last executing test programs: 23.417871947s ago: executing program 2 (id=57): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66", 0x5, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, 0x0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="c026000041000701000000000700000002"], 0x26c0}, 0x1, 0x0, 0x0, 0x8090}, 0x4010) syz_usb_control_io(r0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r6) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r7, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x20048880) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000040000000008000e"], 0x20}}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000c05"], 0x0, 0x0, 0x0, 0x0}, 0x0) 20.996385786s ago: executing program 2 (id=68): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0x1c, 0x3d, 0x10, 0x67b, 0x331a, 0x4a31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0xa1, 0x0, 0x2, 0xc2, 0x16, 0x2, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40, 0xb8}}]}}]}}]}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) accept4(r1, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r2], 0x40c}}, 0x20008850) 19.034397353s ago: executing program 2 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$uac1(0x4, 0x93, &(0x7f0000000000)=ANY=[], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0x10, 0x80000, 0x3) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x800b49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000880)={&(0x7f0000000500)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, 0x0}, 0x0) sendto$inet6(r4, &(0x7f0000000140)="b3016a82f7ee00000000", 0xa, 0x2000c000, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1, 0x7}, 0x36) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000040)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) close_range(0xffffffffffffffff, r6, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/schedstat\x00', 0x0, 0x0) inotify_add_watch(r8, 0x0, 0x21000900) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a310000fff50900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00054000000000000000000c00054000000000000000000c0004400000000000000000e0000a80480002800800034000000003080003400000000308000340000000020900020073797a31000000000800034000000001080003400000000108000180fffffffb08000180fffffffe3a000100d5867498a18a515bfa0df242b8dd5cc3eb5106a4f3109f9909cb0aa08db584ba5ee6d4bbb45478287310a5b3a2d6b9d7dcb8abfa1d100000580002800900020073797a3200000000080003400000000408000180fffffffc080003400000000408000180ffffffff0900020073797a320000000008000180fffffffe08000340000000030900020073797a30000000000600064019d20000040201"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x20800, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX], 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x121700, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 17.154503663s ago: executing program 0 (id=81): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="401701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3414, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1, 0x5, 0x249}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r8, 0x0, &(0x7f0000000040)='./file0\x00', 0x65, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r8, 0x47f6, 0x40, 0x2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) 15.168314532s ago: executing program 2 (id=88): syz_usb_connect$uac1(0x2, 0xa2, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029000000001020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000050054b57f1cd27cba"], 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002480), 0x20402, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2c020400) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x34}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x101) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r5 = epoll_create(0x7fffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xfffffffa}}, './file0\x00'}) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000280)={0x40000004}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='1', 0x1) 14.114566416s ago: executing program 1 (id=93): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="340200c82cc3", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e0004"], 0x34}}, 0x0) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f00000000c0), 0x1400000) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 13.736770862s ago: executing program 0 (id=96): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x6, 0x0) accept4(r1, 0x0, &(0x7f0000000000), 0x80800) (async) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x80800) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3, 0x2}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@x86={0x2, 0xf, 0x2, 0x0, 0x9, 0x8, 0x9, 0x2, 0x9, 0x6, 0x5, 0x28, 0x0, 0xfffffffe, 0x2278, 0x2, 0x40, 0x8, 0x4, '\x00', 0x4, 0x3}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@x86={0x2, 0xf, 0x2, 0x0, 0x9, 0x8, 0x9, 0x2, 0x9, 0x6, 0x5, 0x28, 0x0, 0xfffffffe, 0x2278, 0x2, 0x40, 0x8, 0x4, '\x00', 0x4, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x10000, 0x101000) r5 = socket$inet(0x2, 0x40427cadfdd63b34, 0xfffffffb) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) fcntl$setlease(r5, 0x400, 0x1) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r7, 0x30, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x55}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000700)={0x1, 0x93, "f4ae9487532c9c6a21870084d89d0d0846eae65e37b314271862f80ef282fadfde99290594c99035fc4e41d8896f5d54f83c6f7d30faf0aa630412f2de17aeca2c95d5bb77443ee26749e288d0c8f57df25653779a29d36b678962754624f94b2156302f52129e02fc2736314aaf86f9e7e00636000418273bdb8be1e7458313172fc87af3baa153f101a9caef51668df9a214"}) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000007c0), 0x18b002, 0x0) sendfile(r10, r6, &(0x7f0000000800)=0x5, 0x8) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000840)={0x5, 0x0, [{0x6, 0x6, 0x0, 0x9, 0x9, 0x8, 0xdeac}, {0x40000000, 0x400, 0x0, 0x40, 0x80, 0x5, 0x3}, {0x80000019, 0x9b, 0x0, 0x8, 0xfffffff3, 0x5, 0x2}, {0x80000001, 0x9, 0x1, 0x7, 0x1, 0x8, 0x83}, {0x8000000a, 0x5, 0x0, 0x1, 0xc3, 0x5, 0x3}]}) (async) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000840)={0x5, 0x0, [{0x6, 0x6, 0x0, 0x9, 0x9, 0x8, 0xdeac}, {0x40000000, 0x400, 0x0, 0x40, 0x80, 0x5, 0x3}, {0x80000019, 0x9b, 0x0, 0x8, 0xfffffff3, 0x5, 0x2}, {0x80000001, 0x9, 0x1, 0x7, 0x1, 0x8, 0x83}, {0x8000000a, 0x5, 0x0, 0x1, 0xc3, 0x5, 0x3}]}) r11 = accept4$inet6(r9, 0x0, &(0x7f0000000940), 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@newspdinfo={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdbfb, 0x8, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c041) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@newspdinfo={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdbfb, 0x8, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c041) dup2(r11, r11) (async) r12 = dup2(r11, r11) r13 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000b00)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000c00)=0xe8) mount$fuse(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x382010, &(0x7f0000000c40)={{'fd', 0x3d, r4}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r13}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfff}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x68}}], [{@smackfshat={'smackfshat', 0x3d, ']'}}, {@permit_directio}, {@fowner_gt={'fowner>', r14}}, {@obj_type={'obj_type', 0x3d, ':'}}]}}) (async) mount$fuse(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x382010, &(0x7f0000000c40)={{'fd', 0x3d, r4}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r13}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfff}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x68}}], [{@smackfshat={'smackfshat', 0x3d, ']'}}, {@permit_directio}, {@fowner_gt={'fowner>', r14}}, {@obj_type={'obj_type', 0x3d, ':'}}]}}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r6) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r15, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x73}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 13.588488389s ago: executing program 3 (id=97): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) r2 = getpid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000200)=""/65, 0x41}], 