last executing test programs: 31.525299335s ago: executing program 1 (id=471): epoll_create(0xd) timerfd_create(0x0, 0x80800) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x400000000010, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb, 0xffffffffffffffff, 0x1}, 0x0, &(0x7f0000000280)={0x3ff, 0x252d, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) 30.527543451s ago: executing program 1 (id=475): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x36, 0x1, {0xf, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) 30.437986907s ago: executing program 4 (id=476): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000040), &(0x7f0000048000), 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80000}, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) preadv(r2, &(0x7f0000000000), 0x0, 0x33, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08"], 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r9, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) 30.062845928s ago: executing program 1 (id=478): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = memfd_secret(0x0) fcntl$F_GET_RW_HINT(r2, 0xc, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d074000010203010902"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x401c1c5) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="eb", 0x34000, 0x4008004, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 28.107534045s ago: executing program 3 (id=484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 27.449583463s ago: executing program 3 (id=487): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000480)={0x0, 0x12, 0x4, "e1255b96"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x18, 0x4, "e8ad9f53"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 26.492092844s ago: executing program 1 (id=492): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)={0x448, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x42c, 0x11d, 0x0, 0x1, [{0x2d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x2}, {0x5}, {0x2, 0x1}, {0x5, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x0, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x5}, {0x1, 0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0xa}, {0x7, 0x7}, {0x7, 0x2}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {0x1, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x3, 0x7}, {0x4, 0x1}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x7}, {0x4, 0x8}, {0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x5}, {0x3, 0x6}, {0x2, 0x8}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x2}, {0x5, 0x8}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x5, 0x6}, {}, {0x2, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x3}, {0x6, 0x9}, {0x5}, {0x0, 0x5}, {0x2}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x4, 0x4}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x5}, {0x2, 0x5}, {0x7, 0x9}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x66}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x110, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x7, 0x3}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x2}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x4}, {0x4, 0x3}, {0x5, 0x2}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x6c, 0x18, 0x6c, 0x6, 0xc, 0x16, 0x5, 0x36]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}, {0x4}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x1}, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 26.351314768s ago: executing program 1 (id=494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x20}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix_mp={0x3, 0x6, 0x0, 0x7, 0x3, [{0xd, 0x2}, {0xfffffffd}, {0xffffffff, 0x7}, {0x7fffffff, 0x1aa}, {0x3, 0x8}, {0x6, 0x7ffe}, {0x9e1, 0xff}, {0x5}], 0x7, 0x80, 0x6, 0x1, 0x7}}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010000000000402f17370000000001000109022400010000a0000904000004030002000921000002012203000905810300"], 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280)=0x38, 0x0) sendmmsg$alg(r10, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000000040)) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000200)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="40300500"], 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 25.942476043s ago: executing program 4 (id=495): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbf, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x6e, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x5, 0x6, "78960767"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "5c80a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x7, 0x6, "7f36c525"}]}]}}, "c156bbb895"}}}}}, 0x0) 25.681257644s ago: executing program 4 (id=497): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207030170a938c14443743e8a2ec1218762d9"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 25.397903149s ago: executing program 4 (id=498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 25.12865933s ago: executing program 3 (id=501): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x36, 0x1, {0xf, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) 24.863816521s ago: executing program 4 (id=502): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = memfd_secret(0x0) fcntl$F_GET_RW_HINT(r2, 0xc, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d074000010203010902"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x401c1c5) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="eb", 0x34000, 0x4008004, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 24.82861032s ago: executing program 3 (id=503): syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 23.983928487s ago: executing program 0 (id=506): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x3) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 23.75782266s ago: executing program 3 (id=507): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbf, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x70, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x5, 0x8, "789607671442"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "5c80a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x7, 0x6, "7f36c525"}]}]}}, "c156bbb895"}}}}}, 0x0) 23.531827647s ago: executing program 3 (id=508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000040), &(0x7f0000048000), 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80000}, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) preadv(r2, &(0x7f0000000000), 0x0, 0x33, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08"], 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r9, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) 23.531092053s ago: executing program 1 (id=509): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000200)={0x0, 0x0, 0x7}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 23.099621455s ago: executing program 2 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)={0x4fc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4e0, 0x11d, 0x0, 0x1, [{0x2d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x2}, {0x5}, {0x2, 0x1}, {0x5, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x0, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x5}, {0x1, 0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0xa}, {0x7, 0x7}, {0x7, 0x2}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {0x1, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x3, 0x7}, {0x4, 0x1}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x7}, {0x4, 0x8}, {0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x5}, {0x3, 0x6}, {0x2, 0x8}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x2}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x5, 0x6}, {}, {0x2, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x3}, {0x6, 0x9}, {0x5}, {0x0, 0x5}, {0x2}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x4, 0x4}, {0x1, 0x2}, {0x6, 0xa}, {0x2, 0x5}, {0x7, 0x9}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x66}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x7, 0x3}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x2}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x4}, {0x4, 0x3}, {0x5, 0x2}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x2, 0x6c, 0x18, 0x6c, 0x60, 0x6, 0xc, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x9}, {0x5, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0x5}, {0x2, 0x1}, {0x3}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x24, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0x3d, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.975253943s ago: executing program 2 (id=511): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1911400001080100440012800c0001006d6163766c616e0034000280060002000000000008000300000000fc0800070087a30000080001000000000006000200000000000800010008"], 0x6c}}, 0x0) 22.863877855s ago: executing program 0 (id=512): syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 22.798932021s ago: executing program 2 (id=513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 22.721384167s ago: executing program 0 (id=514): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x36, 0x1, {0xf, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) 22.385024071s ago: executing program 0 (id=515): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) shutdown(r0, 0x1) 22.283655045s ago: executing program 2 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)={0x448, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x42c, 0x11d, 0x0, 0x1, [{0x2d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x2}, {0x5}, {0x2, 0x1}, {0x5, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x0, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x5}, {0x1, 0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0xa}, {0x7, 0x7}, {0x7, 0x2}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {0x1, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x3, 0x7}, {0x4, 0x1}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x7}, {0x4, 