {0x6}, {0x2, 0x5}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x2}, {0x3, 0xa}, {0x3, 0x7}, {0x5, 0x7}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {}, {0x5, 0x5}, {0x5}, {0x7, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x7}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x2}, {0x7, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x5}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8f4, 0x9a, 0x8, 0xf, 0x9, 0xcc37, 0x8, 0x100]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x6, 0xd, 0x7, 0xf52, 0x800, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x36, 0x10, 0x2, 0x24, 0x1b, 0x60, 0xc, 0x18, 0x60, 0x2, 0x34, 0x36, 0xb, 0x48, 0x16, 0x12, 0xb, 0x6c, 0x5, 0x30, 0x5, 0x2, 0x1, 0x5a]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc6f, 0xc281, 0x4, 0x5, 0x8, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x9, 0x100, 0xe52, 0xfffb, 0x7, 0x9f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x2, 0x4, 0x10, 0x4d, 0x401, 0x71c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xffff, 0x101, 0x1, 0x2, 0xde, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0xb, 0x16, 0x48, 0x30, 0x3, 0x0, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x368, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x100, 0x2, 0x6, 0x400, 0x0, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x8a, 0x6, 0x5, 0x7, 0x7ff, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x18, 0x1b, 0xb, 0x6c, 0x1b, 0x48, 0x21e58c52cbafbd17, 0x6c, 0x48, 0x6c, 0x2, 0x3, 0xc, 0x30, 0x1, 0xc, 0x0, 0x2d, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x6, 0x36, 0x9, 0x36, 0x12, 0x30, 0x16, 0x5, 0x1, 0xc, 0xc, 0x2, 0xb, 0x24, 0x30, 0xe61ec45d1754c29f, 0x12, 0x12, 0x16, 0x9, 0x30, 0x6c, 0x18, 0x18, 0x2a, 0x24, 0x30, 0xba, 0x6c, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf8b6, 0x9, 0xd0, 0x7fff, 0xfff8, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x9, 0x60, 0x6, 0x24, 0x18, 0x3, 0x16, 0x48, 0x18, 0x16, 0x48, 0x12, 0x48, 0x16, 0x48, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x2, 0x765, 0x1, 0x2, 0x9, 0xa]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x5, 0x6, 0x6, 0xe5e4, 0x0, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xf, 0x1, 0x24, 0x76, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x1ff, 0x200, 0x1, 0x40, 0xff35, 0x800]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x496c, 0xb, 0xff01, 0x2, 0x8, 0x7, 0x800, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x6, 0x4}, {0x3, 0x6}, {0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x4, 0x7}, {0x1}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x3, 0xa}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0xa, 0x69fb, 0x81, 0x4, 0x11eb, 0x8]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x3}, {0x1, 0x8}, {0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x5}, {0x3, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x2}, {0x7, 0x6}, {0x2, 0x9}, {0x1, 0xa}, {0x6, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x4, 0x4}, {0x3, 0x6}, {0x6}, {0x7, 0x5}, {}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x6}, {0x2, 0x4}, {0x5, 0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x9}, {0x2, 0x4}, {0x3, 0x3}, {0x4}, {0x2}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x9}, {0x3, 0xa}, {0x5, 0x8}, {0x6, 0x9}, {0x6, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x4, 0x16, 0x2, 0x4, 0x17, 0x30, 0xb, 0x4, 0x16, 0x1, 0x0, 0x5, 0x18, 0x5, 0x5081175b87f94109, 0x60, 0x4, 0x3, 0x36, 0x65, 0x1, 0x5, 0x3, 0x5, 0x12, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x7fff, 0xbc9, 0xa8f8, 0x9, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfba, 0x41a, 0xdc0, 0x0, 0x4, 0x9, 0x3, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x66}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x9, 0x0, 0xc0, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x5}, {0x6, 0x4}, {0x6, 0xa}, {0x7, 0x6}, {0x1}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x2, 0x4}, {0x5, 0x2}, {0x5, 0xa}, {0x4, 0x3}, {0x2, 0x8}, {0x0, 0x5}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x2}, {0x5, 0x9}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x6}, {0x1, 0xa}, {0x2, 0x8}, {0x3}, {0x2, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x2, 0x7}, {0x6, 0x7}, {0x7, 0xe}, {0x5, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x7}, {}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x6c, 0xb, 0xb8]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1c, 0x1, 0x9, 0x543, 0x2, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x9e9, 0x5, 0x8, 0xfff9, 0xe8, 0x3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8, 0x8, 0x7f, 0xfffc, 0x47]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x401, 0x1ff, 0x3, 0xd5, 0xfff7, 0x40, 0x2]}}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xd88}}, 0x20044001) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fchdir(r3) exit(0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00') socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r6, 0x2, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x64e7, r5, 0x0, 0x0, 0x8}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x80, r7, &(0x7f0000000440), 0x0, 0x8}]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) 1.935076783s ago: executing program 6 (id=7623): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file5\x00'}) 1.889364875s ago: executing program 6 (id=7624): ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x54, 0x1, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0xb0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff0205000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1) 1.886661956s ago: executing program 6 (id=7625): socket$inet6(0xa, 0x80002, 0x88) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000100100000000000000000008500000071ecbd69e69bb1be4c66b03cc8be362900000085000000070000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb9, 0x7f, &(0x7f0000006680)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 1.811086923s ago: executing program 6 (id=7626): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x81d) 1.720273823s ago: executing program 4 (id=7627): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x2, &(0x7f00000001c0)) timer_create(0x3, 0x0, &(0x7f00000003c0)) timer_delete(0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0xd, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x9c2, 0x0, 0x6000, 0x100, 0x0, 0x0, 0x0, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r2, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r4}, 0x0, &(0x7f0000000300)) syz_io_uring_setup(0x7585, &(0x7f0000000140)={0x0, 0xafed, 0x2, 0x2, 0x261, 0x0, r3}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x5, 0x0, 0x200000000000}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x10001, 0x0, 0x0, 0x6, 0x180000, 0x2, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x6, 0x8, 0x4, 0x12, 0x80, 0xabf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x7ffc, 0x0, 0x10, 0x1, 0x4000000, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x2, 0x0, 0x0, 0x1b], [0xffffffff, 0x1, 0x2000, 0x0, 0x4, 0x20, 0x20, 0x0, 0xfffffffc, 0x400, 0x0, 0xb, 0xffffffff, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80000004, 0x0, 0x3, 0x0, 0x0, 0xa, 0x2, 0x400000, 0xfffffffe, 0x0, 0x800, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x5, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x2800], [0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffeffff, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x4, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000001, 0x0, 0xdb2bb47c, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x20, 0x20], [0xb, 0x0, 0x0, 0x0, 0x0, 0x705, 0x2, 0x0, 0x0, 0x403, 0x0, 0xcc5, 0x10000, 0x0, 0x0, 0x1000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x10001, 0x59, 0x0, 0x0, 0xbcd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0xcf0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x889, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200001, 0x0, 0x320146f1, 0x4, 0x0, 0x0, 0x1]}, 0x45c) 1.672288249s ago: executing program 2 (id=7628): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2000000015, 0x80005, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x20004002) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r3}, 0x80, 0x0}, 0x1000000}, {{&(0x7f00000022c0)=@can={0x1d, r3}, 0x80, 0x0}}], 0x2, 0x0) 1.610754979s ago: executing program 2 (id=7629): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0), 0x0, 0x48094) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.609350512s ago: executing program 2 (id=7630): open$dir(&(0x7f00000003c0)='./file0/file0\x00', 0x200, 0xc8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x7ffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe0fe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) 1.532092926s ago: executing program 2 (id=7631): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000006c0)="c93eba827ac4f84860f73e10e9aa464fdddb0c942abf7c1cf7823e7136dd41d050451bd64174472e84e4a4aac653dc513e5efa10e41e099880d57c31b63b5295c21cd1a47f7d27288df5de493466a5480d467cfbc7b88cffcdc6ac7792b320adff12500e355b2d2721f28a71b2a8646c461c12e5b8b1bd74826f670b8a914599a4d9c9700f04cd228613a1dc60f58aab28a80a3a37bf0459d4786afb7744d454e013c177ff30d8678d8678b3e9ea1fe5acc15487d1ece9dc20e65b48749e9da356742664764e345a23", 0xc9}, {&(0x7f0000000a00)="47dba160e1b4731d9e7e5da30355eca85e1b4e88014923c46698375edd5883c33763f8f378190863a1facc484daa057ab54c313f2d6f3a727e2371df2874a91055b49ce5b0c8235c79f1e7f0cba2761950ec0c71c287d857350b9e68f5199fe772adc11869d0b6c9dbc56929ca8a36218ef4cf5d460eb2ac44445c9cd25c25b799290248902b2059d75c69128fb390d2f268abd2f1bb6bedc312524c8da2f9132ad71a66feccb236bf2fb9a886c6c8e6ef6cfc036a9f5950f8ba7c1390e3b50042502a1ff1e3b3dc8af6b79722129ca65db25c1bd057762841ea97cde03a6e0bf7ca9000445a826d", 0xe8}, {&(0x7f0000000580)}, {&(0x7f0000000b00)="6ae8445c83e48f4fc68d902d6fa4123e460da27dea7152f280d8e485c3542468b9cf9b7afb3af9dfafce7440fdb13887e54551c4836be3c9636ff2f1a87213e1baa3d4636ed9a21a254e670de889a9f2d0cd37aecacb354bc35f22cf9e6e0adc6a80d501cc89b8e4b4a42e57e289e376f608960e5f935a1c0a0a1a9f36a087a98ef5", 0x82}, {&(0x7f0000000440)="ca1f891441e5fd5844163966e694665a8b31ce803c36c68681ff590d0d41d93dc0f048690d57965171ea5515e58c8bfd8c2cf8f8216bc6534859a56f1f8a7ac22a6b5806517935dfdb19f67f9e3da3c27e9195", 0x53}, {&(0x7f0000000280)="9478518d", 0x4}, {&(0x7f00000007c0)="c40de8c30ef977488cc876c5c8dcdde4b42c79a3b218b7e76236336927addde7816ab281a42b50d66bd3ce374c7f7d37309206885f459cf8cdbe9caa179162b8eccbf19481a7a71dbe944ee6b19d59a0bf661c72534acbbb3f37c8d6096e9383ae46dd2252557724885cc25e3cefa623cd9eeea5fb31", 0x76}, {&(0x7f0000000bc0)="36ee362d69090af082cf74c6a8b2fabfc7e139d49265b45d5bab4c607720134e76a789485524b058a684f32571196be9d647d9479deec31bb00ff61145509cb2950ef3e3fa244a0f8c741fab5b28a93a5e8a50c5a564ebd9664efac52828edc8992b40acb26cc56c9724c38822b021d6b55c83f9bf", 0x75}], 0x8, &(0x7f0000000f00)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r0, r1, r1, r0, r0]}}, @cred={{0x18}}, @cred={{0x18}}], 0xa8, 0x2004000}}], 0x1, 0x4040) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x40}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e0000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, &(0x7f0000000100)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) ioctl$TIOCVHANGUP(r7, 0x5437, 0x700) 1.002281356s ago: executing program 6 (id=7632): socket$inet(0x2, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) r1 = socket$inet6(0xa, 0x5, 0x7) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c, 0x800) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x108, 0x0, 0x0, 0x6, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040fb7"], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65364000) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee01, 0x0, 0xee01) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x0) 973.170799ms ago: executing program 5 (id=7633): r0 = socket$can_bcm(0x1d, 0x2, 0x2) fstatfs(r0, &(0x7f0000000000)=""/117) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x13, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4001) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWALK(r2, &(0x7f00000002c0)={0x8b, 0x6f, 0x2, {0xa, [{0x2, 0x0, 0x8}, {0x40, 0x0, 0x6}, {0x0, 0xe, 0x5}, {0x4, 0x3, 0x1}, {0x10, 0x1, 0x1}, {}, {0x2, 0x4, 0x1}, {0x80, 0x4, 0x7}, {0x80, 0x0, 0x5}, {0x8, 0x2, 0x4}]}}, 0x8b) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000380)="862e7ae05aaf5ef9d52865d8b14af95011c14a1962fbaf4774eb9bb732691e0d8c6405b4c581dbee4faea08f1027ae2fc71b8b5d25300ddef62899b158c9382fbb9a7bcfd9257b70e5ec51e25d45071250be0949852171b1cc7e1236deace898fed1e6b3bd4431dfc124713b75952098c59b", 0x72}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000440)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000480)={r3}) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x3000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000680)={0x7fff, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0x84) r5 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000740), 0x400900, 0x0) listen(r5, 0x1) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000780), 0x490920, 0x0) preadv(r6, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f00000008c0)=""/142, 0x8e}, {&(0x7f0000000980)=""/40, 0x28}, {&(0x7f00000009c0)=""/154, 0x9a}], 0x4, 0xfffffff8, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r5) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xe4, r8, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @loopback, 0xfffffff9}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x135a0000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='ext4_es_shrink\x00', r2, 0x0, 0x8d}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0xc, 0x20}, &(0x7f0000000d80)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000dc0)={r9, 0x88, "a4ad8db2b177af29d6eb3f845d8cf10ae8b91d8155a1a7bf68afe6314bb4e529c0d0493257d5f7c30e7833a670b157c900d76d3682accb33deb5916ec8e2cac7b5207620baacaefaf62eec81014c8134d283f6f199520bda1e0515b060ba044a77e23dc108835d23aaced34f1ecb216cb4eaa3a5a34d1614b9bebf5b11af293f0891a2c6a2736bb9"}, &(0x7f0000000e80)=0x90) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) fsetxattr(r10, &(0x7f0000000ec0)=@known='user.incfs.metadata\x00', &(0x7f0000000f00)='\x00', 0x1, 0x2) modify_ldt$write(0x1, &(0x7f0000000f40)={0x80, 0x100000, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) 911.50453ms ago: executing program 5 (id=7634): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffffa, 0x4031, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0x8, 0xb49, 0xa, 0x104, 0x0, 0xe}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000000034a02, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e28, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) write(r5, &(0x7f0000000200)="89", 0x3f80) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r6, 0x0, 0x201f00) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000080000000c0002800400038004000100180001801400020073797a5f74756e0000000000000000002eb24ea319e1c6739d75660ce2e51a97d9b100082bb5429bb575c485d11bd0f6146033d5f85d977a625ab6dcf692f232497349a1a879474e76687855d4fb2ab58c74ca543b03de74b8a9704f701477a265ec"], 0x38}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) 724.403194ms ago: executing program 4 (id=7635): setrlimit(0x7, &(0x7f0000000000)={0xf, 0x6}) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) r1 = dup(r0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000040)=""/65, 0x0}) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) (async, rerun: 64) r5 = dup(r4) (rerun: 64) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) (async) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) (async) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) (async) write$cgroup_int(r1, &(0x7f00000000c0)=0xffffffffffffff62, 0x12) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) mlock2(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x1) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async, rerun: 32) setrlimit(0x0, &(0x7f0000000080)={0x9, 0x9}) (async, rerun: 32) getrlimit(0x6, &(0x7f0000000040)) 449.291243ms ago: executing program 2 (id=7636): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x22c181, 0x67) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000040)={0x0, 'vxcan1\x00', {0x1}, 0xe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(0xffffffffffffffff) open(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 0s ago: executing program 6 (id=7637): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f0000000440), 0x0, 0x2, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket(0xa, 0x3, 0x3a) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (rerun: 64) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) (async) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f610100039108"], 0x7) (async, rerun: 32) shmctl$SHM_INFO(0x0, 0xe, 0x0) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a00, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c000000020601080000000000000000000000000900020073797a31000000000500040000000000240007801800018014000240ff01000000000000000000000000000108001140000000000500040001000000050300686173683a6d616300000000"], 0x6c}}, 0x4004804) (async) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)={'#! ', './file0', [], 0xa, "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"}, 0x13d) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) kernel console output (not intermixed with test programs): 120 [ 1176.156546][ T724] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1176.156559][ T724] ? __get_vm_area_node+0x101/0x330 [ 1176.156579][ T724] __get_vm_area_node+0x101/0x330 [ 1176.156598][ T724] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1176.156610][ T724] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1176.156625][ T724] ? find_held_lock+0x2b/0x80 [ 1176.156639][ T724] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1176.156655][ T724] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1176.156668][ T724] ? __lock_acquire+0x62e/0x1ce0 [ 1176.156684][ T724] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1176.156697][ T724] __vmalloc_node_noprof+0xad/0xf0 [ 1176.156707][ T724] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1176.156722][ T724] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1176.156734][ T724] ? security_capable+0x7e/0x260 [ 1176.156747][ T724] bpf_prog_alloc+0x3b/0x230 [ 1176.156758][ T724] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1176.156776][ T724] bpf_prog_load+0x1a04/0x2490 [ 1176.156795][ T724] ? __pfx_bpf_prog_load+0x10/0x10 [ 1176.156824][ T724] __sys_bpf+0x4a3f/0x4de0 [ 1176.156841][ T724] ? __pfx___sys_bpf+0x10/0x10 [ 1176.156858][ T724] ? ksys_write+0x190/0x250 [ 1176.156873][ T724] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1176.156925][ T724] ? fput+0x9b/0xd0 [ 1176.156940][ T724] ? ksys_write+0x1ac/0x250 [ 1176.156952][ T724] ? __pfx_ksys_write+0x10/0x10 [ 1176.156967][ T724] __ia32_sys_bpf+0x76/0xe0 [ 1176.156984][ T724] __do_fast_syscall_32+0x7c/0x3a0 [ 1176.157002][ T724] do_fast_syscall_32+0x32/0x80 [ 1176.157019][ T724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1176.157033][ T724] RIP: 0023:0xf701e579 [ 1176.157042][ T724] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1176.157052][ T724] RSP: 002b:00000000f540e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1176.157063][ T724] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 1176.157070][ T724] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1176.157076][ T724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1176.157083][ T724] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1176.157089][ T724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1176.157102][ T724] [ 1176.157288][ T724] syz.5.6719: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1176.265893][ T724] CPU: 3 UID: 0 PID: 724 Comm: syz.5.6719 Not tainted syzkaller #0 PREEMPT(full) [ 1176.265909][ T724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1176.265916][ T724] Call Trace: [ 1176.265921][ T724] [ 1176.265926][ T724] dump_stack_lvl+0x16c/0x1f0 [ 1176.265946][ T724] warn_alloc+0x248/0x3a0 [ 1176.265962][ T724] ? __pfx_warn_alloc+0x10/0x10 [ 1176.265975][ T724] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 1176.265991][ T724] ? __kasan_kmalloc+0x8a/0xb0 [ 1176.266004][ T724] ? __get_vm_area_node+0x208/0x330 [ 1176.266025][ T724] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1176.266037][ T724] ? find_held_lock+0x2b/0x80 [ 1176.266050][ T724] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1176.266068][ T724] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1176.266081][ T724] ? __lock_acquire+0x62e/0x1ce0 [ 1176.266096][ T724] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1176.266109][ T724] __vmalloc_node_noprof+0xad/0xf0 [ 1176.266119][ T724] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1176.266134][ T724] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1176.266146][ T724] ? security_capable+0x7e/0x260 [ 1176.266160][ T724] bpf_prog_alloc+0x3b/0x230 [ 1176.266171][ T724] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1176.266188][ T724] bpf_prog_load+0x1a04/0x2490 [ 1176.266208][ T724] ? __pfx_bpf_prog_load+0x10/0x10 [ 1176.266236][ T724] __sys_bpf+0x4a3f/0x4de0 [ 1176.266253][ T724] ? __pfx___sys_bpf+0x10/0x10 [ 1176.266275][ T724] ? ksys_write+0x190/0x250 [ 1176.266290][ T724] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1176.266315][ T724] ? fput+0x9b/0xd0 [ 1176.266330][ T724] ? ksys_write+0x1ac/0x250 [ 1176.266342][ T724] ? __pfx_ksys_write+0x10/0x10 [ 1176.266358][ T724] __ia32_sys_bpf+0x76/0xe0 [ 1176.266375][ T724] __do_fast_syscall_32+0x7c/0x3a0 [ 1176.266394][ T724] do_fast_syscall_32+0x32/0x80 [ 1176.266410][ T724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1176.266424][ T724] RIP: 0023:0xf701e579 [ 1176.266433][ T724] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1176.266445][ T724] RSP: 002b:00000000f540e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1176.266455][ T724] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 1176.266463][ T724] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1176.266469][ T724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1176.266475][ T724] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1176.266482][ T724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1176.266495][ T724] [ 1176.266499][ T724] Mem-Info: [ 1176.353026][ T724] active_anon:2948 inactive_anon:763 isolated_anon:0 [ 1176.353026][ T724] active_file:2300 inactive_file:11403 isolated_file:0 [ 1176.353026][ T724] unevictable:1768 dirty:193 writeback:35 [ 1176.353026][ T724] slab_reclaimable:6705 slab_unreclaimable:67270 [ 1176.353026][ T724] mapped:30479 shmem:4577 pagetables:1519 [ 1176.353026][ T724] sec_pagetables:341 bounce:0 [ 1176.353026][ T724] kernel_misc_reclaimable:0 [ 1176.353026][ T724] free:60691 free_pcp:4440 free_cma:0 [ 1176.368150][ T724] Node 0 active_anon:1884kB inactive_anon:440kB active_file:3592kB inactive_file:36kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6328kB dirty:8kB writeback:0kB shmem:8644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7440kB pagetables:1464kB sec_pagetables:1184kB all_unreclaimable? yes Balloon:0kB [ 1176.377915][ T724] Node 1 active_anon:9908kB inactive_anon:2612kB active_file:5608kB inactive_file:45576kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:115588kB dirty:764kB writeback:40kB shmem:9664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6988kB pagetables:4612kB sec_pagetables:180kB all_unreclaimable? no Balloon:0kB [ 1176.387974][ T724] Node 0 DMA free:2500kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1176.397597][ T724] lowmem_reserve[]: 0 288 288 288 288 [ 1176.399295][ T724] Node 0 DMA32 free:18392kB boost:2048kB min:15268kB low:18572kB high:21876kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1880kB inactive_anon:436kB active_file:3592kB inactive_file:36kB unevictable:3536kB writepending:8kB present:1032196kB managed:295104kB mlocked:0kB bounce:0kB free_pcp:3172kB local_pcp:0kB free_cma:0kB [ 1176.408801][ T724] lowmem_reserve[]: 0 0 0 0 0 [ 1176.410314][ T724] Node 1 DMA32 free:221872kB boost:106060kB min:153200kB low:164984kB high:176768kB reserved_highatomic:6144KB free_highatomic:1148KB active_anon:9908kB inactive_anon:2612kB active_file:5608kB inactive_file:45576kB unevictable:3536kB writepending:812kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:15112kB local_pcp:812kB free_cma:0kB [ 1176.420766][ T724] lowmem_reserve[]: 0 0 0 0 0 [ 1176.422404][ T724] Node 0 DMA: 55*4kB (UM) 21*8kB (UM) 8*16kB (UM) 4*32kB (UM) 3*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2500kB [ 1176.427213][ T724] Node 0 DMA32: 28*4kB (UME) 95*8kB (UE) 79*16kB (UE) 192*32kB (UME) 94*64kB (UME) 28*128kB (UME) 2*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18392kB [ 1176.432344][ T724] Node 1 DMA32: 10*4kB (MEH) 167*8kB (UMEH) 526*16kB (UMEH) 648*32kB (UMH) 674*64kB (UMH) 490*128kB (UMH) 163*256kB (UM) 81*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 221632kB [ 1176.438394][ T724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1176.441468][ T724] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1176.444444][ T724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1176.447487][ T724] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1176.450468][ T724] 19309 total pagecache pages [ 1176.451990][ T724] 1022 pages in swap cache [ 1176.453529][ T724] Free swap = 58696kB [ 1176.454882][ T724] Total swap = 124996kB [ 1176.456202][ T724] 524155 pages RAM [ 1176.457515][ T724] 0 pages HighMem/MovableOnly [ 1176.458980][ T724] 209484 pages reserved [ 1176.460290][ T724] 0 pages cma reserved [ 1177.097830][ T734] block device autoloading is deprecated and will be removed. [ 1177.100380][ T734] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1177.604068][ T744] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.762772][ T744] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.833932][ T744] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.976713][ T744] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.122823][ T9885] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.131822][ T9885] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.139295][ T9885] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.148121][ T9885] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.154880][ T743] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.219718][ T743] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.287557][ T743] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.339835][ T743] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.344774][ T751] cgroup: Unknown subsys name 'io' [ 1178.807441][ T758] lo speed is unknown, defaulting to 1000 [ 1179.105395][ T765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6731'. [ 1179.108782][ T765] netlink: 'syz.5.6731': attribute type 30 has an invalid length. [ 1179.112974][ T765] FAULT_INJECTION: forcing a failure. [ 1179.112974][ T765] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.117234][ T765] CPU: 1 UID: 0 PID: 765 Comm: syz.5.6731 Not tainted syzkaller #0 PREEMPT(full) [ 1179.117250][ T765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1179.117257][ T765] Call Trace: [ 1179.117262][ T765] [ 1179.117267][ T765] dump_stack_lvl+0x16c/0x1f0 [ 1179.117290][ T765] should_fail_ex+0x512/0x640 [ 1179.117313][ T765] ? dev_prep_valid_name.constprop.0+0x16a/0x6c0 [ 1179.117329][ T765] should_failslab+0xc2/0x120 [ 1179.117346][ T765] __kmalloc_noprof+0xd2/0x510 [ 1179.117362][ T765] dev_prep_valid_name.constprop.0+0x16a/0x6c0 [ 1179.117380][ T765] ? __pfx_dev_prep_valid_name.constprop.0+0x10/0x10 [ 1179.117398][ T765] ? lockdep_init_map_type+0x5c/0x280 [ 1179.117416][ T765] register_netdevice+0x49d/0x2270 [ 1179.117430][ T765] ? find_held_lock+0x2b/0x80 [ 1179.117440][ T765] ? __pfx_register_netdevice+0x10/0x10 [ 1179.117450][ T765] ? __asan_memcpy+0x3c/0x60 [ 1179.117461][ T765] ? vxlan_config_apply+0x653/0x7e0 [ 1179.117482][ T765] __vxlan_dev_create+0x15a/0x680 [ 1179.117501][ T765] ? __pfx___vxlan_dev_create+0x10/0x10 [ 1179.117522][ T765] vxlan_newlink+0x135/0x1e0 [ 1179.117535][ T765] ? alloc_netdev_mqs+0xf76/0x1530 [ 1179.117552][ T765] ? __pfx_vxlan_newlink+0x10/0x10 [ 1179.117575][ T765] ? rtnl_create_link+0xa4a/0xf90 [ 1179.117592][ T765] ? __pfx_vxlan_newlink+0x10/0x10 [ 1179.117607][ T765] rtnl_newlink+0xc42/0x2000 [ 1179.117629][ T765] ? __pfx_rtnl_newlink+0x10/0x10 [ 1179.117646][ T765] ? __kernel_text_address+0xd/0x40 [ 1179.117657][ T765] ? unwind_get_return_address+0x59/0xa0 [ 1179.117679][ T765] ? rcu_is_watching+0x12/0xc0 [ 1179.117698][ T765] ? find_held_lock+0x2b/0x80 [ 1179.117708][ T765] ? __pfx_rtnl_newlink+0x10/0x10 [ 1179.117724][ T765] ? __pfx_rtnl_newlink+0x10/0x10 [ 1179.117743][ T765] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1179.117753][ T765] ? __pfx_rtnl_newlink+0x10/0x10 [ 1179.117771][ T765] rtnetlink_rcv_msg+0x95e/0xe90 [ 1179.117782][ T765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1179.117795][ T765] ? __lock_acquire+0x62e/0x1ce0 [ 1179.117812][ T765] netlink_rcv_skb+0x158/0x420 [ 1179.117830][ T765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1179.117841][ T765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1179.117863][ T765] ? netlink_deliver_tap+0x1ae/0xd30 [ 1179.117879][ T765] ? is_vmalloc_addr+0x86/0xa0 [ 1179.117893][ T765] netlink_unicast+0x5a7/0x870 [ 1179.117915][ T765] ? __pfx_netlink_unicast+0x10/0x10 [ 1179.117932][ T765] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1179.117956][ T765] netlink_sendmsg+0x8d1/0xdd0 [ 1179.117975][ T765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1179.117993][ T765] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1179.118008][ T765] ____sys_sendmsg+0xa95/0xc70 [ 1179.118023][ T765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1179.118034][ T765] ? get_compat_msghdr+0x11a/0x170 [ 1179.118052][ T765] ? __pfx__kstrtoull+0x10/0x10 [ 1179.118070][ T765] ___sys_sendmsg+0x134/0x1d0 [ 1179.118087][ T765] ? __pfx____sys_sendmsg+0x10/0x10 [ 1179.118123][ T765] __sys_sendmmsg+0x2f9/0x420 [ 1179.118142][ T765] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1179.118166][ T765] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1179.118188][ T765] ? fput+0x9b/0xd0 [ 1179.118204][ T765] ? ksys_write+0x1ac/0x250 [ 1179.118216][ T765] ? __pfx_ksys_write+0x10/0x10 [ 1179.118246][ T765] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1179.118263][ T765] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1179.118280][ T765] __do_fast_syscall_32+0x7c/0x3a0 [ 1179.118299][ T765] do_fast_syscall_32+0x32/0x80 [ 1179.118316][ T765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1179.118329][ T765] RIP: 0023:0xf701e579 [ 1179.118341][ T765] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1179.118352][ T765] RSP: 002b:00000000f540e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1179.118363][ T765] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1179.118372][ T765] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1179.118379][ T765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1179.118385][ T765] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1179.118391][ T765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1179.118405][ T765] [ 1179.672567][ T774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1180.134875][ T787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6737'. [ 1180.141308][ T787] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6737'. [ 1180.144926][ T787] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6737'. [ 1180.257650][ T789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6738'. [ 1180.624136][ T794] overlayfs: missing 'lowerdir' [ 1180.727835][ T800] lo speed is unknown, defaulting to 1000 [ 1181.480646][ T806] FAULT_INJECTION: forcing a failure. [ 1181.480646][ T806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.485939][ T806] CPU: 2 UID: 0 PID: 806 Comm: syz.6.6743 Not tainted syzkaller #0 PREEMPT(full) [ 1181.485963][ T806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1181.485974][ T806] Call Trace: [ 1181.485981][ T806] [ 1181.485989][ T806] dump_stack_lvl+0x16c/0x1f0 [ 1181.486021][ T806] should_fail_ex+0x512/0x640 [ 1181.486054][ T806] _copy_to_user+0x32/0xd0 [ 1181.486077][ T806] simple_read_from_buffer+0xcb/0x170 [ 1181.486098][ T806] proc_fail_nth_read+0x197/0x240 [ 1181.486119][ T806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1181.486141][ T806] ? rw_verify_area+0xcf/0x6c0 [ 1181.486159][ T806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1181.486178][ T806] vfs_read+0x1e4/0xcf0 [ 1181.486204][ T806] ? __pfx_vfs_read+0x10/0x10 [ 1181.486222][ T806] ? find_held_lock+0x2b/0x80 [ 1181.486247][ T806] ? __fget_files+0x20e/0x3c0 [ 1181.486289][ T806] ksys_read+0x12a/0x250 [ 1181.486311][ T806] ? __pfx_ksys_read+0x10/0x10 [ 1181.486334][ T806] ? rcu_is_watching+0x12/0xc0 [ 1181.486356][ T806] __do_fast_syscall_32+0x7c/0x3a0 [ 1181.486387][ T806] do_fast_syscall_32+0x32/0x80 [ 1181.486415][ T806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1181.486437][ T806] RIP: 0023:0xf70be579 [ 1181.486452][ T806] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1181.486469][ T806] RSP: 002b:00000000f54ae590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1181.486486][ T806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54ae620 [ 1181.486499][ T806] RDX: 000000000000000f RSI: 00000000f7434ff4 RDI: 0000000000000000 [ 1181.486514][ T806] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1181.486525][ T806] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1181.486535][ T806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1181.486558][ T806] [ 1181.731161][ T826] lo speed is unknown, defaulting to 1000 [ 1181.926775][ T9901] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.935446][ T9901] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.943103][ T9877] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.943171][ T832] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6753'. [ 1181.953385][ T9877] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.469185][ T846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6755'. [ 1183.117896][ T862] lo speed is unknown, defaulting to 1000 [ 1183.213353][ T867] netlink: zone id is out of range [ 1183.215019][ T867] netlink: zone id is out of range [ 1183.216638][ T867] netlink: zone id is out of range [ 1183.219406][ T867] netlink: zone id is out of range [ 1183.221073][ T867] netlink: zone id is out of range [ 1183.222721][ T867] netlink: zone id is out of range [ 1183.224350][ T867] netlink: zone id is out of range [ 1183.225989][ T867] netlink: zone id is out of range [ 1183.228504][ T867] netlink: zone id is out of range [ 1183.230157][ T867] netlink: zone id is out of range [ 1183.474339][ T878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6766'. [ 1183.968149][ T887] futex_wake_op: syz.6.6769 tries to shift op by 32; fix this program [ 1184.065779][ T897] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6771'. [ 1184.104868][ T899] lo speed is unknown, defaulting to 1000 [ 1184.185898][ T908] netlink: 'syz.6.6775': attribute type 27 has an invalid length. [ 1184.188542][ T908] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6775'. [ 1184.344647][ T918] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6778'. [ 1184.467214][ T930] cgroup: Unknown subsys name 'io' [ 1186.100879][ T952] lo speed is unknown, defaulting to 1000 [ 1186.568564][ T981] cgroup: Unknown subsys name 'io' [ 1186.604192][ T980] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1186.607303][ T980] UDF-fs: Scanning with blocksize 2048 failed [ 1186.644314][ T980] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1186.649589][ T980] UDF-fs: Scanning with blocksize 4096 failed [ 1186.829041][ T979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6794'. [ 1187.756282][ T1004] netlink: 'syz.4.6799': attribute type 4 has an invalid length. [ 1187.773542][ T1004] loop6: detected capacity change from 0 to 63 [ 1187.781594][ T1004] buffer_io_error: 3120 callbacks suppressed [ 1187.781612][ T1004] Buffer I/O error on dev loop6, logical block 0, async page read [ 1187.788070][T16110] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1187.790408][ T1004] Buffer I/O error on dev loop6, logical block 0, async page read [ 1187.792977][ T1004] Buffer I/O error on dev loop6, logical block 0, async page read [ 1187.796021][ T1004] Buffer I/O error on dev loop6, logical block 0, async page read [ 1187.801471][ T1004] Buffer I/O error on dev loop6, logical block 0, async page read [ 1187.804713][ T1004] Buffer I/O error on dev loop6, logical block 0, async page read [ 1187.808261][ T1004] Buffer I/O error on dev loop6, logical block 0, async page read [ 1187.813020][ T1004] Buffer I/O error on dev loop6, logical block 0, async page read [ 1187.816903][ T1004] Buffer I/O error on dev loop6, logical block 0, async page read [ 1187.820586][ T1004] Buffer I/O error on dev loop6, logical block 0, async page read [ 1188.551815][T23711] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1188.628337][ T1023] cgroup: Unknown subsys name 'io' [ 1188.686805][ T1024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6805'. [ 1188.701766][T23711] usb 7-1: config index 0 descriptor too short (expected 65311, got 119) [ 1188.705432][T23711] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.718375][T23711] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1188.723155][T23711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.729315][T23711] usb 7-1: Product: syz [ 1188.732721][T23711] usb 7-1: Manufacturer: syz [ 1188.734688][T23711] usb 7-1: SerialNumber: syz [ 1188.765085][T23711] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1188.799113][T29806] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1189.385093][ T1031] ALSA: mixer_oss: invalid OSS volume '' [ 1189.574693][ T1036] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6808'. [ 1189.780216][T29806] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1189.782533][T29806] ath9k_htc: Failed to initialize the device [ 1189.802549][T29806] usb 7-1: ath9k_htc: USB layer deinitialized [ 1190.012851][T29023] usb 7-1: USB disconnect, device number 30 [ 1190.156449][ T1054] FAULT_INJECTION: forcing a failure. [ 1190.156449][ T1054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.161067][ T1054] CPU: 3 UID: 0 PID: 1054 Comm: syz.6.6814 Not tainted syzkaller #0 PREEMPT(full) [ 1190.161083][ T1054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1190.161091][ T1054] Call Trace: [ 1190.161096][ T1054] [ 1190.161101][ T1054] dump_stack_lvl+0x16c/0x1f0 [ 1190.161121][ T1054] should_fail_ex+0x512/0x640 [ 1190.161157][ T1054] _copy_from_user+0x2e/0xd0 [ 1190.161171][ T1054] sctp_setsockopt+0x2045/0xb870 [ 1190.161183][ T1054] ? ksys_write+0x190/0x250 [ 1190.161199][ T1054] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1190.161210][ T1054] ? find_held_lock+0x2b/0x80 [ 1190.161223][ T1054] ? aa_sock_opt_perm+0xfd/0x1c0 [ 1190.161234][ T1054] ? sock_common_setsockopt+0x2e/0xf0 [ 1190.161246][ T1054] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1190.161259][ T1054] do_sock_setsockopt+0xf3/0x1d0 [ 1190.161273][ T1054] __sys_setsockopt+0x120/0x1a0 [ 1190.161291][ T1054] __ia32_sys_setsockopt+0xbc/0x160 [ 1190.161307][ T1054] ? lockdep_hardirqs_on+0x7c/0x110 [ 1190.161330][ T1054] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1190.161357][ T1054] __do_fast_syscall_32+0x7c/0x3a0 [ 1190.161387][ T1054] do_fast_syscall_32+0x32/0x80 [ 1190.161404][ T1054] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1190.161419][ T1054] RIP: 0023:0xf70be579 [ 1190.161428][ T1054] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1190.161439][ T1054] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1190.161450][ T1054] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 1190.161457][ T1054] RDX: 0000000000000071 RSI: 00000000800001c0 RDI: 0000000000000008 [ 1190.161464][ T1054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1190.161470][ T1054] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1190.161476][ T1054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1190.161490][ T1054] [ 1190.293861][ T1058] net_ratelimit: 515 callbacks suppressed [ 1190.293874][ T1058] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1190.320810][ T1056] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1190.323914][ T1056] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1191.459073][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 1191.459085][ T40] audit: type=1326 audit(2000001022.461:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1101 comm="syz.4.6828" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x0 [ 1191.470684][ T1103] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6827'. [ 1191.483271][ T40] audit: type=1400 audit(2000001022.472:6213): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=1100 comm="syz.6.6827" [ 1191.498628][ T1103] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer. [ 1191.504627][ T1103] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer. [ 1191.611029][T16110] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1191.615226][T16110] Bluetooth: hci1: Injecting HCI hardware error event [ 1191.621460][ T5976] Bluetooth: hci1: hardware error 0x00 [ 1191.635486][ T1111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6830'. [ 1192.810846][ T1143] sp0: Synchronizing with TNC [ 1192.995497][ T1142] sp0: Synchronizing with TNC [ 1193.010580][ T1142] FAULT_INJECTION: forcing a failure. [ 1193.010580][ T1142] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.014527][ T1142] CPU: 2 UID: 0 PID: 1142 Comm: syz.6.6833 Not tainted syzkaller #0 PREEMPT(full) [ 1193.014543][ T1142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1193.014550][ T1142] Call Trace: [ 1193.014555][ T1142] [ 1193.014559][ T1142] dump_stack_lvl+0x16c/0x1f0 [ 1193.014579][ T1142] should_fail_ex+0x512/0x640 [ 1193.014597][ T1142] ? fs_reclaim_acquire+0xae/0x150 [ 1193.014615][ T1142] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1193.014632][ T1142] should_failslab+0xc2/0x120 [ 1193.014647][ T1142] __kmalloc_noprof+0xd2/0x510 [ 1193.014664][ T1142] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1193.014681][ T1142] ? tomoyo_profile+0x47/0x60 [ 1193.014693][ T1142] tomoyo_path_number_perm+0x245/0x580 [ 1193.014706][ T1142] ? tomoyo_path_number_perm+0x237/0x580 [ 1193.014722][ T1142] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1193.014750][ T1142] ? find_held_lock+0x2b/0x80 [ 1193.014761][ T1142] ? hook_file_ioctl_common+0x145/0x410 [ 1193.014780][ T1142] ? __fget_files+0x20e/0x3c0 [ 1193.014794][ T1142] security_file_ioctl_compat+0x9b/0x240 [ 1193.014811][ T1142] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1193.014831][ T1142] __do_fast_syscall_32+0x7c/0x3a0 [ 1193.014854][ T1142] do_fast_syscall_32+0x32/0x80 [ 1193.014872][ T1142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1193.014889][ T1142] RIP: 0023:0xf70be579 [ 1193.014898][ T1142] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1193.014911][ T1142] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1193.014922][ T1142] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000005437 [ 1193.014929][ T1142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1193.014935][ T1142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1193.014942][ T1142] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1193.014948][ T1142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1193.014962][ T1142] [ 1193.014966][ T1142] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1193.098925][ T1145] sp0: Synchronizing with TNC [ 1193.166293][ T1148] netlink: zone id is out of range [ 1193.168971][ T1148] netlink: zone id is out of range [ 1193.171279][ T1148] netlink: zone id is out of range [ 1193.173725][ T1148] netlink: zone id is out of range [ 1193.175895][ T1148] netlink: zone id is out of range [ 1193.178000][ T1148] netlink: zone id is out of range [ 1193.180203][ T1148] netlink: zone id is out of range [ 1193.182480][ T1148] netlink: zone id is out of range [ 1193.184810][ T1148] netlink: zone id is out of range [ 1193.442150][ T1159] binder_alloc: 1157: pid 1157 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1193.549850][ T1167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6840'. [ 1193.558046][ T1168] netlink: 'syz.2.6841': attribute type 4 has an invalid length. [ 1193.570574][ T1168] loop6: detected capacity change from 0 to 63 [ 1193.575956][ T1168] buffer_io_error: 7677 callbacks suppressed [ 1193.575970][ T1168] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.582884][ T1168] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.586516][ T1168] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.589850][ T1168] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.593491][ T1168] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.597021][ T1168] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.600392][ T5976] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1193.603754][ T1168] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.607383][ T1168] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.610240][ T1168] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.613254][ T1168] Buffer I/O error on dev loop6, logical block 0, async page read [ 1194.658504][T16110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1194.686582][T16110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1194.690926][T16110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1194.697122][T16110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1194.700755][T16110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1194.797148][ T1172] lo speed is unknown, defaulting to 1000 [ 1195.380944][ T1172] chnl_net:caif_netlink_parms(): no params data found [ 1195.433100][ T1188] netlink: 'syz.6.6847': attribute type 4 has an invalid length. [ 1195.488954][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.491565][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.494432][ T1172] bridge_slave_0: entered allmulticast mode [ 1195.497197][ T1172] bridge_slave_0: entered promiscuous mode [ 1195.502309][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.505342][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.508200][ T1172] bridge_slave_1: entered allmulticast mode [ 1195.512089][ T1172] bridge_slave_1: entered promiscuous mode [ 1195.559797][ T1172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.565697][ T1172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1195.598440][ T1172] team0: Port device team_slave_0 added [ 1195.605283][ T1172] team0: Port device team_slave_1 added [ 1195.635054][ T1172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.637243][ T1172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.645716][ T1172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.650110][ T1172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.652176][ T1172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.660660][ T1172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.700225][ T1172] hsr_slave_0: entered promiscuous mode [ 1195.702379][ T1172] hsr_slave_1: entered promiscuous mode [ 1195.704342][ T1172] debugfs: 'hsr0' already exists in 'hsr' [ 1195.706164][ T1172] Cannot create hsr debugfs directory [ 1195.809395][ T1172] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1195.877709][ T1172] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1195.979861][ T1172] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.042413][ T1172] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.232662][ T1172] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1196.235303][ T1172] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1196.240399][ T1172] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1196.295558][ T1172] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1196.522742][ T1172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.550086][ T1172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.577134][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.579403][ T9877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.640651][ T9855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.642677][ T9855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.705795][T16110] Bluetooth: hci2: command tx timeout [ 1197.019227][ T1172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1197.024902][ T1172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1197.297730][ T1232] syzkaller1: entered promiscuous mode [ 1197.299588][ T1232] syzkaller1: entered allmulticast mode [ 1197.316986][ T1172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.320589][ T1232] 9pnet_fd: Insufficient options for proto=fd [ 1197.432289][ T1245] lo speed is unknown, defaulting to 1000 [ 1197.524087][ T1172] veth0_vlan: entered promiscuous mode [ 1197.537790][ T1172] veth1_vlan: entered promiscuous mode [ 1197.572366][ T1172] veth0_macvtap: entered promiscuous mode [ 1197.582592][ T1172] veth1_macvtap: entered promiscuous mode [ 1197.591195][ T1172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.599306][ T1172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.605169][ T9877] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.612207][ T9877] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.616158][ T9877] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.620308][ T9877] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.643461][ T1252] netlink: 'syz.6.6859': attribute type 1 has an invalid length. [ 1197.675591][ T1252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1197.694989][ T1252] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 1197.708374][ T1252] vlan2: entered allmulticast mode [ 1197.710504][ T1252] veth1: entered allmulticast mode [ 1197.713186][ T1252] veth1: entered promiscuous mode [ 1197.715967][ T1252] veth1: left promiscuous mode [ 1197.719481][ T1252] bond2: (slave vlan2): making interface the new active one [ 1197.722576][ T1252] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1197.731950][ T1252] veth1: entered promiscuous mode [ 1197.734791][ T1252] vlan2: entered promiscuous mode [ 1197.737324][ T1252] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 1197.811156][ T9855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.821629][ T9855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.863388][ T9901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.868536][ T9901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.620097][T16110] Bluetooth: hci2: command tx timeout [ 1198.906953][ T1278] fuse: Bad value for 'fd' [ 1198.966781][ T1285] max out of range [ 1198.994105][ T1285] sp0: Synchronizing with TNC [ 1199.033072][ T1290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6870'. [ 1199.248839][ T1298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6872'. [ 1200.461028][ T1323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6880'. [ 1200.601935][T16110] Bluetooth: hci2: command tx timeout [ 1200.978599][ T1328] netlink: 'syz.5.6882': attribute type 4 has an invalid length. [ 1202.181354][ T1351] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1202.184487][ T1351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1202.186837][ T1351] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1202.204577][ T1351] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1202.367831][ T1377] cgroup: Unknown subsys name 'io' [ 1202.502678][ T1375] net_ratelimit: 166 callbacks suppressed [ 1202.502690][ T1375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1202.683745][ T40] audit: type=1804 audit(2000001034.240:6214): pid=1382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6898" name="/newroot/13/file0" dev="tmpfs" ino=83 res=1 errno=0 [ 1202.702221][ T1382] 8021q: VLANs not supported on gre0 [ 1202.883723][ T1390] input: syz1 as /devices/virtual/input/input98 [ 1203.070935][ T1394] lo speed is unknown, defaulting to 1000 [ 1203.073862][ T1394] lo speed is unknown, defaulting to 1000 [ 1203.087227][ T1394] lo speed is unknown, defaulting to 1000 [ 1203.164526][ T1394] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1203.308246][ T1394] lo speed is unknown, defaulting to 1000 [ 1203.327389][ T1394] lo speed is unknown, defaulting to 1000 [ 1203.329987][ T1394] lo speed is unknown, defaulting to 1000 [ 1203.332658][ T1394] lo speed is unknown, defaulting to 1000 [ 1203.345216][ T1394] lo speed is unknown, defaulting to 1000 [ 