0x5, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) stat(0x0, &(0x7f0000000180)) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0xfff, 0x10, 0xa8, 0x534fb229}, &(0x7f00000001c0)=0x18) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000200"/108], 0xb8}}, 0x0) 13.521385261s ago: executing program 4 (id=98): accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x40000) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x3}, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000104000000000000000014550000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) 13.434456912s ago: executing program 3 (id=99): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfed4e22113f7d564, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[{0x3, 0x40, 0x81, 0x749}, {0x6, 0xa, 0x50, 0xc}, {0xfff, 0x8, 0x4c, 0x10}, {0xd, 0x4, 0x5}, {0xfa05, 0x10, 0x80, 0x8}, {0x2, 0x0, 0x5, 0xbcc}, {0x1ff, 0xfd, 0x1, 0xffff}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0x15, 0x0, r3, 0x0, 0x0, r3, 0x1400, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0) 13.368510827s ago: executing program 0 (id=100): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfe9f, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x57, 0x0, 0x1, 0x3, 0x10000, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0800000020000000000000090004"], 0x50) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000300000000000000000001000000000000000000000000000033"], 0xfdef) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 13.175698515s ago: executing program 3 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a30000000b840000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 13.123449143s ago: executing program 4 (id=102): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x2}) write$binfmt_format(r1, &(0x7f0000000080)='1\x00', 0x2) r2 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) fallocate(r2, 0x0, 0x0, 0x400001) fcntl$addseals(r2, 0x409, 0xc) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.996387323s ago: executing program 3 (id=103): syz_usb_connect$uac1(0x2, 0xa2, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029000000001020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000050054b57f1cd27cba"], 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002480), 0x20402, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2c020400) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x34}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x101) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r5 = epoll_create(0x7fffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xfffffffa}}, './file0\x00'}) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000280)={0x40000004}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 12.995921127s ago: executing program 0 (id=104): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="270502001a0014000600002fb96dbcf706e10500070088a8010088a8", 0x1c}, {&(0x7f00000005c0)="0900000100000000e634", 0xa}], 0x2}, 0x4011) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x61002, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000001c0)={0x40, 0x30, 0x4, "02ab0e4b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) 12.363577763s ago: executing program 1 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast2}, 0xc) sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 11.978761996s ago: executing program 1 (id=106): r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 11.492930709s ago: executing program 1 (id=107): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="270502001a00140006000d2fb96dbcf706e10500070088a8010088a8", 0x1c}, {&(0x7f00000005c0)="0900000100000000e634", 0xa}], 0x2}, 0x4011) 11.429723145s ago: executing program 2 (id=108): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES32, @ANYRES64=r5], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r9}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r10, 0x708, 0x41e3, 0x0, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000100)=0x80) r13 = syz_open_dev$media(&(0x7f0000000040), 0xcfa, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r13, 0xc0287c02, &(0x7f0000000080)={{0x80000000, 