0x8}, {0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x5}, {0x3, 0x6}, {0x2, 0x8}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x2}, {0x5, 0x8}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x5, 0x6}, {}, {0x2, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x3}, {0x6, 0x9}, {0x5}, {0x0, 0x5}, {0x2}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x4, 0x4}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x5}, {0x2, 0x5}, {0x7, 0x9}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x66}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x110, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x7, 0x3}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x2}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x4}, {0x4, 0x3}, {0x5, 0x2}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x2, 0x6c, 0x18, 0x6c, 0x6, 0xc, 0x16, 0x5, 0x36]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}, {0x4}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x1}, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.129257889s ago: executing program 0 (id=517): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r4, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x728, r4, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x70c, 0x11d, 0x0, 0x1, [{0x2d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x2}, {0x5}, {0x2, 0x1}, {0x5, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x0, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x5}, {0x1, 0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0xa}, {0x7, 0x2}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {0x1, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x3, 0x7}, {0x4, 0x1}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x7}, {0x4, 0x8}, {0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x5}, {0x3, 0x6}, {0x2, 0x8}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x2}, {0x5, 0x8}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x5, 0x6}, {}, {0x2, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x3}, {0x6, 0x9}, {0x5}, {0x0, 0x5}, {0x2}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x4, 0x4}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x5}, {0x2, 0x5}, {0x7, 0x9}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x66}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x398, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x384, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x7, 0x3}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x2}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x4, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x2, 0x6c, 0x18, 0x6c, 0x60, 0x6, 0xc, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x9}, {0x5, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0x5}, {0x2, 0x1}, {0x3}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x24, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x5}, {0x6, 0x5}, {}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0xdf, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x48, 0x36, 0x18, 0x4, 0x5, 0x16, 0x16, 0x6c, 0x6, 0x1b, 0x6, 0x0, 0x48, 0x6, 0x4, 0x3, 0x16, 0x4, 0x4d, 0x48, 0x12, 0x6, 0x6, 0x60, 0x6c, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0x100, 0x100, 0x9, 0xf, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xb, 0x48, 0x1b, 0x0, 0xc, 0x60, 0x5, 0xb, 0xe, 0x53, 0x24, 0x50, 0x1b, 0x6, 0x42acac960eb9f4a5, 0x48, 0x6, 0xb, 0xa, 0x1b, 0x6, 0x2, 0x16, 0x48, 0x4, 0x30, 0x36, 0x6]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x5}, {0x2, 0x3}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x7, 0x5}, {0x5, 0x1}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x2}, {0x0, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x4}]}]}, 0x728}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 21.614104491s ago: executing program 2 (id=518): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbf, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x70, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x5, 0x8, "789607671442"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "5c80a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x7, 0x6, "7f36c525"}]}]}}, "c156bbb895"}}}}}, 0x0) 21.172259297s ago: executing program 0 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_coalesce={0xe, 0x464, 0x2, 0x1, 0x888, 0x1, 0x7, 0x5, 0x4, 0x1, 0x7, 0x9cdd, 0x2, 0x9, 0x48000, 0xee5, 0xfff, 0x1, 0x5, 0x3, 0x200, 0x8, 0x9}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 12.950526194s ago: executing program 4 (id=520): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400008110004b04000050297fb1000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900880000000500010001000000"], 0x44}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 0s ago: executing program 2 (id=521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x20}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix_mp={0x3, 0x6, 0x0, 0x7, 0x3, [{0xd, 0x2}, {0xfffffffd}, {0xffffffff, 0x7}, {0x7fffffff, 0x1aa}, {0x3, 0x8}, {0x6, 0x7ffe}, {0x9e1, 0xff}, {0x5}], 0x7, 0x80, 0x6, 0x1, 0x7}}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010000000000402f17370000000001000109022400010000a0000904000004030002000921000002012203000905810300"], 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280)=0x38, 0x0) sendmmsg$alg(r10, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000000040)) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000200)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="40300500"], 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 65.933214][ T5830] cgroup: Unknown subsys name 'net' [ 66.067210][ T5830] cgroup: Unknown subsys name 'cpuset' [ 66.075801][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.447837][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.889512][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.909665][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.924098][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.934260][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.941798][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.964015][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.974153][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.995497][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.997728][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.008114][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.013153][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.016554][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.032099][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.032227][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.039746][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.047803][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.060506][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.061462][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.067853][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.075845][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.081843][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.100371][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.100734][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.114905][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.116363][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.769880][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 70.840908][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 70.902375][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 70.970021][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 71.118291][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.125903][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.133404][ T5861] bridge_slave_0: entered allmulticast mode [ 71.140608][ T5861] bridge_slave_0: entered promiscuous mode [ 71.152475][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 71.180301][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.187485][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.194650][ T5864] bridge_slave_0: entered allmulticast mode [ 71.201549][ T5864] bridge_slave_0: entered promiscuous mode [ 71.208637][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.215800][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.222874][ T5861] bridge_slave_1: entered allmulticast mode [ 71.230350][ T5861] bridge_slave_1: entered promiscuous mode [ 71.257384][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.264674][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.271767][ T5864] bridge_slave_1: entered allmulticast mode [ 71.279220][ T5864] bridge_slave_1: entered promiscuous mode [ 71.290320][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.297528][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.415120][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.428107][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.438103][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.447139][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.455307][ T5860] bridge_slave_0: entered allmulticast mode [ 71.462163][ T5860] bridge_slave_0: entered promiscuous mode [ 71.470645][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.478563][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.487335][ T5860] bridge_slave_1: entered allmulticast mode [ 71.494797][ T5860] bridge_slave_1: entered promiscuous mode [ 71.507418][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.514822][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.521919][ T5862] bridge_slave_0: entered allmulticast mode [ 71.529039][ T5862] bridge_slave_0: entered promiscuous mode [ 71.538419][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.563047][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.600722][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.608294][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.615694][ T5862] bridge_slave_1: entered allmulticast mode [ 71.622558][ T5862] bridge_slave_1: entered promiscuous mode [ 71.658157][ T5861] team0: Port device team_slave_0 added [ 71.715193][ T5864] team0: Port device team_slave_0 added [ 71.722163][ T5861] team0: Port device team_slave_1 added [ 71.731535][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.741304][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.750746][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.758244][ T5863] bridge_slave_0: entered allmulticast mode [ 71.766385][ T5863] bridge_slave_0: entered promiscuous mode [ 71.789403][ T5864] team0: Port device team_slave_1 added [ 71.821537][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.832216][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.839780][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.847731][ T5863] bridge_slave_1: entered allmulticast mode [ 71.854766][ T5863] bridge_slave_1: entered promiscuous mode [ 71.864128][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.885361][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.892315][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.918285][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.994564][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.017709][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.025276][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.051456][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.063218][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.072127][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.098420][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.112238][ T5860] team0: Port device team_slave_0 added [ 72.120804][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.133579][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.161312][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.168622][ T5850] Bluetooth: hci4: command tx timeout [ 72.168801][ T5850] Bluetooth: hci3: command tx timeout [ 72.168927][ T5850] Bluetooth: hci1: command tx timeout [ 72.174385][ T51] Bluetooth: hci2: command tx timeout [ 72.174525][ T51] Bluetooth: hci0: command tx timeout [ 72.196243][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.196284][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.235714][ T5860] team0: Port device team_slave_1 added [ 72.263186][ T5862] team0: Port device team_slave_0 added [ 72.271986][ T5862] team0: Port device team_slave_1 added [ 72.343489][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.351134][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.377184][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.390813][ T5863] team0: Port device team_slave_0 added [ 72.411003][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.417985][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.444000][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.456955][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.464098][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.490598][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.513522][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.520591][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.546770][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.559446][ T5863] team0: Port device team_slave_1 added [ 72.617881][ T5864] hsr_slave_0: entered promiscuous mode [ 72.624438][ T5864] hsr_slave_1: entered promiscuous mode [ 72.637496][ T5861] hsr_slave_0: entered promiscuous mode [ 72.643627][ T5861] hsr_slave_1: entered promiscuous mode [ 72.649724][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.657628][ T5861] Cannot create hsr debugfs directory [ 72.692271][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.699338][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.725440][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.797126][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.804664][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.830601][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.874472][ T5860] hsr_slave_0: entered promiscuous mode [ 72.880993][ T5860] hsr_slave_1: entered promiscuous mode [ 72.887560][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.895513][ T5860] Cannot create hsr debugfs directory [ 72.924151][ T5862] hsr_slave_0: entered promiscuous mode [ 72.930652][ T5862] hsr_slave_1: entered promiscuous mode [ 72.936819][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.944466][ T5862] Cannot create hsr debugfs directory [ 73.150927][ T5863] hsr_slave_0: entered promiscuous mode [ 73.157508][ T5863] hsr_slave_1: entered promiscuous mode [ 73.163472][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.171167][ T5863] Cannot create hsr debugfs directory [ 73.512909][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.524364][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.553823][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.566772][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.636377][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.665079][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.690855][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.707416][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.752394][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.777293][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.800544][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.818627][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.878828][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.909098][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.932064][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.944584][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.995227][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.046460][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.073439][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.100845][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.123523][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.131848][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.177401][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.184648][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.196188][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.203259][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.219304][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.244247][ T5852] Bluetooth: hci1: command tx timeout [ 74.244430][ T5845] Bluetooth: hci2: command tx timeout [ 74.249648][ T5852] Bluetooth: hci3: command tx timeout [ 74.255526][ T5850] Bluetooth: hci4: command tx timeout [ 74.260889][ T51] Bluetooth: hci0: command tx timeout [ 74.317776][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.368958][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.376112][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.389970][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.419899][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.449892][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.457044][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.472098][ T5864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.485481][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.547757][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.581524][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.588685][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.615328][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.622414][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.633529][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.662090][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.669210][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.704975][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.712059][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.742431][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.797134][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.842302][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.871330][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.900277][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.907373][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.935736][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.942825][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.011399][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.038023][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.057818][ T5864] veth0_vlan: entered promiscuous mode [ 75.092826][ T5861] veth0_vlan: entered promiscuous mode [ 75.103550][ T5864] veth1_vlan: entered promiscuous mode [ 75.146630][ T5861] veth1_vlan: entered promiscuous mode [ 75.224158][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.236214][ T5864] veth0_macvtap: entered promiscuous mode [ 75.249677][ T5864] veth1_macvtap: entered promiscuous mode [ 75.258281][ T5862] veth0_vlan: entered promiscuous mode [ 75.269055][ T5860] veth0_vlan: entered promiscuous mode [ 75.292021][ T5862] veth1_vlan: entered promiscuous mode [ 75.318790][ T5860] veth1_vlan: entered promiscuous mode [ 75.335987][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.348466][ T5861] veth0_macvtap: entered promiscuous mode [ 75.368297][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.384917][ T5861] veth1_macvtap: entered promiscuous mode [ 75.407732][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.417712][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.427087][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.435788][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.470316][ T5860] veth0_macvtap: entered promiscuous mode [ 75.500115][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.513510][ T5860] veth1_macvtap: entered promiscuous mode [ 75.526568][ T5863] veth0_vlan: entered promiscuous mode [ 75.565970][ T5862] veth0_macvtap: entered promiscuous mode [ 75.588920][ T5862] veth1_macvtap: entered promiscuous mode [ 75.596906][ T5863] veth1_vlan: entered promiscuous mode [ 