1203.345242][ T5976] Bluetooth: hci5: command 0x0c1a tx timeout [ 1203.348083][ T1394] lo speed is unknown, defaulting to 1000 [ 1203.497213][ T1404] bridge0: entered promiscuous mode [ 1204.107647][ T1408] Bluetooth: hci2: command 0x0c1a tx timeout [ 1204.300285][ T1412] netlink: 'syz.4.6906': attribute type 4 has an invalid length. [ 1204.316864][ T1412] lo speed is unknown, defaulting to 1000 [ 1204.598608][ T1433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6912'. [ 1204.787475][ T1412] lo speed is unknown, defaulting to 1000 [ 1204.945311][T16110] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1204.945377][ T1408] Bluetooth: hci3: command 0x1003 tx timeout [ 1205.016333][ T1438] fuse: Bad value for 'fd' [ 1205.234378][ T1442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6914'. [ 1205.519257][ T1453] FAULT_INJECTION: forcing a failure. [ 1205.519257][ T1453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.523710][ T1453] CPU: 0 UID: 0 PID: 1453 Comm: syz.4.6917 Not tainted syzkaller #0 PREEMPT(full) [ 1205.523726][ T1453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1205.523733][ T1453] Call Trace: [ 1205.523738][ T1453] [ 1205.523743][ T1453] dump_stack_lvl+0x16c/0x1f0 [ 1205.523763][ T1453] should_fail_ex+0x512/0x640 [ 1205.523783][ T1453] _copy_from_user+0x2e/0xd0 [ 1205.523795][ T1453] do_fb_ioctl+0x290/0x7e0 [ 1205.523808][ T1453] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1205.523818][ T1453] ? lockdep_hardirqs_on+0x7c/0x110 [ 1205.523836][ T1453] ? find_held_lock+0x2b/0x80 [ 1205.523862][ T1453] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1205.523884][ T1453] fb_compat_ioctl+0x55e/0x670 [ 1205.523896][ T1453] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 1205.523906][ T1453] ? hook_file_ioctl_common+0x145/0x410 [ 1205.523925][ T1453] ? __fget_files+0x20e/0x3c0 [ 1205.523941][ T1453] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 1205.523951][ T1453] __ia32_compat_sys_ioctl+0x242/0x370 [ 1205.523980][ T1453] __do_fast_syscall_32+0x7c/0x3a0 [ 1205.524000][ T1453] do_fast_syscall_32+0x32/0x80 [ 1205.524017][ T1453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1205.524031][ T1453] RIP: 0023:0xf7fe7579 [ 1205.524039][ T1453] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1205.524050][ T1453] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1205.524061][ T1453] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 1205.524068][ T1453] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1205.524074][ T1453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1205.524084][ T1453] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1205.524091][ T1453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1205.524105][ T1453] [ 1205.750687][ T1461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6919'. [ 1205.844458][ T1465] atomic_op ffff8880543d0998 conn xmit_atomic 0000000000000000 [ 1205.848583][ T1465] tmpfs: Unknown parameter 'hugeadvise' [ 1206.097826][T16110] Bluetooth: hci2: command 0x0c1a tx timeout [ 1206.456007][ T1478] FAULT_INJECTION: forcing a failure. [ 1206.456007][ T1478] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.461150][ T1478] CPU: 0 UID: 0 PID: 1478 Comm: syz.4.6926 Not tainted syzkaller #0 PREEMPT(full) [ 1206.461177][ T1478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1206.461185][ T1478] Call Trace: [ 1206.461189][ T1478] [ 1206.461193][ T1478] dump_stack_lvl+0x16c/0x1f0 [ 1206.461214][ T1478] should_fail_ex+0x512/0x640 [ 1206.461234][ T1478] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1206.461249][ T1478] should_failslab+0xc2/0x120 [ 1206.461264][ T1478] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1206.461277][ T1478] ? getname_flags.part.0+0x4c/0x550 [ 1206.461297][ T1478] getname_flags.part.0+0x4c/0x550 [ 1206.461315][ T1478] getname_flags+0x93/0xf0 [ 1206.461327][ T1478] __ia32_sys_rename+0x64/0xa0 [ 1206.461342][ T1478] __do_fast_syscall_32+0x7c/0x3a0 [ 1206.461361][ T1478] do_fast_syscall_32+0x32/0x80 [ 1206.461377][ T1478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1206.461391][ T1478] RIP: 0023:0xf7fe7579 [ 1206.461400][ T1478] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1206.461411][ T1478] RSP: 002b:00000000f54d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000026 [ 1206.461422][ T1478] RAX: ffffffffffffffda RBX: 0000000080000500 RCX: 00000000800002c0 [ 1206.461429][ T1478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1206.461435][ T1478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1206.461441][ T1478] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1206.461447][ T1478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1206.461460][ T1478] [ 1206.858296][ T1484] 9pnet_virtio: no channels available for device syz [ 1207.011879][ T1490] dummy0: entered promiscuous mode [ 1207.014378][ T1490] macsec1: entered promiscuous mode [ 1207.018990][ T1490] dummy0: left promiscuous mode [ 1207.200733][ T1502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6932'. [ 1207.887914][ T1507] fuse: Bad value for 'fd' [ 1208.069893][T16110] Bluetooth: hci2: command 0x0c1a tx timeout [ 1208.303168][ T1512] cgroup: Unknown subsys name 'io' [ 1208.346081][ T1514] netlink: zone id is out of range [ 1208.348267][ T1514] netlink: zone id is out of range [ 1208.350432][ T1514] netlink: zone id is out of range [ 1208.362590][ T1514] netlink: zone id is out of range [ 1208.364958][ T1514] netlink: zone id is out of range [ 1208.367118][ T1514] netlink: zone id is out of range [ 1208.369267][ T1514] netlink: zone id is out of range [ 1208.371409][ T1514] netlink: zone id is out of range [ 1208.383798][ T1514] netlink: zone id is out of range [ 1208.386063][ T1514] netlink: zone id is out of range [ 1208.508379][ T9901] vlan2: left promiscuous mode [ 1209.295596][ T1544] fuse: Bad value for 'fd' [ 1209.301988][ T1541] tmpfs: Unknown parameter 'indo64' [ 1210.059958][T16110] Bluetooth: hci2: command 0x0c1a tx timeout [ 1210.073183][ T1550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6947'. [ 1210.076937][ T1550] netlink: 'syz.6.6947': attribute type 5 has an invalid length. [ 1210.080486][ T1554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6950'. [ 1210.090693][ T1550] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6947'. [ 1210.122795][ T1550] geneve2: entered promiscuous mode [ 1210.125043][ T1550] geneve2: entered allmulticast mode [ 1210.145058][ T9877] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1210.149422][ T9877] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1210.152277][ T9877] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1210.155661][ T9877] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1210.238425][ T1559] cgroup: Unknown subsys name 'io' [ 1210.859729][ T1573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6955'. [ 1211.411760][ T1598] netlink: 'syz.5.6965': attribute type 1 has an invalid length. [ 1211.415004][ T1598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6965'. [ 1211.418842][ T1598] netlink: 'syz.5.6965': attribute type 10 has an invalid length. [ 1211.430486][ T1598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.434943][ T1598] team0: Port device bond0 added [ 1211.440509][ T1598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6965'. [ 1211.496653][ T40] audit: type=1326 audit(2000001043.489:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1592 comm="syz.2.6963" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 1211.504138][ T40] audit: type=1326 audit(2000001043.489:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1592 comm="syz.2.6963" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f925a7 code=0x7ffc0000 [ 1211.517382][ T40] audit: type=1326 audit(2000001043.489:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1592 comm="syz.2.6963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 1211.527681][ T40] audit: type=1326 audit(2000001043.489:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1592 comm="syz.2.6963" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 1211.534654][ T40] audit: type=1326 audit(2000001043.489:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1592 comm="syz.2.6963" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f925a7 code=0x7ffc0000 [ 1211.541782][ T40] audit: type=1326 audit(2000001043.489:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1592 comm="syz.2.6963" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 1211.550662][ T40] audit: type=1326 audit(2000001043.489:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1592 comm="syz.2.6963" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f925a7 code=0x7ffc0000 [ 1211.559210][ T40] audit: type=1326 audit(2000001043.489:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1592 comm="syz.2.6963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 1211.567458][ T40] audit: type=1326 audit(2000001043.489:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1592 comm="syz.2.6963" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 1211.578208][ T40] audit: type=1326 audit(2000001043.489:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1592 comm="syz.2.6963" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f925a7 code=0x7ffc0000 [ 1211.626522][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 1211.639951][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 1211.740274][ T1598] team0 (unregistering): Port device bond0 removed [ 1212.636300][ T1639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6976'. [ 1213.733506][ T1651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6980'. [ 1213.736795][ T1651] bridge_slave_1: left allmulticast mode [ 1213.738853][ T1651] bridge_slave_1: left promiscuous mode [ 1213.741537][ T1651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.226696][ T1669] net_ratelimit: 340 callbacks suppressed [ 1214.226709][ T1669] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1214.235325][ T1669] tmpfs: Bad value for 'mpol' [ 1215.046520][ T1674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1215.231813][ T1686] netlink: 'syz.2.6988': attribute type 10 has an invalid length. [ 1215.243347][ T1686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.247657][ T1686] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1215.253576][ T1686] netlink: 'syz.2.6988': attribute type 10 has an invalid length. [ 1215.256189][ T1686] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6988'. [ 1215.259448][ T1686] batadv0: entered promiscuous mode [ 1215.264097][ T1686] bond0: (slave batadv0): Releasing backup interface [ 1215.269855][ T1686] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1215.422134][ T1685] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6989'. [ 1216.409908][ T1711] netlink: zone id is out of range [ 1216.412088][ T1711] netlink: zone id is out of range [ 1216.413840][ T1711] netlink: zone id is out of range [ 1216.415461][ T1711] netlink: zone id is out of range [ 1216.417371][ T1711] netlink: zone id is out of range [ 1216.419075][ T1711] netlink: zone id is out of range [ 1216.421109][ T1711] netlink: zone id is out of range [ 1216.422733][ T1711] netlink: zone id is out of range [ 1216.741297][ T1714] sp0: Synchronizing with TNC [ 1216.935777][ T1726] siw: device registration error -23 [ 1216.987133][ T1729] netlink: 'syz.5.7005': attribute type 1 has an invalid length. [ 1216.989609][ T1729] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7005'. [ 1217.276220][ T1740] virtio-fs: tag not found [ 1217.353565][ T1744] comedi comedi0: s526: I/O port conflict (0x95,64) [ 1217.359914][ T40] kauditd_printk_skb: 1182 callbacks suppressed [ 1217.359963][ T40] audit: type=1326 audit(2000001049.651:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.6.7010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1217.369143][ T40] audit: type=1326 audit(2000001049.651:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.6.7010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1217.375652][ T40] audit: type=1326 audit(2000001049.651:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.6.7010" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1217.382758][ T40] audit: type=1326 audit(2000001049.662:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.6.7010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1217.391180][ T40] audit: type=1326 audit(2000001049.662:7411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.6.7010" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1217.398541][ T40] audit: type=1326 audit(2000001049.672:7412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.6.7010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1217.406983][ T40] audit: type=1326 audit(2000001049.672:7413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.6.7010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1217.414777][ T40] audit: type=1326 audit(2000001049.683:7414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.6.7010" exe="/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1217.421890][ T40] audit: type=1326 audit(2000001049.683:7415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.6.7010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1217.430041][ T40] audit: type=1326 audit(2000001049.683:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.6.7010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1218.475846][ C3] vcan0: j1939_tp_rxtimer: 0xffff888079a14c00: rx timeout, send abort [ 1218.655444][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888079a14c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1218.937966][ T1779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7021'. [ 1219.310273][ T1787] pim6reg: entered allmulticast mode [ 1219.557174][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7023'. [ 1221.413607][ T1827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7034'. [ 1221.854046][ T1834] net_ratelimit: 342 callbacks suppressed [ 1221.854058][ T1834] netlink: zone id is out of range [ 1221.860388][ T1834] netlink: zone id is out of range [ 1221.862617][ T1834] netlink: zone id is out of range [ 1221.866931][ T1834] netlink: zone id is out of range [ 1221.868593][ T1834] netlink: zone id is out of range [ 1221.870155][ T1834] netlink: zone id is out of range [ 1221.871769][ T1834] netlink: zone id is out of range [ 1221.880151][ T1834] netlink: zone id is out of range [ 1221.882988][ T1834] netlink: zone id is out of range [ 1221.886908][ T1834] netlink: zone id is out of range [ 1222.137376][ T1846] cgroup: Unknown subsys name 'io' [ 1223.826799][ T1883] Invalid ELF header magic: != ELF [ 1223.982351][ T1867] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1223.984846][ T1867] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1224.145678][ T1891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7052'. [ 1224.283938][ T1891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7052'. [ 1224.322926][ T1892] Invalid ELF header magic: != ELF [ 1224.664289][ T1899] cgroup: Unknown subsys name 'io' [ 1225.215711][T16110] Bluetooth: hci5: command 0x0c1a tx timeout [ 1225.561747][ T1908] tipc: Started in network mode [ 1225.563394][ T1908] tipc: Node identity 00000000000001060000000000000001, cluster identity 4711 [ 1225.566197][ T1908] tipc: Enabling of bearer rejected, failed to enable media [ 1225.683877][ T1926] FAULT_INJECTION: forcing a failure. [ 1225.683877][ T1926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1225.688974][ T1926] CPU: 3 UID: 0 PID: 1926 Comm: syz.6.7063 Not tainted syzkaller #0 PREEMPT(full) [ 1225.688990][ T1926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1225.688998][ T1926] Call Trace: [ 1225.689002][ T1926] [ 1225.689007][ T1926] dump_stack_lvl+0x16c/0x1f0 [ 1225.689046][ T1926] should_fail_ex+0x512/0x640 [ 1225.689071][ T1926] _copy_to_user+0x32/0xd0 [ 1225.689084][ T1926] simple_read_from_buffer+0xcb/0x170 [ 1225.689097][ T1926] proc_fail_nth_read+0x197/0x240 [ 1225.689111][ T1926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1225.689123][ T1926] ? rw_verify_area+0xcf/0x6c0 [ 1225.689135][ T1926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1225.689146][ T1926] vfs_read+0x1e4/0xcf0 [ 1225.689161][ T1926] ? __pfx_vfs_read+0x10/0x10 [ 1225.689172][ T1926] ? find_held_lock+0x2b/0x80 [ 1225.689187][ T1926] ? __fget_files+0x20e/0x3c0 [ 1225.689203][ T1926] ksys_read+0x12a/0x250 [ 1225.689215][ T1926] ? __pfx_ksys_read+0x10/0x10 [ 1225.689228][ T1926] ? fput+0x9b/0xd0 [ 1225.689242][ T1926] ? rcu_is_watching+0x12/0xc0 [ 1225.689256][ T1926] __do_fast_syscall_32+0x7c/0x3a0 [ 1225.689274][ T1926] do_fast_syscall_32+0x32/0x80 [ 1225.689291][ T1926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1225.689305][ T1926] RIP: 0023:0xf70be579 [ 1225.689314][ T1926] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1225.689325][ T1926] RSP: 002b:00000000f54ae590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1225.689336][ T1926] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ae620 [ 1225.689343][ T1926] RDX: 000000000000000f RSI: 00000000f7434ff4 RDI: 0000000000000000 [ 1225.689349][ T1926] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1225.689356][ T1926] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1225.689362][ T1926] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1225.689376][ T1926] [ 1225.778306][ T1929] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7064'. [ 1225.833281][ T1923] random: crng reseeded on system resumption [ 1225.978115][T16110] Bluetooth: hci2: command 0x0c1a tx timeout [ 1226.959958][ T1945] xt_l2tp: wrong