0x0, 0x0, [0xfffffff5, 0x40]}, {0x80000000, 0x0, 0x0, [0x404, 0x10000000]}, 0x2, [0x5, 0x200000]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r15, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r15, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r15, r14, 0x0, 0x20000023893) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x38, r6, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_MAC={0x3b, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x38}}, 0x0) 11.254446912s ago: executing program 4 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000010029bd700000000000000000", @ANYBLOB="0d730400"], 0x68}, 0x1, 0x6000000000000000}, 0x0) 10.964383569s ago: executing program 0 (id=110): syz_open_dev$I2C(&(0x7f0000009b00), 0x5, 0x8600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000004040), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6000008, 0x13, r2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x248}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000001980)=0xfffffff7, 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40080c0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000040)={0x9, @output={0x0, 0x0, {0x1, 0x7cc4}, 0x60, 0x12}}) 10.712215461s ago: executing program 1 (id=111): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) semget$private(0x0, 0x4000000009, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x5424, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x80002b1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) clock_getres(0x0, 0x0) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) writev(r8, &(0x7f0000001480)=[{&(0x7f0000001100)="c806f628", 0x4}, {0x0}], 0x2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r11, r10, 0x0, 0x24) r12 = semget(0x2, 0x1, 0x204) semtimedop(r12, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0x40, 0x1c00}], 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0x7, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 9.161828234s ago: executing program 4 (id=112): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00000000000000000000000000000000007b000000000000000000", 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x300}}], 0x4, 0xc080) 6.203035989s ago: executing program 4 (id=113): r0 = add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)="73970921a07cdd807e0e76c3e57196996b96a4468b629c1e94627ea42a27e91da34164400e561d6610a7c7b1b5a5d65e000bead61e71dbfa", 0x38, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r4, 0x65, 0x1, &(0x7f0000000080), 0x1d0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r2, &(0x7f0000000040), 0x10) gettid() dup3(r2, r3, 0x0) 5.316169127s ago: executing program 0 (id=114): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_open_procfs$pagemap(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg(r7, &(0x7f00000014c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x1, 0x4, 0x4, {0xa, 0x4e23, 0x9f22, @remote, 0x5}}}, 0x80, &(0x7f0000001440)=[{0x0}, {&(0x7f00000010c0)}, {&(0x7f0000001100)}, {&(0x7f00000011c0)="5f02eac11a1585981a2e5fa6ed9becfe91325c6692f72c14da23804864107706f18961b9032ad2d7ee589c5f55aca0ab51b15094be0d47b459cbf718287daca101adbf1feee5b5625fd45fa6139075004567eb", 0x53}, {0x0}, {&(0x7f0000001280)="1337c070ecef5a", 0x7}, {&(0x7f00000012c0)="79c23b68e7339a841c47c628574ee9aae21fa9c7b1cf71e406e8d47e22c6acd928a67ad450a9b6dc010d5737fdadfb70a774f043d8ef9cc54933a14b7de7fe2a67a6523c17930998a4b9b0661144aafacc1841d014d27b1895d1f2e9918e11d19201a9234e0f975e27377e1af5d714b6efaa224a926121d058c8f106", 0x7c}, {0x0}], 0x8}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff01000000000000000000000000000114000600c5"], 0x70}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 5.297326019s ago: executing program 3 (id=115): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="270502001a0014000600002fb96dbcf706e10500070088a801008100", 0x1c}, {&(0x7f00000005c0)="0900000100000010e634", 0xa}], 0x2}, 0x4011) 5.287244767s ago: executing program 2 (id=116): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r3], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x8f584de5abee249d}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2, 