75.610999][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.624667][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.660774][ T5861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.669876][ T5861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.678966][ T5861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.689084][ T5861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.705204][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.713122][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.725481][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.737570][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.746987][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.770761][ T5860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.779630][ T5860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.789371][ T5860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.798323][ T5860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.820546][ T5862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.829816][ T5862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.838707][ T5862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.847965][ T5862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.902243][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.911167][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.971718][ T5863] veth0_macvtap: entered promiscuous mode [ 76.018375][ T5863] veth1_macvtap: entered promiscuous mode [ 76.045171][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.068451][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.107483][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.149963][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.202279][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.221406][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.229217][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.254159][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.263103][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.272426][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.281509][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.282633][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.332151][ T51] Bluetooth: hci0: command tx timeout [ 76.332167][ T5850] Bluetooth: hci3: command tx timeout [ 76.337958][ T51] Bluetooth: hci4: command tx timeout [ 76.337990][ T51] Bluetooth: hci2: command tx timeout [ 76.338018][ T51] Bluetooth: hci1: command tx timeout [ 76.381864][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.399762][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.422797][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.441746][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.469843][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.489084][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.540566][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.573369][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.671012][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.688223][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.815743][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.840307][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.644852][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.820042][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.847923][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.879056][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 77.905180][ T9] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 77.928994][ T9] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 77.949726][ T9] usb 2-1: Product: syz [ 78.003126][ T9] usb 2-1: config 0 descriptor?? [ 78.406613][ T5850] Bluetooth: hci1: command tx timeout [ 78.406627][ T5845] Bluetooth: hci2: command tx timeout [ 78.406658][ T5845] Bluetooth: hci4: command tx timeout [ 78.412034][ T5850] Bluetooth: hci0: command tx timeout [ 78.418002][ T5845] Bluetooth: hci3: command tx timeout [ 78.840687][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 78.865031][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 78.922446][ T9] usb 2-1: USB disconnect, device number 2 [ 79.260883][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 80.257730][ T6033] netlink: 'syz.4.38': attribute type 39 has an invalid length. [ 80.756505][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 80.807201][ T6052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.44'. [ 81.210392][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.377849][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.420111][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.436538][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 81.465089][ T9] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 81.484188][ T9] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 81.516571][ T9] usb 3-1: Product: syz [ 81.537015][ T9] usb 3-1: config 0 descriptor?? [ 81.659493][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.51'. [ 81.730672][ T6071] netlink: 'syz.0.52': attribute type 39 has an invalid length. [ 82.124393][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 82.131769][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 82.213090][ T9] usb 3-1: USB disconnect, device number 2 [ 82.318791][ T6084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.58'. [ 82.350084][ T6080] tipc: Started in network mode [ 82.356697][ T6080] tipc: Node identity 5633caa9ec84, cluster identity 4711 [ 82.367718][ T6080] tipc: Enabled bearer , priority 0 [ 82.379342][ T6080] syzkaller0: entered promiscuous mode [ 82.391230][ T6080] syzkaller0: entered allmulticast mode [ 82.438935][ T6080] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 82.538835][ T6080] tipc: Resetting bearer [ 82.574597][ T6079] tipc: Resetting bearer [ 82.613418][ T6079] tipc: Disabling bearer [ 83.175258][ T6108] netlink: 'syz.1.68': attribute type 39 has an invalid length. [ 83.229382][ T6112] netlink: 32 bytes leftover after parsing attributes in process `syz.2.70'. [ 83.798271][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 84.074418][ T48] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.258879][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.285788][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.317798][ T6140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.81'. [ 84.334064][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 84.382215][ T48] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 84.401068][ T48] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 84.432310][ T48] usb 3-1: Product: syz [ 84.447595][ T6144] netlink: 'syz.0.83': attribute type 39 has an invalid length. [ 84.468436][ T48] usb 3-1: config 0 descriptor?? [ 84.829745][ T6156] tipc: Started in network mode [ 84.845662][ T6156] tipc: Node identity 526ae12cc8d, cluster identity 4711 [ 84.868727][ T6156] tipc: Enabled bearer , priority 0 [ 84.971517][ T6152] tipc: Disabling bearer [ 85.164433][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 85.170581][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 85.216681][ T48] usb 3-1: USB disconnect, device number 3 [ 85.327582][ T6171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.94'. [ 85.658964][ T6182] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.279413][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'. [ 86.289543][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'. [ 86.342257][ T6201] dummy0: entered promiscuous mode [ 86.386145][ T6201] bond0: entered promiscuous mode [ 86.417111][ T6201] bond_slave_0: entered promiscuous mode [ 86.431881][ T6201] bond_slave_1: entered promiscuous mode [ 86.657572][ T980] cfg80211: failed to load regulatory.db [ 86.800114][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 86.838415][ T6204] "syz.2.107" (6204) uses obsolete ecb(arc4) skcipher [ 87.064316][ T48] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.179974][ T6226] netlink: 'syz.2.115': attribute type 39 has an invalid length. [ 87.227902][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.264547][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.299372][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 87.336429][ T48] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 87.354408][ T48] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 87.373091][ T48] usb 1-1: Product: syz [ 87.382389][ T48] usb 1-1: config 0 descriptor?? [ 87.465239][ T6231] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 87.479319][ T6231] pim6reg0: linktype set to 768 [ 87.496436][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'. [ 87.508727][ T6233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.119'. [ 87.509801][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'. [ 87.525453][ T6233] geneve2: entered promiscuous mode [ 87.765039][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 88.034965][ T48] usbhid 1-1:0.0: can't add hid device: -71 [ 88.040984][ T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 88.122933][ T48] usb 1-1: USB disconnect, device number 2 [ 88.131357][ T6249] netlink: 76 bytes leftover after parsing attributes in process `syz.4.124'. [ 88.133468][ T6248] netlink: 'syz.2.125': attribute type 39 has an invalid length. [ 88.168232][ T6251] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.229218][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.438280][ T6259] tipc: Enabling of bearer rejected, failed to enable media [ 88.710254][ T6270] veth1_to_bond: entered allmulticast mode [ 89.311495][ T6290] tipc: Enabling of bearer rejected, failed to enable media [ 89.387306][ T6292] __nla_validate_parse: 3 callbacks suppressed [ 89.387321][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'. [ 89.407378][ T6297] netlink: 'syz.4.147': attribute type 39 has an invalid length. [ 89.419100][ T6295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.146'. [ 89.676072][ T5932] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.856427][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.909989][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.964589][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 90.032751][ T5932] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 90.084820][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 90.134821][ T5932] usb 4-1: Product: syz [ 90.146322][ T5932] usb 4-1: config 0 descriptor?? [ 90.288622][ T6323] netlink: 'syz.2.158': attribute type 39 has an invalid length. [ 90.339837][ T6325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.159'. [ 90.522139][ T6328] tipc: Enabling of bearer rejected, failed to enable media [ 90.716552][ T5932] usbhid 4-1:0.0: can't add hid device: -71 [ 90.722575][ T5932] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 90.780047][ T5932] usb 4-1: USB disconnect, device number 2 [ 91.400689][ T6352] netlink: 'syz.3.170': attribute type 39 has an invalid length. [ 91.477254][ T6356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.172'. [ 91.558787][ T6358] tipc: Enabling of bearer rejected, failed to enable media [ 91.831703][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 92.006168][ T6372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.179'. [ 92.135216][ T980] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.341780][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.362113][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.401985][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 92.456573][ T980] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 92.468150][ T980] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 92.488029][ T980] usb 2-1: Product: syz [ 92.495574][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.185'. [ 92.508965][ T980] usb 2-1: config 0 descriptor?? [ 92.860262][ T6393] syz.0.189 uses obsolete (PF_INET,SOCK_PACKET) [ 92.908610][ T6393] hsr0: entered allmulticast mode [ 92.920733][ T6393] hsr_slave_0: entered allmulticast mode [ 92.944771][ T6393] hsr_slave_1: entered allmulticast mode [ 93.122565][ T980] usbhid 2-1:0.0: can't add hid device: -71 [ 93.155108][ T980] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 93.218962][ T980] usb 2-1: USB disconnect, device number 3 [ 93.755214][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 93.798346][ T6420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.203'. [ 94.093470][ T6429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 94.354697][ T5932] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.530915][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.579817][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.620063][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 94.667698][ T5932] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 94.688623][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 94.717034][ T5932] usb 3-1: Product: syz [ 94.745284][ T5932] usb 3-1: config 0 descriptor?? [ 94.948655][ T6460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.352873][ T5932] usbhid 3-1:0.0: can't add hid device: -71 [ 95.377390][ T5932] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 95.432079][ T5932] usb 3-1: USB disconnect, device number 4 [ 95.539465][ T6477] syzkaller1: entered promiscuous mode [ 95.570095][ T6477] syzkaller1: entered allmulticast mode [ 95.758230][ T6486] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 95.880996][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.234'. [ 96.088726][ T6499] bond0: entered promiscuous mode [ 96.094725][ T6499] bond_slave_0: entered promiscuous mode [ 96.112432][ T6499] bond_slave_1: entered promiscuous mode [ 96.139760][ T6499] batadv0: entered promiscuous mode [ 96.155844][ T6499] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 96.193053][ T6499] Cannot create hsr debugfs directory [ 96.200902][ T6499] hsr1: entered allmulticast mode [ 96.212394][ T6499] bond0: entered allmulticast mode [ 96.219624][ T6499] bond_slave_0: entered allmulticast mode [ 96.227721][ T6499] bond_slave_1: entered allmulticast mode [ 96.233555][ T6499] batadv0: entered allmulticast mode [ 96.241079][ T6499] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 96.251330][ T6499] bond0: left promiscuous mode [ 96.256741][ T6499] bond_slave_0: left promiscuous mode [ 96.262341][ T6499] bond_slave_1: left promiscuous mode [ 96.269570][ T6499] batadv0: left promiscuous mode [ 96.451722][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.241'. [ 96.756527][ T48] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.916945][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.929086][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.939888][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 96.956994][ T48] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 96.966597][ T48] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 96.975638][ T48] usb 5-1: Product: syz [ 96.982819][ T48] usb 5-1: config 0 descriptor?? [ 97.720704][ T48] usbhid 5-1:0.0: can't add hid device: -71 [ 97.742413][ T48] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.803441][ T48] usb 5-1: USB disconnect, device number 2 [ 98.042309][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 98.075399][ T6530] netlink: 'syz.1.248': attribute type 2 has an invalid length. [ 98.111391][ T6528] netlink: 'syz.3.245': attribute type 1 has an invalid length. [ 98.166556][ T6530] k›*·]‘: entered promiscuous mode [ 98.227090][ T6530] veth0_to_team: entered promiscuous mode [ 98.239100][ T6530] veth0_to_team: entered allmulticast mode [ 98.547263][ T6543] tipc: Enabled bearer , priority 10 [ 98.876330][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.258'. [ 99.154790][ T5932] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.329145][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.360511][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.392648][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 99.423575][ T5932] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 99.433391][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 99.442840][ T5932] usb 4-1: Product: syz [ 99.481496][ T5932] usb 4-1: config 0 descriptor?? [ 99.645443][ T48] tipc: Node number set to 3132607145 [ 99.798055][ T6577] process 'syz.4.264' launched './file2' with NULL argv: empty string added [ 99.858915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 99.868671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.041438][ T5932] usbhid 4-1:0.0: can't add hid device: -71 [ 100.057463][ T5932] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 100.138091][ T48] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.300609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.312572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.327132][ T5932] usb 4-1: USB disconnect, device number 3 [ 100.560155][ T6588] fuse: Bad value for 'group_id' [ 100.560268][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 100.571767][ T6588] fuse: Bad value for 'group_id' [ 100.619332][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.630060][ T48] usb 5-1: config 0 has no interfaces? [ 100.645755][ T6589] netlink: 'syz.2.267': attribute type 10 has an invalid length. [ 100.646858][ T48] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 100.663612][ T6589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.267'. [ 100.689884][ T6589] batadv0: entered promiscuous mode [ 100.699991][ T6589] batadv0: entered allmulticast mode [ 100.716270][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.728939][ T6589] bridge0: port 3(batadv0) entered blocking state [ 100.737162][ T6589] bridge0: port 3(batadv0) entered disabled state [ 100.775220][ T6589] bridge0: port 3(batadv0) entered blocking state [ 100.781769][ T6589] bridge0: port 3(batadv0) entered forwarding state [ 100.783354][ T48] usb 5-1: Product: syz [ 100.808476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.828229][ T48] usb 5-1: Manufacturer: syz [ 100.832901][ T48] usb 5-1: SerialNumber: syz [ 101.114810][ T6596] fuse: Bad value for 'group_id' [ 101.119802][ T6596] fuse: Bad value for 'group_id' [ 101.195828][ T48] usb 5-1: config 0 descriptor?? [ 101.219476][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 101.229644][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 101.254171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.263139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.325488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.365800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.583302][ T6595] netlink: 'syz.3.268': attribute type 10 has an invalid length. [ 101.592072][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.268'. [ 101.602025][ T6595] batadv0: entered promiscuous mode [ 101.608740][ T6595] batadv0: entered allmulticast mode [ 101.615814][ T6595] bridge0: port 3(batadv0) entered blocking state [ 101.622416][ T6595] bridge0: port 3(batadv0) entered disabled state [ 101.633389][ T6595] bridge0: port 3(batadv0) entered blocking state [ 101.639986][ T6595] bridge0: port 3(batadv0) entered forwarding state [ 101.666672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 102.193072][ T1339] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 102.204707][ T1339] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 102.993194][ T48] usb 5-1: USB disconnect, device number 3 [ 103.549498][ T6614] fuse: Bad value for 'group_id' [ 103.572362][ T6614] fuse: Bad value for 'group_id' [ 104.112227][ T6632] fuse: Bad value for 'group_id' [ 104.118209][ T6632] fuse: Bad value for 'group_id' [ 104.137456][ T6632] Zero length message leads to an empty skb [ 105.239898][ T6640] syzkaller0: entered promiscuous mode [ 105.246663][ T6640] syzkaller0: entered allmulticast mode [ 105.390659][ T6643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'. [ 105.490091][ T6641] fuse: Bad value for 'group_id' [ 105.496673][ T6641] fuse: Bad value for 'group_id' [ 105.695011][ T5932] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.225932][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.251243][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.278138][ T6658] fuse: Bad value for 'group_id' [ 106.283241][ T6658] fuse: Bad value for 'group_id' [ 106.585055][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 106.614756][ T5932] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 106.626638][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 106.661862][ T5932] usb 1-1: Product: syz [ 106.715304][ T977] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.999856][ T5932] usb 1-1: config 0 descriptor?? [ 107.374700][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 107.533308][ T977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.546502][ T977] usb 5-1: config 0 has no interfaces? [ 107.565622][ T977] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 107.575056][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.583068][ T977] usb 5-1: Product: syz [ 107.618213][ T977] usb 5-1: Manufacturer: syz [ 107.638426][ T977] usb 5-1: SerialNumber: syz [ 107.650099][ T977] usb 5-1: config 0 descriptor?? [ 107.680067][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 107.688548][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 107.762026][ T5932] usb 1-1: USB disconnect, device number 3 [ 108.213376][ T6680] fuse: Bad value for 'group_id' [ 108.220071][ T6680] fuse: Bad value for 'group_id' [ 109.184298][ T5932] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.296119][ T980] usb 5-1: USB disconnect, device number 4 [ 109.407211][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 110.405291][ T980] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.675239][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 110.684994][ T980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 110.718006][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 110.765159][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.832214][ T980] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.105218][ T980] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.123288][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.737114][ T980] usb 5-1: GET_CAPABILITIES returned 0 [ 111.759790][ T980] usbtmc 5-1:16.0: can't read capabilities [ 112.119657][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 112.310726][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.352527][ T5932] usb 4-1: no configurations [ 112.386756][ T5932] usb 4-1: can't read configurations, error -22 [ 112.581256][ T6714] syzkaller0: entered promiscuous mode [ 112.604697][ T6714] syzkaller0: entered allmulticast mode [ 112.906014][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 112.945356][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 113.238805][ T6718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.529684][ T6728] fuse: Bad value for 'group_id' [ 113.535674][ T6728] fuse: Bad value for 'group_id' [ 113.614792][ T6736] fuse: Bad value for 'group_id' [ 113.619767][ T6736] fuse: Bad value for 'group_id' [ 113.947013][ T5932] usb 5-1: USB disconnect, device number 5 [ 113.958597][ T6726] bond1: (slave veth3): Enslaving as an active interface with an up link [ 114.080571][ T6722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.186277][ T6731] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 114.362874][ T6732] bond1: (slave veth3): Enslaving as an active interface with an up link [ 114.511055][ T6734] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 114.514633][ T5932] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 114.754694][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 114.799289][ T5932] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 114.831673][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.851290][ T5932] usb 5-1: config 0 descriptor?? [ 114.891571][ T5932] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 115.268303][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.457335][ T6763] syzkaller0: entered promiscuous mode [ 115.462820][ T6763] syzkaller0: entered allmulticast mode [ 115.529795][ T6761] fuse: Bad value for 'group_id' [ 115.536180][ T6761] fuse: Bad value for 'group_id' [ 115.665314][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 116.007345][ T5932] gspca_nw80x: reg_w err -71 [ 116.012064][ T5932] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 116.055415][ T5932] usb 5-1: USB disconnect, device number 6 [ 117.121288][ T977] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.328287][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 117.410919][ T977] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 117.700199][ T977] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 117.711245][ T977] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.741216][ T977] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.815342][ T977] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.370146][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.770973][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.779754][ T9] usb 3-1: no configurations [ 118.850401][ T9] usb 3-1: can't read configurations, error -22 [ 118.956601][ T977] usb 4-1: GET_CAPABILITIES returned 0 [ 118.962152][ T977] usbtmc 4-1:16.0: can't read capabilities [ 119.339904][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 119.349256][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 119.358521][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 119.940128][ T6805] CIFS: VFS: Malformed UNC in devname [ 120.012583][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.323'. [ 120.154510][ T6811] syzkaller0: entered promiscuous mode [ 120.160089][ T6811] syzkaller0: entered allmulticast mode [ 120.218894][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 120.305209][ T980] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.484738][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.502474][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.559317][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 120.727349][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 120.766244][ T6820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.785344][ T980] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 120.795427][ T980] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 120.807370][ T980] usb 2-1: Product: syz [ 120.827454][ T980] usb 2-1: config 0 descriptor?? [ 120.875093][ T5896] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.886623][ T6822] bond1: (slave veth3): Enslaving as an active interface with an up link [ 120.950539][ T6824] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 121.035350][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 121.334489][ T9] usb 4-1: USB disconnect, device number 6 [ 121.518627][ T980] usbhid 2-1:0.0: can't add hid device: -71 [ 121.526460][ T980] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 121.579532][ T980] usb 2-1: USB disconnect, device number 4 [ 122.801124][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 123.259050][ T6854] syzkaller0: entered promiscuous mode [ 123.279250][ T6854] syzkaller0: entered allmulticast mode [ 123.602197][ T5896] usb 5-1: unable to get BOS descriptor or descriptor too short [ 123.612407][ T5896] usb 5-1: no configurations [ 123.659585][ T5896] usb 5-1: can't read configurations, error -22 [ 124.010567][ T6867] CIFS: VFS: Malformed UNC in devname [ 124.666355][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.347'. [ 124.994640][ T5932] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.156799][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.174812][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.201213][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 125.265907][ T5932] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 125.282288][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 125.320676][ T5932] usb 4-1: Product: syz [ 125.371215][ T5932] usb 4-1: config 0 descriptor?? [ 125.876212][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 125.925505][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 126.201895][ T6894] syzkaller0: entered promiscuous mode [ 126.221763][ T6894] syzkaller0: entered allmulticast mode [ 126.231426][ T5932] usbhid 4-1:0.0: can't add hid device: -71 [ 126.275294][ T5932] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 126.313519][ T5932] usb 4-1: USB disconnect, device number 7 [ 127.408867][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 127.580395][ T6917] CIFS: VFS: Malformed UNC in devname [ 128.140156][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 128.209928][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 128.720537][ T6937] syzkaller0: entered promiscuous mode [ 128.740618][ T6937] syzkaller0: entered allmulticast mode [ 128.892511][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 128.988016][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 129.285583][ T5948] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.474939][ T5896] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.488606][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.519327][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.569213][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 129.735030][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 129.760227][ T5896] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.778184][ T5896] usb 5-1: config 0 has no interfaces? [ 129.845852][ T5896] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 129.857148][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.902798][ T5896] usb 5-1: Product: syz [ 129.912472][ T5896] usb 5-1: Manufacturer: syz [ 129.931545][ T5896] usb 5-1: SerialNumber: syz [ 129.975994][ T5896] usb 5-1: config 0 descriptor?? [ 130.107415][ T5948] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 130.118041][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 130.127137][ T5948] usb 2-1: Product: syz [ 130.174931][ T5948] usb 2-1: config 0 descriptor?? [ 130.345656][ T48] IPVS: starting estimator thread 0... [ 130.495185][ T6962] IPVS: using max 50 ests per chain, 120000 per kthread [ 130.580201][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 130.653219][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 130.953491][ T5948] usbhid 2-1:0.0: can't add hid device: -71 [ 130.962807][ T5948] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 130.977675][ T5948] usb 2-1: USB disconnect, device number 5 [ 131.952759][ T6977] CIFS: VFS: Malformed UNC in devname [ 132.078759][ T48] usb 5-1: USB disconnect, device number 9 [ 132.732453][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.751618][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.029929][ T6990] syzkaller0: entered promiscuous mode [ 133.047114][ T6990] syzkaller0: entered allmulticast mode [ 133.382647][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 134.102141][ T980] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 134.284885][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 135.306828][ T48] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.569529][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 135.611187][ T48] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.654775][ T48] usb 1-1: config 0 has no interfaces? [ 135.694670][ T48] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 135.738480][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.788055][ T48] usb 1-1: Product: syz [ 135.803577][ T48] usb 1-1: Manufacturer: syz [ 135.810696][ T48] usb 1-1: SerialNumber: syz [ 135.828972][ T48] usb 1-1: config 0 descriptor?? [ 136.081418][ T48] IPVS: starting estimator thread 0... [ 136.185128][ T7012] IPVS: using max 30 ests per chain, 72000 per kthread [ 136.782318][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.792713][ T980] usb 5-1: no configurations [ 136.799013][ T980] usb 5-1: can't read configurations, error -22 [ 137.978370][ T6925] Set syz1 is full, maxelem 65536 reached [ 138.050804][ T7029] syzkaller0: entered promiscuous mode [ 138.117155][ T7031] CIFS: VFS: Malformed UNC in devname [ 138.135026][ T7029] syzkaller0: entered allmulticast mode [ 138.180770][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 138.879487][ T5932] usb 1-1: USB disconnect, device number 4 [ 139.144248][ T5948] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.304536][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 140.342301][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 140.655267][ T977] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.836720][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.864725][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.954636][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 141.012792][ T977] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 141.032306][ T977] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 141.041791][ T977] usb 4-1: Product: syz [ 141.063165][ T977] usb 4-1: config 0 descriptor?? [ 141.606413][ T977] usbhid 4-1:0.0: can't add hid device: -71 [ 141.614777][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 141.658732][ T977] usb 4-1: USB disconnect, device number 8 [ 141.926741][ T7084] CIFS: VFS: Malformed UNC in devname [ 142.195118][ T5896] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.384483][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 142.387564][ T5948] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.407109][ T5948] usb 5-1: no configurations [ 142.430159][ T5948] usb 5-1: can't read configurations, error -22 [ 142.453029][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.499390][ T5896] usb 2-1: config 0 has no interfaces? [ 142.583223][ T5896] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 142.595308][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.670625][ T5896] usb 2-1: Product: syz [ 142.796645][ T5896] usb 2-1: Manufacturer: syz [ 142.801275][ T5896] usb 2-1: SerialNumber: syz [ 142.865707][ T5896] usb 2-1: config 0 descriptor?? [ 143.218214][ T980] IPVS: starting estimator thread 0... [ 143.344766][ T7091] IPVS: using max 25 ests per chain, 60000 per kthread [ 144.008414][ T7104] syzkaller0: entered promiscuous mode [ 144.017685][ T7104] syzkaller0: entered allmulticast mode [ 144.591918][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 144.740665][ T48] usb 2-1: USB disconnect, device number 6 [ 144.894629][ T5948] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 145.110431][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.165500][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.211799][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 145.228839][ T5948] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 145.239238][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 145.250423][ T5948] usb 4-1: Product: syz [ 145.255938][ T5896] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 145.259056][ T5948] usb 4-1: config 0 descriptor?? [ 146.315304][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 146.330956][ T5948] usbhid 4-1:0.0: can't add hid device: -71 [ 146.389532][ T5948] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 146.430148][ T5948] usb 4-1: USB disconnect, device number 9 [ 147.424536][ T7127] CIFS: VFS: Malformed UNC in devname [ 147.488575][ T6988] Set syz1 is full, maxelem 65536 reached [ 148.313707][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.321442][ T5896] usb 2-1: no configurations [ 148.332458][ T5896] usb 2-1: can't read configurations, error -22 [ 148.557543][ T7142] syzkaller0: entered promiscuous mode [ 148.591520][ T7142] syzkaller0: entered allmulticast mode [ 148.748437][ T7131] Set syz1 is full, maxelem 65536 reached [ 148.948766][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'. [ 149.150132][ T7158] netlink: 'syz.2.451': attribute type 2 has an invalid length. [ 149.184397][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.451'. [ 149.428939][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.436991][ T5896] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.625085][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 149.708873][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.737195][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.788525][ T9] usb 1-1: config 0 has no interfaces? [ 149.994847][ T48] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.047900][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.165149][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 150.184813][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 150.344943][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.352968][ T9] usb 1-1: Product: syz [ 150.392098][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 150.459965][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 150.545014][ T9] usb 1-1: Manufacturer: syz [ 150.549639][ T9] usb 1-1: SerialNumber: syz [ 150.561787][ T5896] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 150.596985][ T9] usb 1-1: config 0 descriptor?? [ 150.606343][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 150.628932][ T5896] usb 2-1: Product: syz [ 150.684919][ T5896] usb 2-1: config 0 descriptor?? [ 151.485719][ T5896] usbhid 2-1:0.0: can't add hid device: -71 [ 151.557074][ T5896] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 151.707999][ T5896] usb 2-1: USB disconnect, device number 8 [ 151.900764][ T7180] syzkaller0: entered promiscuous mode [ 151.908667][ T7180] syzkaller0: entered allmulticast mode [ 151.919840][ T7177] Set syz1 is full, maxelem 65536 reached [ 152.327819][ T7187] CIFS: VFS: Malformed UNC in devname [ 152.641788][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.651401][ T48] usb 3-1: no configurations [ 152.669239][ T48] usb 3-1: can't read configurations, error -22 [ 152.890083][ T5896] usb 1-1: USB disconnect, device number 5 [ 153.535074][ T48] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.724115][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 153.733426][ T48] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 153.744716][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.752751][ T48] usb 3-1: Product: syz [ 153.807457][ T48] usb 3-1: Manufacturer: syz [ 153.929676][ T48] usb 3-1: SerialNumber: syz [ 153.930038][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 153.971686][ T48] usb 3-1: config 0 descriptor?? [ 154.215674][ T48] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 154.343160][ T7215] syzkaller0: entered promiscuous mode [ 154.370595][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 154.380537][ T7215] syzkaller0: entered allmulticast mode [ 154.665581][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 154.955404][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.976777][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.989214][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 155.019740][ T9] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 155.061474][ T9] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 155.070773][ T9] usb 4-1: Product: syz [ 155.089404][ T9] usb 4-1: config 0 descriptor?? [ 155.217049][ T48] gspca_sunplus: reg_w_riv err -71 [ 155.225607][ T48] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 155.245292][ T980] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 155.264475][ T48] usb 3-1: USB disconnect, device number 8 [ 155.415099][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 155.448300][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 155.564741][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.746921][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 155.758129][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.774272][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 155.800701][ T10] usb 2-1: config 0 has no interfaces? [ 155.821107][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.906026][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 