L2TP version: 0 [ 1227.011045][ T1947] net_ratelimit: 340 callbacks suppressed [ 1227.011062][ T1947] netlink: zone id is out of range [ 1227.020231][ T1947] netlink: zone id is out of range [ 1227.022499][ T1947] netlink: zone id is out of range [ 1227.024651][ T1947] netlink: zone id is out of range [ 1227.028900][ T1947] netlink: zone id is out of range [ 1227.031584][ T1947] netlink: zone id is out of range [ 1227.033950][ T1947] netlink: zone id is out of range [ 1227.036158][ T1947] netlink: zone id is out of range [ 1227.038343][ T1947] netlink: zone id is out of range [ 1227.040543][ T1947] netlink: zone id is out of range [ 1227.567421][ T1954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7068'. [ 1227.594384][ T1954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.611959][T16611] lo speed is unknown, defaulting to 1000 [ 1229.296348][ T1999] block nbd2: Attempted send on invalid socket [ 1229.299191][ T1999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1229.422256][ T1999] input: syz1 as /devices/virtual/input/input103 [ 1229.576088][ T2014] fuse: Bad value for 'rootmode' [ 1229.651697][ T2016] loop6: detected capacity change from 0 to 2560 [ 1229.654322][ T2016] buffer_io_error: 6651 callbacks suppressed [ 1229.654333][ T2016] Buffer I/O error on dev loop6, logical block 0, async page read [ 1229.658751][ T2016] Buffer I/O error on dev loop6, logical block 0, async page read [ 1229.661218][ T2016] Buffer I/O error on dev loop6, logical block 0, async page read [ 1229.663784][ T2016] Buffer I/O error on dev loop6, logical block 0, async page read [ 1229.666372][ T2016] Buffer I/O error on dev loop6, logical block 0, async page read [ 1229.668870][ T2016] Buffer I/O error on dev loop6, logical block 0, async page read [ 1229.671320][ T2016] Buffer I/O error on dev loop6, logical block 0, async page read [ 1229.674442][ T2016] Buffer I/O error on dev loop6, logical block 0, async page read [ 1229.677761][ T2016] ldm_validate_partition_table(): Disk read failed. [ 1229.679790][ T2016] Buffer I/O error on dev loop6, logical block 0, async page read [ 1229.682472][ T2016] Buffer I/O error on dev loop6, logical block 0, async page read [ 1229.685921][ T2016] Dev loop6: unable to read RDB block 0 [ 1229.689465][ T2016] loop6: unable to read partition table [ 1229.692010][ T2016] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1229.699829][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1229.700129][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1229.702964][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1229.709892][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1229.710735][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1229.716484][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1229.719489][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2 [ 1229.722603][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2 [ 1229.805496][ T2021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7089'. [ 1229.828045][ T2025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7091'. [ 1229.832860][ T2025] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7091'. [ 1229.835633][ T2025] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7091'. [ 1229.875767][ T2023] bond2: (slave wlan0): Releasing active interface [ 1229.877970][ T2023] bond2: (slave wlan0): the permanent HWaddr of slave - 02:00:00:00:35:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1229.883996][ T2023] vlan2: entered promiscuous mode [ 1231.109034][ T2058] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7102'. [ 1231.585501][ T2080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.595791][ T2080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.603691][ T2083] overlayfs: failed to resolve './file0': -2 [ 1231.636887][ T2083] afs: Unknown parameter 'dye' [ 1231.727133][ T10] lo speed is unknown, defaulting to 1000 [ 1231.728307][ T6039] syz1: Port: 1 Link DOWN [ 1231.728976][ T10] sz1: Port: 1 Link DOWN [ 1231.732493][ T10] lo speed is unknown, defaulting to 1000 [ 1231.743405][ T9851] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.746650][ T9851] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.754724][ T9851] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.771197][ T9851] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.881752][ T2109] ubi: mtd0 is already attached to ubi31 [ 1231.884137][ T2109] netlink: 'syz.6.7120': attribute type 58 has an invalid length. [ 1231.886582][ T2109] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7120'. [ 1232.190217][ T2107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7118'. [ 1232.257633][ T5991] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 1232.366947][ T2119] net_ratelimit: 516 callbacks suppressed [ 1232.366960][ T2119] netlink: zone id is out of range [ 1232.371303][ T2119] netlink: zone id is out of range [ 1232.372937][ T2119] netlink: zone id is out of range [ 1232.374528][ T2119] netlink: zone id is out of range [ 1232.376130][ T2119] netlink: zone id is out of range [ 1232.377727][ T2119] netlink: zone id is out of range [ 1232.382897][ T2119] netlink: zone id is out of range [ 1232.384532][ T2119] netlink: zone id is out of range [ 1232.386124][ T2119] netlink: zone id is out of range [ 1232.387720][ T2119] netlink: zone id is out of range [ 1232.417658][ T5991] usb 11-1: Using ep0 maxpacket: 8 [ 1232.429190][ T5991] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1232.431343][ T5991] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1232.434261][ T5991] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.438414][ T5991] usb 11-1: config 0 descriptor?? [ 1232.770215][ T2123] cgroup: Unknown subsys name 'io' [ 1232.829032][ T5991] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1233.019904][ T5991] usb 11-1: USB disconnect, device number 3 [ 1233.836702][ T2097] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 1233.981401][ T2097] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1233.981436][ T2097] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 62, changing to 9 [ 1233.981452][ T2097] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 41358, setting to 1024 [ 1233.981466][ T2097] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1233.981487][ T2097] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1233.981499][ T2097] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.986467][ T2097] usb 11-1: config 0 descriptor?? [ 1234.398848][ T2097] hid_parser_main: 8 callbacks suppressed [ 1234.398862][ T2097] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1234.398887][ T2097] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1234.398900][ T2097] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1234.398912][ T2097] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1234.398925][ T2097] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1234.405521][ T2097] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1234.826988][T23711] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1234.984753][T23711] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1234.991333][T23711] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1234.995658][T23711] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1235.002094][T23711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.010314][ T2157] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1235.014267][T23711] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1235.312369][ T2164] lo speed is unknown, defaulting to 1000 [ 1235.622464][ T2164] lo speed is unknown, defaulting to 1000 [ 1235.649194][ T2137] trusted_key: encrypted_key: insufficient parameters specified [ 1235.761275][ T2097] usb 11-1: reset high-speed USB device number 4 using dummy_hcd [ 1235.762882][ T2170] cgroup: Unknown subsys name 'io' [ 1237.407923][ T2093] usb 11-1: USB disconnect, device number 4 [ 1237.426989][ T10] usb 10-1: USB disconnect, device number 14 [ 1237.469259][ T2192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7144'. [ 1237.626079][ T2198] cgroup: Unknown subsys name 'io' [ 1237.721228][ T2200] fuse: Bad value for 'fd' [ 1238.021530][ T2207] program syz.2.7148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1238.114360][ T2209] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7149'. [ 1238.209234][ T2214] pimreg: entered allmulticast mode [ 1238.213324][ T2214] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7151'. [ 1238.250359][ T2216] netlink: 88 bytes leftover after parsing attributes in process `syz.6.7152'. [ 1238.338270][ T2219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7153'. [ 1239.702103][ T9855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.706885][ T9855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.824455][ T2239] tipc: Started in network mode [ 1239.826108][ T2239] tipc: Node identity 4, cluster identity 4711 [ 1239.828395][ T2239] tipc: Node number set to 4 [ 1240.477156][ T9886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.488597][ T9886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.497333][ T2247] binder_alloc: 2246: pid 2246 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1240.566766][ T2240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.686379][ T9886] vlan2: left promiscuous mode [ 1241.020107][ T2264] binder_alloc: 2263: pid 2263 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1241.637822][ T2277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7169'. [ 1241.737631][ T2287] lo speed is unknown, defaulting to 1000 [ 1241.894220][ T2287] lo speed is unknown, defaulting to 1000 [ 1242.036022][ T2295] : renamed from hsr0 [ 1243.501010][ T2325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7184'. [ 1243.739851][ T2331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7187'. [ 1245.316440][ T2347] cgroup: Unknown subsys name 'io' [ 1247.562379][ T2395] input: syz1 as /devices/virtual/input/input105 [ 1248.029770][ T2418] net_ratelimit: 165 callbacks suppressed [ 1248.029781][ T2418] netlink: zone id is out of range [ 1248.029787][ T2418] netlink: zone id is out of range [ 1248.029791][ T2418] netlink: zone id is out of range [ 1248.029854][ T2418] netlink: zone id is out of range [ 1248.029860][ T2418] netlink: zone id is out of range [ 1248.029864][ T2418] netlink: zone id is out of range [ 1248.029869][ T2418] netlink: zone id is out of range [ 1248.029873][ T2418] netlink: zone id is out of range [ 1248.029877][ T2418] netlink: zone id is out of range [ 1248.029882][ T2418] netlink: zone id is out of range [ 1248.651958][ T2409] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1248.654562][ T2409] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1248.947770][ T2432] Invalid ELF header magic: != ELF [ 1249.650075][ T2449] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1249.830967][T16110] Bluetooth: hci5: command 0x0c1a tx timeout [ 1249.962250][ T2461] netlink: 'syz.4.7229': attribute type 10 has an invalid length. [ 1250.420920][ T2093] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1250.579388][ T2093] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.592051][T16110] Bluetooth: hci2: command 0x0c1a tx timeout [ 1250.594059][ T2093] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.605786][ T2093] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1250.615263][ T2093] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.637389][ T2093] usb 10-1: config 0 descriptor?? [ 1251.111306][ T2093] cm6533_jd 0003:0D8C:0022.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 1251.311863][ T2494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7241'. [ 1251.520704][ T2503] fuse: Bad value for 'fd' [ 1251.570570][ T2506] xt_l2tp: invalid flags combination: 8 [ 1251.668050][ T2510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7248'. [ 1251.671701][ T2510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7248'. [ 1251.988355][ T2514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1251.994177][ T2514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1253.078590][ T2097] usb 10-1: USB disconnect, device number 15 [ 1253.276451][ T2536] random: crng reseeded on system resumption [ 1253.345327][ T2543] fuse: Bad value for 'fd' [ 1254.510136][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 1254.510154][ T40] audit: type=1326 audit(2000001088.651:7430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2576 comm="syz.5.7266" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705e579 code=0x0 [ 1254.808520][ T2600] cgroup: Unknown subsys name 'io' [ 1255.548113][ T2612] netlink: 830 bytes leftover after parsing attributes in process `syz.5.7272'. [ 1255.552839][ T2612] bond_slave_0: entered promiscuous mode [ 1255.556357][ T2612] bond_slave_1: entered promiscuous mode [ 1255.601559][ T2616] fuse: Bad value for 'fd' [ 1256.063610][ T2631] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1256.066397][ T2631] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1256.070016][ T2631] vhci_hcd vhci_hcd.0: Device attached [ 1256.084820][ T2631] netdevsim netdevsim5: Direct firmware load for @ failed with error -2 [ 1256.089859][ T2631] netdevsim netdevsim5: Falling back to sysfs fallback for: @ [ 1256.460062][ T2093] usb 48-1: SetAddress Request (8) to port 0 [ 1256.462218][ T2093] usb 48-1: new SuperSpeed USB device number 8 using vhci_hcd [ 1256.535547][ T2632] vhci_hcd: connection reset by peer [ 1256.555251][ T9886] vhci_hcd: stop threads [ 1256.556645][ T9886] vhci_hcd: release socket [ 1256.562400][ T9886] vhci_hcd: disconnect device [ 1258.660097][T10030] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 1258.824977][T10030] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1258.832717][ T2698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7293'. [ 1258.833233][T10030] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1258.844735][T10030] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1258.847958][T10030] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.853432][ T2689] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1258.866097][T10030] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 1259.407355][ T2711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7298'. [ 1259.410307][ T2711] netlink: 'syz.4.7298': attribute type 30 has an invalid length. [ 1259.419026][ T9877] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1259.421904][ T9877] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1259.427621][ T9877] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1259.431171][ T9877] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1261.237749][ T2737] overlayfs: failed to resolve './file0': -2 [ 1261.260820][ T2093] usb 48-1: device descriptor read/8, error -110 [ 1261.273804][ T839] usb 11-1: USB disconnect, device number 5 [ 1261.307176][ T2742] syzkaller0: entered promiscuous mode [ 1261.310404][ T2742] syzkaller0: entered allmulticast mode [ 1261.652678][ T2093] usb usb48-port1: attempt power cycle [ 1262.223972][ T2093] usb usb48-port1: unable to enumerate USB device [ 1262.456368][ T2791] fuse: Bad value for 'fd' [ 1264.337541][ T2814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7322'. [ 1264.578361][ T2837] input: syz1 as /devices/virtual/input/input107 [ 1265.386569][ T2847] gtp0: entered promiscuous mode [ 1265.464397][ T2849] netlink: 'syz.5.7329': attribute type 4 has an invalid length. [ 1265.771303][ T2858] net_ratelimit: 340 callbacks suppressed [ 1265.771316][ T2858] netlink: zone id is out of range [ 1265.774819][ T2858] netlink: zone id is out of range [ 1265.803803][ T2853] random: crng reseeded on system resumption [ 1265.804662][ T2858] netlink: zone id is out of range [ 1265.817645][ T2858] netlink: zone id is out of range [ 1265.831205][ T2858] netlink: zone id is out of range [ 1265.851536][ T2858] netlink: zone id is out of range [ 1265.864457][ T2858] netlink: zone id is out of range [ 1265.881893][ T2858] netlink: zone id is out of range [ 1265.888583][ T2858] netlink: zone id is out of range [ 1265.899645][ T2858] netlink: zone id is out of range [ 1266.439641][ T2878] program syz.5.7335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1266.565804][ T2884] cgroup: Unknown subsys name 'io' [ 1266.615242][ T2883] sg_read: process 1556 (syz.4.7336) changed security contexts after opening file descriptor, this is not allowed. [ 1266.724933][ T2886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7338'. [ 1267.169885][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1267.320794][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1267.324258][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1267.327347][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1267.337950][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.347422][ T2896] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1267.351527][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1267.527379][ T2921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7347'. [ 1268.621903][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7350'. [ 1268.625042][ T2937] netlink: 'syz.6.7350': attribute type 30 has an invalid length. [ 1268.631653][ T9851] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1268.634879][ T9851] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1268.637482][ T9851] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1268.640051][ T9851] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1268.667297][ T40] audit: type=1326 audit(2000001103.506:7431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.7351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1268.674477][ T40] audit: type=1326 audit(2000001103.506:7432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.7351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1268.681524][ T40] audit: type=1326 audit(2000001103.516:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.7351" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1268.688684][ T40] audit: type=1326 audit(2000001103.516:7434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.7351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1268.696551][ T40] audit: type=1326 audit(2000001103.516:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.7351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1268.704075][ T40] audit: type=1326 audit(2000001103.516:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.7351" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1268.712065][ T40] audit: type=1326 audit(2000001103.516:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.7351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1268.718764][ T40] audit: type=1326 audit(2000001103.516:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.7351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1268.727251][ T40] audit: type=1326 audit(2000001103.516:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.7351" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1268.734500][ T40] audit: type=1326 audit(2000001103.516:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.7351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1269.169795][ T2953] cgroup: Unknown subsys name 'io' [ 1269.663366][ T2965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7356'. [ 1269.751873][T23712] usb 7-1: USB disconnect, device number 31 [ 1269.804512][ T2972] netlink: 'syz.2.7359': attribute type 10 has an invalid length. [ 1270.363913][ T1408] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1270.366477][ T1408] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1270.369530][ T1408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1270.371075][ T1408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1270.372258][ T1408] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1270.392997][ T2988] lo speed is unknown, defaulting to 1000 [ 1270.562758][ T2988] lo speed is unknown, defaulting to 1000 [ 1270.645752][ T2988] chnl_net:caif_netlink_parms(): no params data found [ 1270.873217][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.875875][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.878842][ T2988] bridge_slave_0: entered allmulticast mode [ 1270.882730][ T2988] bridge_slave_0: entered promiscuous mode [ 1270.887588][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.890513][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.894105][ T2988] bridge_slave_1: entered allmulticast mode [ 1270.897919][ T2988] bridge_slave_1: entered promiscuous mode [ 1270.899614][ T3011] random: crng reseeded on system resumption [ 1270.916586][ T3011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7362'. [ 1270.920699][ T3011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7362'. [ 1271.008917][ T3011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7362'. [ 1271.012977][ T3011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7362'. [ 1271.036451][ T2988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.039136][ T2988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.096749][ T2988] team0: Port device team_slave_0 added [ 1271.099966][ T2988] team0: Port device team_slave_1 added [ 1271.133525][ T2988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.135694][ T2988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.143642][ T2988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.150210][ T3027] cgroup: Unknown subsys name 'io' [ 1271.157660][ T3011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7362'. [ 1271.157864][ T2988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.162845][ T2988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.165130][ T3011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7362'. [ 1271.174485][ T2988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.219219][ T2988] hsr_slave_0: entered promiscuous mode [ 1271.221645][ T2988] hsr_slave_1: entered promiscuous mode [ 1271.223820][ T2988] debugfs: 'hsr0' already exists in 'hsr' [ 1271.225794][ T2988] Cannot create hsr debugfs directory [ 1271.276351][ T3030] FAULT_INJECTION: forcing a failure. [ 1271.276351][ T3030] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.281490][ T3030] CPU: 0 UID: 0 PID: 3030 Comm: syz.4.7371 Not tainted syzkaller #0 PREEMPT(full) [ 1271.281514][ T3030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1271.281525][ T3030] Call Trace: [ 1271.281532][ T3030] [ 1271.281540][ T3030] dump_stack_lvl+0x16c/0x1f0 [ 1271.281573][ T3030] should_fail_ex+0x512/0x640 [ 1271.281601][ T3030] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1271.281627][ T3030] should_failslab+0xc2/0x120 [ 1271.281651][ T3030] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1271.281674][ T3030] ? alloc_inode+0x64/0x240 [ 1271.281725][ T3030] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1271.281747][ T3030] alloc_inode+0x64/0x240 [ 1271.281772][ T3030] new_inode+0x22/0x1c0 [ 1271.281801][ T3030] __debugfs_create_file+0x11c/0x6b0 [ 1271.281827][ T3030] debugfs_create_file_full+0x41/0x60 [ 1271.281853][ T3030] ? __pfx_vlan_setup+0x10/0x10 [ 1271.281870][ T3030] ref_tracker_dir_debugfs+0x19d/0x290 [ 1271.281889][ T3030] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1271.281943][ T3030] ? __kvmalloc_node_noprof+0x298/0x620 [ 1271.281968][ T3030] ? lockdep_init_map_type+0x5c/0x280 [ 1271.281998][ T3030] alloc_netdev_mqs+0x30f/0x1530 [ 1271.282033][ T3030] rtnl_create_link+0xc08/0xf90 [ 1271.282064][ T3030] rtnl_newlink+0xb69/0x2000 [ 1271.282099][ T3030] ? __pfx_rtnl_newlink+0x10/0x10 [ 1271.282127][ T3030] ? __kernel_text_address+0xd/0x40 [ 1271.282144][ T3030] ? unwind_get_return_address+0x59/0xa0 [ 1271.282183][ T3030] ? rcu_is_watching+0x12/0xc0 [ 1271.282211][ T3030] ? find_held_lock+0x2b/0x80 [ 1271.282228][ T3030] ? __pfx_rtnl_newlink+0x10/0x10 [ 1271.282254][ T3030] ? __pfx_rtnl_newlink+0x10/0x10 [ 1271.282279][ T3030] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1271.282297][ T3030] ? __pfx_rtnl_newlink+0x10/0x10 [ 1271.282325][ T3030] rtnetlink_rcv_msg+0x95e/0xe90 [ 1271.282344][ T3030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1271.282366][ T3030] ? __lock_acquire+0x62e/0x1ce0 [ 1271.282396][ T3030] netlink_rcv_skb+0x158/0x420 [ 1271.282424][ T3030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1271.282443][ T3030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1271.282480][ T3030] ? netlink_deliver_tap+0x1ae/0xd30 [ 1271.282505][ T3030] ? is_vmalloc_addr+0x86/0xa0 [ 1271.282530][ T3030] netlink_unicast+0x5a7/0x870 [ 1271.282562][ T3030] ? __pfx_netlink_unicast+0x10/0x10 [ 1271.282589][ T3030] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1271.282624][ T3030] netlink_sendmsg+0x8d1/0xdd0 [ 1271.282656][ T3030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1271.282687][ T3030] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1271.282717][ T3030] ____sys_sendmsg+0xa95/0xc70 [ 1271.282741][ T3030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1271.282760][ T3030] ? get_compat_msghdr+0x11a/0x170 [ 1271.282798][ T3030] ___sys_sendmsg+0x134/0x1d0 [ 1271.282826][ T3030] ? __pfx____sys_sendmsg+0x10/0x10 [ 1271.282867][ T3030] ? find_held_lock+0x2b/0x80 [ 1271.282902][ T3030] __sys_sendmsg+0x16d/0x220 [ 1271.282929][ T3030] ? __pfx___sys_sendmsg+0x10/0x10 [ 1271.282968][ T3030] ? rcu_is_watching+0x12/0xc0 [ 1271.282990][ T3030] __do_fast_syscall_32+0x7c/0x3a0 [ 1271.283020][ T3030] do_fast_syscall_32+0x32/0x80 [ 1271.283048][ T3030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1271.283071][ T3030] RIP: 0023:0xf7fe7579 [ 1271.283086][ T3030] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1271.283104][ T3030] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1271.283122][ T3030] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1271.283134][ T3030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1271.283145][ T3030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1271.283155][ T3030] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1271.283166][ T3030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1271.283190][ T3030] [ 1271.422626][ T3030] debugfs: out of free dentries, can not create file 'netdev@ffff888070b9c610' [ 1271.426603][ T3030] 8021q: VLANs not supported on gre0 [ 1271.490232][ T2988] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.494962][ T2988] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.612414][ T2988] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.615712][ T2988] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.664488][ T2988] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.668131][ T2988] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.734665][ T2988] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.737912][ T2988] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.881352][ T2988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1271.891515][ T2988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1271.901906][ T2988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1271.921065][ T2988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1272.042550][ T2988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.068168][ T2988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.077732][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.080778][ T9886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.093849][ T9877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.096098][ T9877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.272359][ T2988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.305194][ T2988] veth0_vlan: entered promiscuous mode [ 1272.311157][T16110] Bluetooth: hci3: command tx timeout [ 1272.313355][ T2988] veth1_vlan: entered promiscuous mode [ 1272.334504][ T2988] veth0_macvtap: entered promiscuous mode [ 1272.338605][ T2988] veth1_macvtap: entered promiscuous mode [ 1272.351874][ T2988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.362588][ T2988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.376048][ T9886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.387329][ T9877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.390787][ T9877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.393630][ T9877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.538058][ T9886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.567838][ T9886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.576730][ T3060] sctp: [Deprecated]: syz.6.7377 (pid 3060) Use of int in max_burst socket option. [ 1272.576730][ T3060] Use struct sctp_assoc_value instead [ 1272.600962][ T9855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.603456][ T9855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.291567][T16110] Bluetooth: hci3: command tx timeout [ 1275.168397][ T3112] bridge0: port 3(erspan0) entered blocking state [ 1275.170667][ T3112] bridge0: port 3(erspan0) entered disabled state [ 1275.173325][ T3112] erspan0: entered allmulticast mode [ 1275.176688][ T3112] erspan0: entered promiscuous mode [ 1275.178917][ T3112] bridge0: port 3(erspan0) entered blocking state [ 1275.181020][ T3112] bridge0: port 3(erspan0) entered forwarding state [ 1275.332687][ T3114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7389'. [ 1275.358981][ T3114] net_ratelimit: 166 callbacks suppressed [ 1275.358989][ T3114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1275.514014][ T3117] netlink: 'syz.6.7390': attribute type 298 has an invalid length. [ 1275.972169][ T3123] Invalid ELF header magic: != ELF [ 1276.282844][T16110] Bluetooth: hci3: command tx timeout [ 1276.415329][ T3100] Set syz1 is full, maxelem 65536 reached [ 1276.863202][ T3141] Invalid ELF header magic: != ELF [ 1276.908084][ T3154] fuse: Bad value for 'fd' [ 1277.401185][ T3136] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1277.404231][ T3136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1277.410159][ T3136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1277.413174][ T3136] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1277.429543][ T3136] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1277.691768][ T40] kauditd_printk_skb: 272 callbacks suppressed [ 1277.691780][ T40] audit: type=1326 audit(2000001112.975:7713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3160 comm="syz.5.7402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 1277.700356][ T40] audit: type=1326 audit(2000001112.975:7714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3160 comm="syz.5.7402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 1277.707254][ T40] audit: type=1326 audit(2000001112.986:7715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3160 comm="syz.5.7402" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 1277.716800][ T40] audit: type=1326 audit(2000001112.986:7716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3160 comm="syz.5.7402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 1277.723798][ T40] audit: type=1326 audit(2000001112.986:7717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3160 comm="syz.5.7402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 1277.730542][ T40] audit: type=1326 audit(2000001112.986:7718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3160 comm="syz.5.7402" exe="/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 1277.737178][ T40] audit: type=1326 audit(2000001112.986:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3160 comm="syz.5.7402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 1277.744138][ T40] audit: type=1326 audit(2000001112.986:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3160 comm="syz.5.7402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 1277.756697][ T40] audit: type=1326 audit(2000001112.986:7721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3160 comm="syz.5.7402" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 1277.762438][ T3165] lo speed is unknown, defaulting to 1000 [ 1277.767297][ T40] audit: type=1326 audit(2000001112.986:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3160 comm="syz.5.7402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 1277.899149][ T3172] tipc: Started in network mode [ 1277.901311][ T3172] tipc: Node identity 00000000000006010000000000000001, cluster identity 4711 [ 1277.905927][ T3172] tipc: Enabling of bearer rejected, failed to enable media [ 1277.930068][ T3165] lo speed is unknown, defaulting to 1000 [ 1278.357820][ T3161] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1278.475733][ T3185] netlink: zone id is out of range [ 1278.477430][ T3185] netlink: zone id is out of range [ 1278.479009][ T3185] netlink: zone id is out of range [ 1278.480603][ T3185] netlink: zone id is out of range [ 1278.482213][ T3185] netlink: zone id is out of range [ 1278.486667][ T1408] Bluetooth: hci5: command 0x0c1a tx timeout [ 1278.499342][ T3185] netlink: zone id is out of range [ 1278.501465][ T3185] netlink: zone id is out of range [ 1278.503167][ T3185] netlink: zone id is out of range [ 1278.576920][ T3189] netlink: 'syz.4.7411': attribute type 4 has an invalid length. [ 1278.583446][ T3189] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7411'. [ 1278.589603][ T3189] : renamed from bond0 [ 1278.916828][ T3207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7414'. [ 1278.921594][ T3207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7414'. [ 1279.043661][ T3211] cgroup: Unknown subsys name 'io' [ 1279.397821][ T1408] Bluetooth: hci3: command 0x0c1a tx timeout [ 1279.406949][ T1408] Bluetooth: hci2: command 0x0c1a tx timeout [ 1279.481236][ T3217] hub 9-0:1.0: USB hub found [ 1279.493154][ T3217] hub 9-0:1.0: 1 port detected [ 1279.791668][ T3220] veth0: entered promiscuous mode [ 1279.794329][ T3220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7418'. [ 1279.937270][ T3222] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.7419'. [ 1279.944187][ T3222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7419'. [ 1280.139211][ T3233] cgroup: Unknown subsys name 'io' [ 1280.291369][ T3236] FAULT_INJECTION: forcing a failure. [ 1280.291369][ T3236] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.298317][ T3236] CPU: 0 UID: 0 PID: 3236 Comm: syz.2.7423 Not tainted syzkaller #0 PREEMPT(full) [ 1280.298367][ T3236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1280.298378][ T3236] Call Trace: [ 1280.298387][ T3236] [ 1280.298394][ T3236] dump_stack_lvl+0x16c/0x1f0 [ 1280.298424][ T3236] should_fail_ex+0x512/0x640 [ 1280.298452][ T3236] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1280.298474][ T3236] should_failslab+0xc2/0x120 [ 1280.298498][ T3236] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1280.298515][ T3236] ? __pfx_v9fs_fid_find_inode+0x10/0x10 [ 1280.298541][ T3236] ? p9_fid_create+0x41/0x260 [ 1280.298571][ T3236] p9_fid_create+0x41/0x260 [ 1280.298597][ T3236] p9_client_attach+0x92/0x2b0 [ 1280.298621][ T3236] ? __pfx_p9_client_attach+0x10/0x10 [ 1280.298639][ T3236] ? v9fs_fid_lookup+0x4bd/0xeb0 [ 1280.298666][ T3236] v9fs_fid_lookup+0x97a/0xeb0 [ 1280.298697][ T3236] v9fs_vfs_lookup+0x1a1/0x5b0 [ 1280.298718][ T3236] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 1280.298735][ T3236] ? d_alloc+0x176/0x1e0 [ 1280.298760][ T3236] ? do_raw_spin_unlock+0x172/0x230 [ 1280.298788][ T3236] ? _raw_spin_unlock+0x28/0x50 [ 1280.298825][ T3236] lookup_one_qstr_excl+0x1d1/0x250 [ 1280.298852][ T3236] ? mnt_want_write+0x161/0x450 [ 1280.298871][ T3236] do_renameat2+0x56d/0xc50 [ 1280.298903][ T3236] ? __pfx_do_renameat2+0x10/0x10 [ 1280.298928][ T3236] ? find_held_lock+0x2b/0x80 [ 1280.298945][ T3236] ? __might_fault+0xe3/0x190 [ 1280.298965][ T3236] ? __might_fault+0x13b/0x190 [ 1280.298999][ T3236] ? getname_flags.part.0+0x1c5/0x550 [ 1280.299031][ T3236] __ia32_sys_rename+0x7c/0xa0 [ 1280.299056][ T3236] __do_fast_syscall_32+0x7c/0x3a0 [ 1280.299086][ T3236] do_fast_syscall_32+0x32/0x80 [ 1280.299113][ T3236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1280.299137][ T3236] RIP: 0023:0xf7f28579 [ 1280.299150][ T3236] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1280.299168][ T3236] RSP: 002b:00000000f541555c EFLAGS: 00000296 ORIG_RAX: 0000000000000026 [ 1280.299185][ T3236] RAX: ffffffffffffffda RBX: 0000000080000500 RCX: 00000000800002c0 [ 1280.299197][ T3236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1280.299207][ T3236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1280.299216][ T3236] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1280.299226][ T3236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1280.299249][ T3236] [ 1281.176619][ T3242] net_ratelimit: 167 callbacks suppressed [ 1281.176631][ T3242] netlink: zone id is out of range [ 1281.180364][ T3242] netlink: zone id is out of range [ 1281.182059][ T3242] netlink: zone id is out of range [ 1281.183808][ T3242] netlink: zone id is out of range [ 1281.185461][ T3242] netlink: zone id is out of range [ 1281.187101][ T3242] netlink: zone id is out of range [ 1281.188786][ T3242] netlink: zone id is out of range [ 1281.190466][ T3242] netlink: zone id is out of range [ 1281.192215][ T3242] netlink: zone id is out of range [ 1281.193914][ T3242] netlink: zone id is out of range [ 1281.282852][ T3239] binder: 3238:3239 ioctl 400c620e 80000040 returned -22 [ 1281.378856][ T1408] Bluetooth: hci3: command 0x0c1a tx timeout [ 1281.543818][ T3254] cgroup: Unknown subsys name 'io' [ 1282.203403][ T3263] netlink: 168 bytes leftover after parsing attributes in process `syz.6.7431'. [ 1282.459591][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 1282.459870][ T40] audit: type=1326 audit(2000001117.983:7796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3262 comm="syz.6.7431" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1282.487157][ T40] audit: type=1326 audit(2000001117.983:7797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3262 comm="syz.6.7431" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70be5a7 code=0x7ffc0000 [ 1282.510740][ T40] audit: type=1326 audit(2000001117.983:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3262 comm="syz.6.7431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1282.525767][ T40] audit: type=1326 audit(2000001117.993:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3262 comm="syz.6.7431" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1282.548737][ T40] audit: type=1326 audit(2000001117.993:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3262 comm="syz.6.7431" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70be5a7 code=0x7ffc0000 [ 1282.566557][ T40] audit: type=1326 audit(2000001117.993:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3262 comm="syz.6.7431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1282.582199][ T40] audit: type=1326 audit(2000001118.004:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3262 comm="syz.6.7431" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1282.605128][ T40] audit: type=1326 audit(2000001118.004:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3262 comm="syz.6.7431" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70be5a7 code=0x7ffc0000 [ 1282.619261][ T40] audit: type=1326 audit(2000001118.004:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3262 comm="syz.6.7431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1282.632147][ T40] audit: type=1326 audit(2000001118.014:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3262 comm="syz.6.7431" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1283.360039][ T1408] Bluetooth: hci3: command 0x0c1a tx timeout [ 1283.915465][ T3307] cgroup: Unknown subsys name 'io' [ 1284.470265][ T3314] lo speed is unknown, defaulting to 1000 [ 1284.794095][ T3321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7450'. [ 1284.870650][ T3314] lo speed is unknown, defaulting to 1000 [ 1285.142736][ T3331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7453'. [ 1285.268354][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.341826][ T1452] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1285.808653][ T1452] usb 10-1: Using ep0 maxpacket: 32 [ 1285.812469][ T1452] usb 10-1: config 1 interface 0 altsetting 37 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1285.815889][ T1452] usb 10-1: config 1 interface 0 altsetting 37 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1285.818522][ T3348] netlink: 'syz.6.7459': attribute type 8 has an invalid length. [ 1285.819962][ T1452] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1285.828484][ T1452] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1285.831708][ T1452] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.834303][ T1452] usb 10-1: Product: 朶退漞満慇⮴䋒|뛛庴簪爦섧ƞ鋦Ƌ誦妵렿㮂娖㙀骜䡎軣ᩎ橾嬮潎롢ᐑ浞궻㕲烈ꠖ吻숽ꖻ쓗䇞뛿쮊훧鲎橿ʣ宣迊׆뎐豉늘ꀦ깡앿꛾庬⓸텨곖麽뮑瑽☇낦 [ 1285.842338][ T1452] usb 10-1: Manufacturer: 湞牄嫲ᘖ⸱韹導쩿蜌廙俎Ἠ궳磯圲秳㠒↸䪢橍몕᲏⥶皯遡׭뻇鉁澕硺퐧㔞諭坯熚藬샭Қ釱싅콥隬뗚奧㟈봘な [ 1285.848377][ T1452] usb 10-1: SerialNumber: 뙋缘ၬ젉﫹⌋ﳍ坼앇ꌴ٠잂ꇁ윪ʅ쎘⺲঻罾衬ುﺺ΍퉎熃摮߬ꘀ諵쩫殸䋮㨱傁절᱅䏒ꐶ症鿚ꔋ 렷㞁㱮搳⽀්ᒮ䕀贯滋릉׺蕧ᛩ짔첄퉰䓖ࡦꍜ蹗뎆䰞幢韡컮ﰾ䧳挷㴁ᙒ뻲앸焥炨訢牱到ᶤ⇡㥞羼Ꭳ [ 1285.859958][ T3334] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1286.069975][ T1452] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 1286.077914][ T1452] usb 10-1: USB disconnect, device number 16 [ 1286.154291][ T3362] overlay: Unknown parameter '/O*ٱĞ DlvpV 9:$VQ [ 1297.666544][ T3553] dump_stack_lvl+0x16c/0x1f0 [ 1297.666572][ T3553] should_fail_ex+0x512/0x640 [ 1297.666595][ T3553] ? fs_reclaim_acquire+0xae/0x150 [ 1297.666619][ T3553] should_failslab+0xc2/0x120 [ 1297.666639][ T3553] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1297.666658][ T3553] ? security_inode_alloc+0x3b/0x2b0 [ 1297.666680][ T3553] security_inode_alloc+0x3b/0x2b0 [ 1297.666698][ T3553] inode_init_always_gfp+0xce4/0x1030 [ 1297.666720][ T3553] alloc_inode+0x86/0x240 [ 1297.666741][ T3553] new_inode+0x22/0x1c0 [ 1297.666763][ T3553] __debugfs_create_file+0x11c/0x6b0 [ 1297.666786][ T3553] debugfs_create_file_full+0x41/0x60 [ 1297.666806][ T3553] ? __pfx_vlan_setup+0x10/0x10 [ 1297.666821][ T3553] ref_tracker_dir_debugfs+0x19d/0x290 [ 1297.666837][ T3553] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1297.666869][ T3553] ? __kvmalloc_node_noprof+0x298/0x620 [ 1297.666885][ T3553] ? rcu_is_watching+0x12/0xc0 [ 1297.666902][ T3553] ? lockdep_init_map_type+0x5c/0x280 [ 1297.666927][ T3553] alloc_netdev_mqs+0x30f/0x1530 [ 1297.666956][ T3553] rtnl_create_link+0xc08/0xf90 [ 1297.666983][ T3553] rtnl_newlink+0xb69/0x2000 [ 1297.667013][ T3553] ? __pfx_rtnl_newlink+0x10/0x10 [ 1297.667037][ T3553] ? __kernel_text_address+0xd/0x40 [ 1297.667051][ T3553] ? unwind_get_return_address+0x59/0xa0 [ 1297.667083][ T3553] ? rcu_is_watching+0x12/0xc0 [ 1297.667107][ T3553] ? find_held_lock+0x2b/0x80 [ 1297.667122][ T3553] ? __pfx_rtnl_newlink+0x10/0x10 [ 1297.667148][ T3553] ? __pfx_rtnl_newlink+0x10/0x10 [ 1297.667171][ T3553] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1297.667187][ T3553] ? __pfx_rtnl_newlink+0x10/0x10 [ 1297.667219][ T3553] rtnetlink_rcv_msg+0x95e/0xe90 [ 1297.667235][ T3553] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1297.667252][ T3553] ? __lock_acquire+0x62e/0x1ce0 [ 1297.667276][ T3553] netlink_rcv_skb+0x158/0x420 [ 1297.667300][ T3553] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1297.667315][ T3553] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1297.667346][ T3553] ? netlink_deliver_tap+0x1ae/0xd30 [ 1297.667369][ T3553] ? is_vmalloc_addr+0x86/0xa0 [ 1297.667390][ T3553] netlink_unicast+0x5a7/0x870 [ 1297.667416][ T3553] ? __pfx_netlink_unicast+0x10/0x10 [ 1297.667438][ T3553] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1297.667469][ T3553] netlink_sendmsg+0x8d1/0xdd0 [ 1297.667495][ T3553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1297.667521][ T3553] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1297.667541][ T3553] ____sys_sendmsg+0xa95/0xc70 [ 1297.667561][ T3553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1297.667578][ T3553] ? get_compat_msghdr+0x11a/0x170 [ 1297.667609][ T3553] ___sys_sendmsg+0x134/0x1d0 [ 1297.667632][ T3553] ? __pfx____sys_sendmsg+0x10/0x10 [ 1297.667665][ T3553] ? find_held_lock+0x2b/0x80 [ 1297.667694][ T3553] __sys_sendmsg+0x16d/0x220 [ 1297.667717][ T3553] ? __pfx___sys_sendmsg+0x10/0x10 [ 1297.667791][ T3553] ? rcu_is_watching+0x12/0xc0 [ 1297.667817][ T3553] __do_fast_syscall_32+0x7c/0x3a0 [ 1297.667846][ T3553] do_fast_syscall_32+0x32/0x80 [ 1297.667872][ T3553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1297.667893][ T3553] RIP: 0023:0xf7fe7579 [ 1297.667908][ T3553] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1297.667925][ T3553] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1297.667943][ T3553] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1297.667954][ T3553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1297.667964][ T3553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1297.667974][ T3553] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1297.667984][ T3553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1297.668008][ T3553] [ 1297.871629][ T3553] debugfs: out of free dentries, can not create file 'netdev@ffff8880675ea610' [ 1297.875201][ T3553] 8021q: VLANs not supported on gre0 [ 1298.196019][ T3574] netlink: 'syz.5.7520': attribute type 10 has an invalid length. [ 1298.858266][ T3576] lo speed is unknown, defaulting to 1000 [ 1299.514545][ T3576] lo speed is unknown, defaulting to 1000 [ 1300.145964][ T3618] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1300.148093][ T3618] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1300.152230][ T3618] vhci_hcd vhci_hcd.0: Device attached [ 1300.186591][ T3618] xt_limit: Overflow, try lower: 271964/0 [ 1300.401414][ T2097] usb 42-1: SetAddress Request (38) to port 0 [ 1300.406472][ T2097] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1300.447782][ T3627] cgroup: Unknown subsys name 'io' [ 1300.599982][ T3619] vhci_hcd: connection reset by peer [ 1300.602596][ T9877] vhci_hcd: stop threads [ 1300.604523][ T9877] vhci_hcd: release socket [ 1300.606077][ T9877] vhci_hcd: disconnect device [ 1301.517489][ T40] kauditd_printk_skb: 158 callbacks suppressed [ 1301.517506][ T40] audit: type=1326 audit(2000001137.992:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3656 comm="syz.6.7544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1301.531787][ T40] audit: type=1326 audit(2000001137.992:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3656 comm="syz.6.7544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1301.540522][ T40] audit: type=1326 audit(2000001137.992:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3656 comm="syz.6.7544" exe="/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1301.554472][ T40] audit: type=1326 audit(2000001137.992:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3656 comm="syz.6.7544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1301.555335][ T1408] Bluetooth: hci4: Malformed Event: 0x02 [ 1301.562956][ T40] audit: type=1326 audit(2000001137.992:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3656 comm="syz.6.7544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1301.574388][ T9874] Bluetooth: hci4: Frame reassembly failed (-84) [ 1301.577293][ T40] audit: type=1326 audit(2000001137.992:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3656 comm="syz.6.7544" exe="/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1301.586052][ T40] audit: type=1326 audit(2000001137.992:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3656 comm="syz.6.7544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1301.594404][ T40] audit: type=1326 audit(2000001137.992:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3656 comm="syz.6.7544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1301.602561][ T40] audit: type=1326 audit(2000001137.992:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3656 comm="syz.6.7544" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1301.610699][ T40] audit: type=1326 audit(2000001137.992:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3656 comm="syz.6.7544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1302.183090][ T1408] Bluetooth: hci3: command 0x0c1a tx timeout [ 1302.354614][ T3664] No control pipe specified [ 1302.396950][ T3668] xt_l2tp: invalid flags combination: 8 [ 1302.397463][ T3667] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7548'. [ 1302.406217][ T3667] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1302.685410][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7551'. [ 1302.707217][ T3678] net_ratelimit: 340 callbacks suppressed [ 1302.707232][ T3678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1303.478537][ T5976] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1303.593734][ T3688] No control pipe specified [ 1303.664100][ T3690] netlink: 'syz.5.7553': attribute type 4 has an invalid length. [ 1303.902479][ T3690] loop6: detected capacity change from 0 to 63 [ 1304.133847][ T3701] bond3: entered promiscuous mode [ 1304.135627][ T3701] bond3: entered allmulticast mode [ 1304.137930][ T3701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1304.348986][ T3690] buffer_io_error: 6 callbacks suppressed [ 1304.349000][ T3690] Buffer I/O error on dev loop6, logical block 0, async page read [ 1304.353611][ T3690] Buffer I/O error on dev loop6, logical block 0, async page read [ 1304.358987][ T3690] Buffer I/O error on dev loop6, logical block 0, async page read [ 1304.362404][ T3690] Buffer I/O error on dev loop6, logical block 0, async page read [ 1304.366212][ T3690] Buffer I/O error on dev loop6, logical block 0, async page read [ 1304.369789][ T3690] Buffer I/O error on dev loop6, logical block 0, async page read [ 1304.373235][ T3690] Buffer I/O error on dev loop6, logical block 0, async page read [ 1304.379809][ T3690] Buffer I/O error on dev loop6, logical block 0, async page read [ 1304.384398][ T3690] Buffer I/O error on dev loop6, logical block 0, async page read [ 1304.387727][ T3690] Buffer I/O error on dev loop6, logical block 0, async page read [ 1304.744628][ T3716] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1304.747743][ T3716] CPU: 3 UID: 0 PID: 3716 Comm: syz.2.7565 Not tainted syzkaller #0 PREEMPT(full) [ 1304.747760][ T3716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1304.747768][ T3716] Call Trace: [ 1304.747772][ T3716] [ 1304.747777][ T3716] dump_stack_lvl+0x16c/0x1f0 [ 1304.747800][ T3716] sysfs_warn_dup+0x7f/0xa0 [ 1304.747816][ T3716] sysfs_do_create_link_sd+0x124/0x140 [ 1304.747832][ T3716] sysfs_create_link+0x61/0xc0 [ 1304.747847][ T3716] device_add+0x62c/0x1aa0 [ 1304.747862][ T3716] ? __pfx_device_add+0x10/0x10 [ 1304.747873][ T3716] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1304.747892][ T3716] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1304.747911][ T3716] wiphy_register+0x1df4/0x29f0 [ 1304.747921][ T3716] ? netdev_run_todo+0x864/0x1320 [ 1304.747932][ T3716] ? __dev_printk+0x210/0x270 [ 1304.747950][ T3716] ? __pfx_wiphy_register+0x10/0x10 [ 1304.747973][ T3716] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1304.747992][ T3716] ieee80211_register_hw+0x2546/0x4120 [ 1304.748015][ T3716] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1304.748035][ T3716] ? find_held_lock+0x2b/0x80 [ 1304.748048][ T3716] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1304.748066][ T3716] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1304.748083][ T3716] ? __hrtimer_setup+0x176/0x280 [ 1304.748102][ T3716] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1304.748128][ T3716] ? trace_kmalloc+0x2b/0xd0 [ 1304.748145][ T3716] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1304.748160][ T3716] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1304.748174][ T3716] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1304.748188][ T3716] ? __asan_memcpy+0x3c/0x60 [ 1304.748204][ T3716] hwsim_new_radio_nl+0xb51/0x12c0 [ 1304.748219][ T3716] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1304.748238][ T3716] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1304.748252][ T3716] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1304.748269][ T3716] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1304.748284][ T3716] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1304.748301][ T3716] ? bpf_lsm_capable+0x9/0x10 [ 1304.748311][ T3716] ? security_capable+0x7e/0x260 [ 1304.748324][ T3716] ? ns_capable+0xd7/0x110 [ 1304.748337][ T3716] genl_rcv_msg+0x55c/0x800 [ 1304.748351][ T3716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1304.748363][ T3716] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1304.748379][ T3716] ? __lock_acquire+0x62e/0x1ce0 [ 1304.748396][ T3716] netlink_rcv_skb+0x158/0x420 [ 1304.748414][ T3716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1304.748426][ T3716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1304.748449][ T3716] ? netlink_deliver_tap+0x1ae/0xd30 [ 1304.748465][ T3716] ? is_vmalloc_addr+0x86/0xa0 [ 1304.748484][ T3716] genl_rcv+0x28/0x40 [ 1304.748499][ T3716] netlink_unicast+0x5a7/0x870 [ 1304.748529][ T3716] ? __pfx_netlink_unicast+0x10/0x10 [ 1304.748557][ T3716] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1304.748597][ T3716] netlink_sendmsg+0x8d1/0xdd0 [ 1304.748649][ T3716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1304.748672][ T3716] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1304.748689][ T3716] ____sys_sendmsg+0xa95/0xc70 [ 1304.748705][ T3716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1304.748717][ T3716] ? get_compat_msghdr+0x11a/0x170 [ 1304.748737][ T3716] ? __pfx_futex_wake_mark+0x10/0x10 [ 1304.748758][ T3716] ___sys_sendmsg+0x134/0x1d0 [ 1304.748776][ T3716] ? __pfx____sys_sendmsg+0x10/0x10 [ 1304.748800][ T3716] ? find_held_lock+0x2b/0x80 [ 1304.748820][ T3716] __sys_sendmsg+0x16d/0x220 [ 1304.748838][ T3716] ? __pfx___sys_sendmsg+0x10/0x10 [ 1304.748854][ T3716] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 1304.748875][ T3716] ? rcu_is_watching+0x12/0xc0 [ 1304.748889][ T3716] __do_fast_syscall_32+0x7c/0x3a0 [ 1304.748909][ T3716] do_fast_syscall_32+0x32/0x80 [ 1304.748926][ T3716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1304.748940][ T3716] RIP: 0023:0xf7f28579 [ 1304.748953][ T3716] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1304.748970][ T3716] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1304.748987][ T3716] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1304.748998][ T3716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1304.749008][ T3716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1304.749020][ T3716] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1304.749030][ T3716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1304.749047][ T3716] [ 1304.936463][ T3717] random: crng reseeded on system resumption [ 1305.264537][ T3729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7570'. [ 1305.282360][ T2097] usb 42-1: device descriptor read/8, error -110 [ 1305.623409][ T3734] No control pipe specified [ 1305.704187][ T3741] binder: BINDER_SET_CONTEXT_MGR already set [ 1305.706156][ T3741] binder: 3740:3741 ioctl 4018620d 800000c0 returned -16 [ 1305.710967][ T3741] binder: BINDER_SET_CONTEXT_MGR already set [ 1305.713633][ T3741] binder: 3740:3741 ioctl 4018620d 800000c0 returned -16 [ 1305.716979][ T3743] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1305.719801][ T2097] usb usb42-port1: attempt power cycle [ 1306.271036][ T3756] siw: device registration error -23 [ 1306.309056][ T2097] usb usb42-port1: unable to enumerate USB device [ 1306.360353][ T3755] 9pnet_fd: Insufficient options for proto=fd [ 1306.363082][ T3755] 9pnet_fd: Insufficient options for proto=fd [ 1306.986090][ T3767] No control pipe specified [ 1307.458154][ T3794] Invalid ELF header magic: != ELF [ 1307.750610][ T3804] hub 9-0:1.0: USB hub found [ 1307.752910][ T3804] hub 9-0:1.0: 1 port detected [ 1308.253306][ T3811] No control pipe specified [ 1308.406505][ T3818] cgroup: Unknown subsys name 'io' [ 1308.523445][ T3823] cgroup: Unknown subsys name 'io' [ 1308.837927][ T3827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7599'. [ 1308.908171][ T3832] overlayfs: missing 'lowerdir' [ 1309.035444][ T3838] netlink: zone id is out of range [ 1309.037232][ T3838] netlink: zone id is out of range [ 1309.039254][ T3838] netlink: zone id is out of range [ 1309.041432][ T3838] netlink: zone id is out of range [ 1309.043168][ T3838] netlink: zone id is out of range [ 1309.044860][ T3838] netlink: zone id is out of range [ 1309.046777][ T3838] netlink: zone id is out of range [ 1309.049086][ T3838] netlink: zone id is out of range [ 1309.052084][ T3838] netlink: zone id is out of range [ 1309.053810][ T3838] netlink: zone id is out of range [ 1309.351810][ T3845] autofs: Bad value for 'fd' [ 1309.980675][ T3862] autofs: Unknown parameter '0x0000000000000000' [ 1310.107490][ T3868] cgroup: Unknown subsys name 'io' [ 1310.442550][ T3876] autofs: Bad value for 'fd' [ 1310.443351][ T3873] unknown channel width for channel at 909000KHz? [ 1310.446596][ T3873] unknown channel width for channel at 909000KHz? [ 1310.449040][ T3873] unknown channel width for channel at 909000KHz? [ 1311.053876][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7617'. [ 1311.917268][ T3903] overlay: ./file0 is not a directory [ 1311.971595][ T3908] autofs: Bad value for 'fd' [ 1312.205963][ T3918] fuse: Bad value for 'fd' [ 1312.728149][ T3928] sp0: Synchronizing with TNC [ 1313.490994][ T3944] 8021q: VLANs not supported on vxcan1 [ 1313.970546][ T5900] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 1313.974086][ T5900] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5900, name: syz-executor [ 1313.980418][ T5900] preempt_count: 1, expected: 0 [ 1313.982476][ T5900] RCU nest depth: 0, expected: 0 [ 1313.984588][ T5900] no locks held by syz-executor/5900. [ 1313.987702][ T5900] Preemption disabled at: [ 1313.987713][ T5900] [] schedule+0xe0/0x3a0 [ 1313.992213][ T5900] CPU: 2 UID: 0 PID: 5900 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1313.992237][ T5900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1313.992250][ T5900] Call Trace: [ 1313.992257][ T5900] [ 1313.992265][ T5900] dump_stack_lvl+0x16c/0x1f0 [ 1313.992297][ T5900] __might_resched+0x3c0/0x5e0 [ 1313.992326][ T5900] ? __pfx___might_resched+0x10/0x10 [ 1313.992343][ T5900] ? pcpu_block_update+0x562/0x660 [ 1313.992373][ T5900] ? find_held_lock+0x2b/0x80 [ 1313.992395][ T5900] vfree+0x75/0xb50 [ 1313.992426][ T5900] ? rcu_is_watching+0x12/0xc0 [ 1313.992444][ T5900] ? kfree+0x24f/0x4d0 [ 1313.992462][ T5900] ? free_percpu+0x6db/0x13c0 [ 1313.992487][ T5900] futex_hash_free+0x98/0xc0 [ 1313.992510][ T5900] __mmdrop+0x33f/0x580 [ 1313.992530][ T5900] ? rcu_is_watching+0x12/0xc0 [ 1313.992552][ T5900] finish_task_switch.isra.0+0x7a4/0xc10 [ 1313.992572][ T5900] ? __switch_to+0x7a5/0x11a0 [ 1313.992598][ T5900] __schedule+0x1198/0x5de0 [ 1313.992621][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1313.992647][ T5900] ? debug_object_activate+0x2ec/0x4c0 [ 1313.992685][ T5900] ? __pfx___schedule+0x10/0x10 [ 1313.992715][ T5900] ? find_held_lock+0x2b/0x80 [ 1313.992735][ T5900] ? schedule+0x2d7/0x3a0 [ 1313.992762][ T5900] schedule+0xe7/0x3a0 [ 1313.992787][ T5900] schedule_hrtimeout_range_clock+0x217/0x320 [ 1313.992811][ T5900] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 1313.992840][ T5900] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1313.992879][ T5900] poll_schedule_timeout.constprop.0+0xc4/0x1c0 [ 1313.992903][ T5900] do_select+0x1339/0x17e0 [ 1313.992943][ T5900] ? __pfx_do_select+0x10/0x10 [ 1313.992972][ T5900] ? __pfx_pollwake+0x10/0x10 [ 1313.992993][ T5900] ? __pfx_pollwake+0x10/0x10 [ 1313.993020][ T5900] ? __pfx_pollwake+0x10/0x10 [ 1313.993047][ T5900] ? __pfx_pollwake+0x10/0x10 [ 1313.993068][ T5900] ? __pfx_pollwake+0x10/0x10 [ 1313.993089][ T5900] ? __pfx_pollwake+0x10/0x10 [ 1313.993110][ T5900] ? __pfx_pollwake+0x10/0x10 [ 1313.993131][ T5900] ? __pfx_pollwake+0x10/0x10 [ 1313.993152][ T5900] ? __pfx_pollwake+0x10/0x10 [ 1313.993179][ T5900] ? find_held_lock+0x2b/0x80 [ 1313.993198][ T5900] ? compat_core_sys_select+0x1dd/0x880 [ 1313.993222][ T5900] ? compat_core_sys_select+0x685/0x880 [ 1313.993240][ T5900] compat_core_sys_select+0x685/0x880 [ 1313.993266][ T5900] ? __pfx_compat_core_sys_select+0x10/0x10 [ 1313.993319][ T5900] ? set_compat_user_sigmask+0x213/0x2a0 [ 1313.993341][ T5900] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1313.993368][ T5900] __ia32_compat_sys_pselect6_time32+0x2d1/0x390 [ 1313.993394][ T5900] ? __pfx___ia32_compat_sys_pselect6_time32+0x10/0x10 [ 1313.993421][ T5900] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 1313.993450][ T5900] ? rcu_is_watching+0x12/0xc0 [ 1313.993472][ T5900] __do_fast_syscall_32+0x7c/0x3a0 [ 1313.993503][ T5900] do_fast_syscall_32+0x32/0x80 [ 1313.993531][ T5900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1313.993555][ T5900] RIP: 0023:0xf704e579 [ 1313.993570][ T5900] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1313.993588][ T5900] RSP: 002b:00000000ffe23ad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1313.993607][ T5900] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 00000000ffe23ce4 [ 1313.993618][ T5900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffe23b00 [ 1313.993629][ T5900] RBP: 00000000ffe23b14 R08: 0000000000000000 R09: 0000000000000000 [ 1313.993640][ T5900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1313.993651][ T5900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1313.993676][ T5900] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1314.571094][ T9877] smc: removing ib device syz1 [ 1314.648705][ T9875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.792066][ T9875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.904888][ T9875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.041257][ T9875] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.211735][ T9875] erspan0: left allmulticast mode [ 1315.213428][ T9875] erspan0: left promiscuous mode [ 1315.219542][ T9875] bridge0: port 3(erspan0) entered disabled state [ 1315.226217][ T9875] bridge_slave_1: left allmulticast mode [ 1315.228612][ T9875] bridge_slave_1: left promiscuous mode [ 1315.231100][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.253974][ T9875] bridge_slave_0: left allmulticast mode [ 1315.255835][ T9875] bridge_slave_0: left promiscuous mode [ 1315.257790][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.662139][ T9875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.666791][ T9875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1315.671491][ T9875] bond0 (unregistering): Released all slaves [ 1315.747403][ T9875] tipc: Left network mode [ 1316.035416][ T9875] hsr_slave_0: left promiscuous mode [ 1316.037500][ T9875] hsr_slave_1: left promiscuous mode [ 1316.039487][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1316.041834][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.053842][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.091995][ T9875] veth1_macvtap: left promiscuous mode [ 1316.094339][ T9875] veth0_macvtap: left promiscuous mode [ 1316.096785][ T9875] veth1_vlan: left promiscuous mode [ 1316.099038][ T9875] veth0_vlan: left promiscuous mode [ 1316.997973][ T9875] team0 (unregistering): Port device team_slave_1 removed [ 1317.131169][ T9875] team0 (unregistering): Port device team_slave_0 removed [ 1318.238917][ T9875] IPVS: stop unused estimator thread 0... [ 1318.313193][ T9875] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.373252][ T9875] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.422333][ T9875] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.505241][ T9875] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.619137][ T9875] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.622739][ T9875] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.626705][ T9875] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1318.701685][ T9875] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.705773][ T9875] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.709839][ T9875] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1318.783510][ T9875] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.787604][ T9875] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.791406][ T9875] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1318.867392][ T9875] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.871479][ T9875] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.875902][ T9875] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1319.235320][ T9875]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1319.238937][ T9875]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1319.241960][ T9875]  (unregistering): Released all slaves [ 1319.355406][ T9875] bond1 (unregistering): Released all slaves [ 1319.473918][ T9875] bond2 (unregistering): Released all slaves [ 1319.581397][ T9875] bond3 (unregistering): (slave vlan3): Releasing active interface [ 1319.585489][ T9875] bond3 (unregistering): Released all slaves [ 1319.909219][ T9875] team0: Port device bond0 removed [ 1319.912434][ T9875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1319.916408][ T9875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1319.920097][ T9875] bond0 (unregistering): Released all slaves [ 1319.926125][ T9875] bond1 (unregistering): Released all slaves [ 1320.029055][ T9875] bond2 (unregistering): (slave vlan2): Releasing active interface [ 1320.032708][ T9875] veth1: left promiscuous mode [ 1320.035517][ T9875] bond2 (unregistering): Released all slaves [ 1320.132291][ T9875] bond3 (unregistering): Released all slaves [ 1320.241034][ T9875] : left promiscuous mode [ 1320.343351][ T9875] tipc: Left network mode [ 1321.022538][ T9875] hsr_slave_0: left promiscuous mode [ 1321.025211][ T9875] hsr_slave_1: left promiscuous mode [ 1321.027261][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1321.029834][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.032494][ T9875] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1321.037277][ T9875] hsr_slave_0: left promiscuous mode [ 1321.039426][ T9875] hsr_slave_1: left promiscuous mode [ 1321.063117][ T9875] veth1_macvtap: left promiscuous mode [ 1321.065476][ T9875] veth0_macvtap: left promiscuous mode [ 1321.134494][ T9875] pimreg (unregistering): left allmulticast mode [ 1322.605776][ T9851] smc: removing ib device sz1 [ 1322.613885][ T9875] pimreg (unregistering): left allmulticast mode [ 1322.624815][ T9875] pim6reg (unregistering): left allmulticast mode [ 1323.421496][ T9875] team0 (unregistering): Port device team_slave_1 removed [ 1323.528938][ T9875] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 08:05:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000002c4e07d RBX=0000000000000000 RCX=ffffffff8b913bf9 RDX=0000000000000000 RSI=ffffffff8de4eb79 RDI=ffffffff8c163180 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90aba190 R15=0000000000000000 RIP=ffffffff8b91275f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004c5e9000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88802b23a440 RCX=0000000000000000 RDX=1ffff110056475e9 RSI=ffffffff8de296cd RDI=ffff88802b23af48 RBP=0000000000000000 RSP=ffffc90003a17600 R8 =20fd2086fc07d626 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=fffffbfff1beb5cd R13=ffffffff8df5ae68 R14=0000000000000001 R15=ffffffff93d63a50 RIP=ffffffff81928cc3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000100 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676b36b83ae3f5e3 8da349d2c26772ac ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40f9d586651dbebc 3a2186ea6a28030e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c2ddd4270dbaaee ba7bd0dc77cfa0bf ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ca79003fe0200f9d 50033865afea1f33 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001d00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ca0475e0001d61a 0400000098000003 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000024aa1ca2baca 1ca2cc9b00001c85 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ca13f8f6b000003 a8000000b7000003 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000038c000000 1ca2c7ed08000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5381b6593f8bf80c 53a8da3ccf0b02da ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e0d7d3cde875bc8 0e3e811b71a6e7f6 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000070 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85619cf5 RDI=ffffffff9b0ff700 RBP=ffffffff9b0ff6c0 RSP=ffffc90002fd6d58 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000070 R14=ffffffff9b0ff6c0 R15=ffffffff85619c90 RIP=ffffffff85619d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057166000 CR3=0000000028689000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73c4ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=000000000004d17a RCX=ffffffff8205ac8d RDX=ffff888023464880 RSI=ffffffff8205ac9b RDI=0000000000000006 RBP=000000000004d17a RSP=ffffc90002e07560 R8 =0000000000000006 R9 =000000000007ffdc R10=000000000004d17a R11=0000000000000000 R12=1ffff920005c0eac R13=0000000001345e80 R14=00000000f6cca000 R15=0000000000000001 RIP=ffffffff8205acaa RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ff9ebe4c CR3=000000006fc0a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 048809c559d78d4c 3d45d8d023a9bfa4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ffff72a0173bad9 cb4029c2c34403a2 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bb14f5552f58e480 be621d4be8fc4a81 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a33d0c5fc9cb84ef c183bedde5a92220 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001d40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001c11ca2d3fb b60000035e000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ca2cdc300006420 1ca528250008dfaa ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00003331dc000000 2f000003a2000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f0000003de000000 1ca4b74255000003 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676b36b83ae3f5e3 8da349d2c26772ac ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40f9d586651dbebc 3a2186ea6a28030e ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000