0x3}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff01000000000000000000000000000100000000000000000000ffff0000000000000000000000000000800000000000", @ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414230000000033"], 0xf8}}, 0xc801) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="4096df0b7900000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000085a1316c212c80ffe5c7020303000000000000000000000000000858a108010002000000776e5060a491027b4cbbdff8520006b73fcc848713b795be806eef0ce309b177f8822c27f4dcc83f6c3dc2558e6081c7414e9c04d13b3f39ce9d36546f81788d00a22a1064bb76a12bd59882db45f55041527b83d191744ea4b5e79b2d70818264e73da311223a4f7029e61dcbc092b2a9830d1210"], 0x1c}}, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "b3a5a32c15a74899004ccf462627b693b424cfac6d6f6c18a07448e7cfc77224", "eeb79b8e5cc84de93512fdd553dabc6b", {"2adfa4d4d8104bb99fa1887ab53acb45", "40e3d0b4c2c5585ef57152f112ea5a1e"}}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000100)={0x9, @pix={0x0, 0x0, 0x4f424752, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x1, 0x0, 0x0, 0x4}}) 450.310131ms ago: executing program 1 (id=117): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = socket(0x1, 0x3, 0x400) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x90, 0x13}}}}, [@NL80211_ATTR_NAN_FUNC={0xc4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_SERVICE_INFO={0xa6, 0xb, "0c8f4984a10486caa6039ecf3bd45b5d3581fb3f79f4f25676d049871595e2b5cbd5bc31ca85d9826797b1f0e0bdd1e223814ea11ea23f56be9aa6c22d5dc6731cb33f8fad135c70c861b51bf7ac0fbb80342a2fbe7852175eb3e71a1934f9799c4badaa193d97fcefea5ea52a484f269886a265b726f43cbcaeb09c5e10cb4b3b94551c1971c2a341653a6eb922d4acd61c743df2fbb2305f781402bf16eb7938cf"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2400c854}, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r4 = syz_io_uring_setup(0x5eb, &(0x7f0000000240)={0x0, 0x29ac, 0x4, 0x1, 0x4a}, &(0x7f00000002c0), &(0x7f0000000300)) r5 = syz_io_uring_setup(0x4e64, &(0x7f0000000340)={0x0, 0x3693, 0x800, 0x2, 0xc3, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000400)) (async) recvmsg$can_j1939(r1, &(0x7f0000001600)={&(0x7f0000000440)=@phonet, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/9, 0x9}, {&(0x7f0000000500)=""/135, 0x87}], 0x2, &(0x7f0000000600)=""/4096, 0x1000}, 0x0) syz_io_uring_setup(0x39c7, &(0x7f0000001640)={0x0, 0xd5eb, 0x12000, 0x3, 0x9d, 0x0, r4}, &(0x7f00000016c0), &(0x7f0000001700)) r6 = getpgrp(0x0) process_vm_readv(r6, &(0x7f0000002a40)=[{&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/80, 0x50}, {&(0x7f00000019c0)=""/100, 0x64}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x5, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)=""/156, 0x9c}, {&(0x7f0000002b80)=""/33, 0x21}], 0x2, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000049c0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004980)={&(0x7f0000002c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x22c, 0xe, 0xa, 0xa02, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1fc, 0x3, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x85, 0x6, 0x1, 0x0, "0edd7861f3c6688553e38f219e78986c28237b27ab17d66315ab44bed13b37a61f1d001f417bac6c7d6492f0354ca9f3b4788e6c5db8d3913c7b0fd5e6af8f5a296378472953a338c5756a574cd205dadec66a96c85c672d0d369135f09094bcda677cb9d7534e9b777b8c21f07f51c178d64ee5e750269af6ae6c63b8d5187606"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x154, 0xb, 0x0, 0x1, [{0x134, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x124, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0x104, 0xa, 0x0, 0x1, [{0xe4, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xd4, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5c, 0x3, "37bde008fe1da09d43dea29eb8e94278a4980cae741ce115e1dd1de9f4bce9fd2b5dfa6c8f76a8c987825bc1a8321cc23a460491bd609772f666097e2451f87132df6b679ec2b3f576adf30680105c06371f1350b6cdec0f"}, @NFTA_MATCH_INFO={0x39, 0x3, "b29209fb9f7359b65001839b8597d1a9569d255a5d271294eb507dc6dcced9218591a48a74a48c4553a34888236751348c34cd1e25"}, @NFTA_MATCH_INFO={0x2c, 