155.934874][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.152897][ T9] usb 4-1: USB disconnect, device number 10 [ 156.172886][ T10] usb 2-1: Product: syz [ 156.224786][ T10] usb 2-1: Manufacturer: syz [ 156.429305][ T10] usb 2-1: SerialNumber: syz [ 156.551786][ T10] usb 2-1: config 0 descriptor?? [ 156.899992][ T7246] CIFS: VFS: Malformed UNC in devname [ 157.218680][ T7249] syzkaller0: entered promiscuous mode [ 157.238591][ T7249] syzkaller0: entered allmulticast mode [ 158.045204][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 158.205166][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 158.226902][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 158.260937][ T10] usb 4-1: config 0 has no interface number 0 [ 158.296405][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 158.336380][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 158.355114][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.369463][ T10] usb 4-1: Product: syz [ 158.386045][ T10] usb 4-1: Manufacturer: syz [ 158.390789][ T10] usb 4-1: SerialNumber: syz [ 158.409196][ T10] usb 4-1: config 0 descriptor?? [ 158.455252][ T10] smsc75xx v1.0.0 [ 158.549838][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.563988][ T980] usb 5-1: no configurations [ 158.573423][ T980] usb 5-1: can't read configurations, error -22 [ 158.588358][ T48] usb 2-1: USB disconnect, device number 9 [ 158.862567][ T7272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 159.053144][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 159.067187][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 159.115807][ T48] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.281446][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 159.329075][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 159.387486][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 159.436866][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 159.486938][ T10] usb 4-1: USB disconnect, device number 11 [ 159.504645][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.862091][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.874689][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 159.898709][ T48] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 159.909682][ T48] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 159.925702][ T48] usb 2-1: Product: syz [ 159.958445][ T48] usb 2-1: config 0 descriptor?? [ 159.997466][ T7284] syzkaller0: entered promiscuous mode [ 160.010752][ T7284] syzkaller0: entered allmulticast mode [ 160.269631][ T7290] CIFS: VFS: Malformed UNC in devname [ 160.820687][ T48] usbhid 2-1:0.0: can't add hid device: -71 [ 160.829231][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.060741][ T7298] Set syz1 is full, maxelem 65536 reached [ 161.074653][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 161.166199][ T48] usb 2-1: USB disconnect, device number 10 [ 161.255184][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 161.288228][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.438676][ T10] usb 5-1: config 0 has no interfaces? [ 161.459204][ T10] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 161.506139][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.586044][ T10] usb 5-1: Product: syz [ 161.651768][ T10] usb 5-1: Manufacturer: syz [ 161.667778][ T10] usb 5-1: SerialNumber: syz [ 161.676272][ T10] usb 5-1: config 0 descriptor?? [ 161.954149][ T48] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 162.123042][ T48] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.144238][ T977] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 162.155415][ T48] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 162.210786][ T48] usb 2-1: config 6 has no interface number 0 [ 162.244395][ T48] usb 2-1: config 6 interface 200 has no altsetting 0 [ 162.301519][ T48] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 162.344674][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 162.365840][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.411324][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 162.449465][ T48] usb 2-1: Product: syz [ 162.459271][ T48] usb 2-1: Manufacturer: syz [ 162.465137][ T48] usb 2-1: SerialNumber: syz [ 162.604602][ T7322] syzkaller0: entered promiscuous mode [ 162.616783][ T7322] syzkaller0: entered allmulticast mode [ 163.311859][ T48] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 163.415297][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.487408][ T48] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 163.651569][ T48] usb 2-1: media controller created [ 164.375696][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.637645][ T10] usb 5-1: USB disconnect, device number 16 [ 167.930959][ T977] usb 4-1: unable to get BOS descriptor or descriptor too short [ 167.949474][ T977] usb 4-1: no configurations [ 168.551464][ T5864] sched: DL replenish lagged too much [ 179.128660][ T977] usb 4-1: can't read configurations, error -22 [ 283.143579][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 283.150564][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5861/1:b..l [ 283.158753][ C1] rcu: (detected by 1, t=10502 jiffies, g=19821, q=1158 ncpus=2) [ 283.166578][ C1] task:syz-executor state:R running task stack:21224 pid:5861 tgid:5861 ppid:5838 task_flags:0x400140 flags:0x20004002 [ 283.180694][ C1] Call Trace: [ 283.183983][ C1] [ 283.186931][ C1] __schedule+0x16fd/0x4cf0 [ 283.191473][ C1] ? __lock_acquire+0xab1/0xd20 [ 283.196333][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 283.201634][ C1] ? __pfx___schedule+0x10/0x10 [ 283.206498][ C1] ? __lock_acquire+0xab9/0xd20 [ 283.211363][ C1] ? __lock_acquire+0xab9/0xd20 [ 283.216227][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 283.221524][ C1] preempt_schedule_irq+0xb5/0x150 [ 283.226644][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 283.232384][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 283.238203][ C1] irqentry_exit+0x6f/0x90 [ 283.242625][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.248609][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 283.253899][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 eb 81 01 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 283.273512][ C1] RSP: 0018:ffffc900040cef70 EFLAGS: 00000206 [ 283.279586][ C1] RAX: 8cfbc87855b8de00 RBX: 0000000000000202 RCX: 8cfbc87855b8de00 [ 283.287560][ C1] RDX: 0000000000000002 RSI: ffffffff8db845d7 RDI: ffffffff8be28dc0 [ 283.295533][ C1] RBP: ffff888078658b40 R08: ffffc900040cf3b0 R09: 0000000000000000 [ 283.303770][ C1] R10: ffffc900040cf0f8 R11: fffff52000819e21 R12: 0000000000000002 [ 283.311748][ C1] R13: 0000000000000002 R14: ffffffff8e13f0e0 R15: ffff888078658000 [ 283.319746][ C1] ? unwind_next_frame+0xa5/0x2390 [ 283.324877][ C1] ? unwind_next_frame+0xa5/0x2390 [ 283.329995][ C1] unwind_next_frame+0x19a9/0x2390 [ 283.335120][ C1] ? unwind_next_frame+0xa5/0x2390 [ 283.340241][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 283.345544][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 283.351712][ C1] arch_stack_walk+0x11c/0x150 [ 283.356494][ C1] ? __slab_free+0x326/0x400 [ 283.361096][ C1] stack_trace_save+0x9c/0xe0 [ 283.365784][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 283.371184][ C1] save_stack+0xf5/0x1f0 [ 283.375441][ C1] ? __pfx_save_stack+0x10/0x10 [ 283.380300][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 283.385612][ C1] ? page_ext_put+0x97/0xc0 [ 283.390134][ C1] __reset_page_owner+0x71/0x1f0 [ 283.395085][ C1] __free_frozen_pages+0xc71/0xe70 [ 283.400217][ C1] __slab_free+0x326/0x400 [ 283.404647][ C1] ? __phys_addr+0xd3/0x180 [ 283.409174][ C1] qlist_free_all+0x97/0x140 [ 283.413776][ C1] kasan_quarantine_reduce+0x148/0x160 [ 283.419244][ C1] __kasan_kmalloc+0x22/0xb0 [ 283.423856][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 283.428718][ C1] ? tomoyo_encode+0x28b/0x550 [ 283.433496][ C1] tomoyo_encode+0x28b/0x550 [ 283.438099][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 283.443759][ C1] tomoyo_check_open_permission+0x1c1/0x3b0 [ 283.449659][ C1] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 283.455730][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 283.462192][ C1] ? tomoyo_file_open+0x165/0x220 [ 283.467233][ C1] security_file_open+0xb1/0x270 [ 283.472178][ C1] do_dentry_open+0x35e/0x1970 [ 283.476969][ C1] vfs_open+0x3b/0x340 [ 283.481041][ C1] ? path_openat+0x2ecd/0x3830 [ 283.485814][ C1] path_openat+0x2ee5/0x3830 [ 283.490420][ C1] ? arch_stack_walk+0xfc/0x150 [ 283.495326][ C1] ? __pfx_path_openat+0x10/0x10 [ 283.500277][ C1] ? do_fast_syscall_32+0x34/0x80 [ 283.505309][ C1] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.511846][ C1] do_filp_open+0x1fa/0x410 [ 283.516358][ C1] ? __lock_acquire+0xab9/0xd20 [ 283.521215][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 283.526273][ C1] ? _raw_spin_unlock+0x28/0x50 [ 283.531127][ C1] ? alloc_fd+0x64c/0x6c0 [ 283.535480][ C1] do_sys_openat2+0x121/0x1c0 [ 283.540172][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 283.545383][ C1] ? __se_sys_clock_nanosleep_time32+0x2f0/0x380 [ 283.551727][ C1] __ia32_compat_sys_openat+0x131/0x160 [ 283.557291][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 283.562421][ C1] do_fast_syscall_32+0x34/0x80 [ 283.567281][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.573620][ C1] RIP: 0023:0xf707e539 [ 283.577701][ C1] RSP: 002b:00000000f753fd50 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 283.586121][ C1] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7266e06 [ 283.594183][ C1] RDX: 0000000000098800 RSI: 0000000000000000 RDI: 00000000f73e4ff4 [ 283.602156][ C1] RBP: 00000000000000f3 R08: 0000000000000000 R09: 0000000000000000 [ 283.610132][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.618109][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.626102][ C1] [ 285.075076][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.089646][ T1301] ieee802154 phy1 wpan1: encryption failed: -22