0x3, "c27e10d5f55c55a78d2fbdbfb839a20871653bbd48cb9229e616f60b282a6f7555f8e7b59951f040"}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}]}}}]}]}]}]}, @NFT_MSG_DELSETELEM={0x1a90, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a68, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x19a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x27c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "8ad7ebe5fae4f4ea678147377675e767efccc09ab7e74f5c00fd8f10e86261405dcdcddd66c7de34d8101fd48304ae21784b9ac3adbda51ba846164127d8cbf8f9d283db2cd8dbb69f286f67833619909c966fd6473bcd1681f808aa64b19022f81064152ba27fd398210c8b0cb5728b05ed44711b67a5c38a96cbf937477e74c5ceeae583e33216a72ae606fa42bcd5db9bb9347a1d4e14081ebfb73ed4f515238a1180b35fad79b85665ddb8d8e7c609bf826a60309d1850"}, @NFTA_DATA_VALUE={0xa1, 0x1, "2c7cb646f0cda9ca8308f0597bfda3043d1be4b3275f367c5f8b47943cec5eb0c28a2f4d410d4ec92bb26ab53acef37d19bf44e40578ef61440b61366c53ab8ab4ef53502ca85d957015ab029d219cb8c192ab5c7c8a84589977acd4ea80fe984eb82359f467d50db69345a92a39aae1721553292285f4f69bf49149c2dcf46aeadec0162cec93d39c26d07086b77cd0b2ae9223741c9fb1efa01ecb53"}, @NFTA_DATA_VALUE={0x8c, 0x1, "befcfc40c3837c3e3d334630a406a3037150149911f92a0f3ce32cf69d88353706453ccf933302786f074eb4b42f0721aa02486335759ebe868128dc73ef8cddc97efba345c56d0a49c4a6def38bc5d7b9f0825119ed7fea3ba8bc49aca2b22e1d72da0504b2965ec3128e3e5a24482418c8115d70a535e83e3b1d26a96f6cf72713956a3f7d7ea4"}]}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "d99203af7a41b005ab0880b22c78b7a824b034c7167055aebf7f0edf1de7b2f29aa926311eb33f98e1934c7c48d7b38c8271dd7abe2284a73c09b73ff3fa88a943d1aa7ebe50bd4ab550efa388c11ee455a5a0815f6159c7fa1114e46e441a653696eab373754662a9355a8a99771e58118a1870e75642c8fad604dc2a2275e44b9cc4800b4f2595a87002d471e0d817f2ceea0a4ae3bfe8db1716d4d0fbb302e2ea3b7919ba96e019acad028bfdd6da2419d59d0d2609b7426d1086fbb310b9c8bac6be76b4ae763601ec9c2aece5930224b10e8b75475e2ed4b190f6a039da80c9"}]}, @NFTA_SET_ELEM_KEY_END={0x1270, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "099bac447418cf1cee387ddafc840a262ba130e37e479b3e5b815d8479eddca212f27390534b591458fa88ed71123f3596d8e8"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x92, 0x1, "2e0751baa16b04a6295772e03c8553cfb3a3ad1b84bf6431ccd4ce81552efd828576622ca5167d1dc852973d0acb9824c5700687a28df5d559339483abc34af2c14c157f6fe78c98ab71794812df0055d5ee8a51bdaba6f6c8f818eb3a8458f86ac6adf0d8fded1401e6a91ac686d20169d08bd0a6f8462a364c72a1c17be5d7baa52f93a80f3b67b6d002360437"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "0085dcf0b8bc527e10b320bf80df1e562424b10763ce59c396f73a66a58145ee287eb4aaaf32c76faa96c65e7b106f4d9a96b87fc9f693dfa3d4c4c4a78f1924ee0ae8c1e04ff0d384851a6723fc5ee6577e4b5e832a877437be1d257c8c70f4d62998a7d07ac2d9219fa1a16c8821d82bc3ed4d2ab8d13a6f7dc3af15be37d2568b201b0e9a1ba5ccfafc097c5c57ed8096f2f1f03ab304534fbb510aef8f444623b349249cbf0fbbc0e69cb5d80a0c9ca40f05ee6cea0a37b6a024a13ea60c1a0c7af9ee07cc8ec00e3fe5afbf41d1bd4a5b2a652e0c36ba3be341a0843941d36e7e8400d08f55a89ab5e57db367c7bd4159356c8b40"}]}, @NFTA_SET_ELEM_DATA={0x24c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa4, 0x1, "a27efbfe01befaa0367abf6c675d1d1e9776fbb6397dd0120107302fdeff202e0e8b1b6881d56796769471a487a58a9b748d6dd5a645811b3b3deed3d1cbe144d4fb2e0fbbaeebf904b3c7e52c41a76112546bc2301cd40b61ef9e742d37abfc0d7a66d5e428e03b64477dee6dad7a2af94c4a7e96479986d16e763b097706294673c38ce47650ed9a8b02acfb429defb0e58b1522be33c2d0553c10e003b1ca"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "910c7a7e0811394edd2cc78451cb11be4041cff4cbe2cebccb525c5d047048c0997a201ba109c8c2dd952b2ed5a97e11ee41dd5fe44c7ee588a40dbfa90f69566b884b14b1411a1bd1e94d85b190357ce8a7444e2af4529af73781fc280ddec57af1e1090564f334780ecbbcef4903fb880f1d5c042437b6a6ef087e42c7329dd7cd40cad4e160421daff9b2091c7ee520a46e820fb5d2890fe09940941250849915040147ad89a1e701612b980e144dda4f96329bb5406f465c003e3d28de03bf91f86e54a57aee48cb6bcdc3413d9601474c"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x594b}, @NFTA_SET_ELEM_USERDATA={0xe1, 0x6, 0x1, 0x0, "49b53fef431ef8e86db7e2ec7877418ae8bd1001fdf25c4bb9689fb6324cbf46a37fc5ab331571928badb0f9c77ea1acfa4b5ffb4c814a3c1153d1fcfb11adbcec806ae91fd9ca95001196af13ae4f686831a0bc437e24576f5c189cd32050b06ae9e2bad71f250557814fc87927475d784b5fd91c536698bcb2a53dc86980d2a3348e778fe2c2ee5a2c4550825260e1f239c40839c79a422195eeca7a5f412dac194ef20653171327bada55d68d5c85ba9fa9989431a1a354663ed84cc6b38dc0aa22f4d11809a785f5ec670a31c1430c49dab5d1bd02cb96b24ee130"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x34, 0x6, 0x1, 0x0, "874bb5dc20807a3b4960e8e63b6cc35e5b5dbf9f5f3c6c1c6ff25f46d240503ace111a49e7a291322ae7bdea0ebdd32f"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12a}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1d40}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000004a40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000004a00)={0xffffffffffffffff}, 0x12e, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000004a80)={0x6, 0x118, 0xfa00, {{0x4, 0xfffffffe, "ae7999b942205298e958d98ae47b4ea524e2fd68ad9728adde52ecaba22439391d4d5b991152cf1e279a7d80621621af04e543b750d791311a6c8d34aad7fc8ddf5a9baab9611f9d3563129585ec27cede7ca3bb1f9d0ad3d171eb531066a7d7bd31d25a15d50e0a489ab802bac3c3e2e66033ce27c822fe2656c7d2163020b7e3ab0044b65e75b424088f810ab920857003e825a4ac1e6151036bcf967fb5b44a38ef9174cfe53bb067e49ce437935a999c03294892810317bfcf4f17313380a21f63ef9a2860409cca8eee43a1f3e6b4e69653b6196a4875c3158b19d17755f1443608681be17fb14e7345d394491ce4fb46b83f86d97e94b8faac4bd85048", 0x5, 0xd7, 0xcb, 0x4, 0x5, 0x8, 0x5}, r7}}, 0x120) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x40010, r4, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000004bc0), &(0x7f0000004c00)={'L+', 0x4}, 0x16, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004c40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) clock_gettime(0x0, &(0x7f0000004ec0)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000004e80)=[{{&(0x7f0000004c80)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004d00)=""/114, 0x72}, {&(0x7f0000004d80)=""/99, 0x63}], 0x2, &(0x7f0000004e40)=""/48, 0x30}, 0xfffffff8}], 0x1, 0xdeee1a53929bad2, &(0x7f0000004f00)={r10, r11+60000000}) (async) connect$unix(r1, &(0x7f0000004f40)=@file={0x1, './file0\x00'}, 0x6e) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) r13 = dup(r12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000004fc0)='net/ip_tables_matches\x00') (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000005000)={'veth0_virt_wifi\x00'}) (async) getsockopt$inet6_udp_int(r13, 0x11, 0x65, &(0x7f0000005040), &(0x7f0000005080)=0x4) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r14, &(0x7f0000006140)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006100)={&(0x7f0000005100)={0xfe0, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x57}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x3fc, 0x11d, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfa2f, 0xae3e, 0x5, 0x400, 0x3f0a, 0xbb, 0x853d, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x7}, {0x3, 0x5}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x2, 0x4}, {0x7, 0x6}, {0x4, 0x3}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x5}, {0x6, 0x6}, {0x5, 0x9}, {0x2, 0x6}, {0x7, 0x2}, {0x4, 0x6}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x9}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x34c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x8}, {0x0, 0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x3}, {0x4, 0xa}, {0x2, 0x3}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {0x5, 0x2}, {0x6, 0x7}, {0x6}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x2}, {0x7, 0x9}, {0x6, 0xa}, {0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x9}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x3}, {0x0, 0x7}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x0, 0x3, 0x9, 0x8b1a, 0x9, 0xd8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x48, 0x3, 0x6c, 0x24, 0xc, 0x1, 0xb, 0x9, 0x5, 0x9, 0x24, 0x6c, 0x3, 0x30, 0x4, 0x4, 0x30, 0x16, 0x0, 0x2, 0x36, 0x0, 0x60, 0x30, 0x60, 0x1b, 0xb, 0x4, 0xb, 0x60, 0x3]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x24, 0x18, 0x30, 0x2, 0x1, 0x6c, 0xc, 0x6c, 0x24, 0x16, 0x6c, 0x1, 0x5, 0x1, 0x5, 0x6, 0x18, 0x9, 0x16, 0x28]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x5, 0x30, 0x12, 0x5, 0x18, 0x60, 0x1b, 0x1b, 0x1b, 0x60, 0x4, 0x60, 0x2, 0x5, 0x6, 0x6c, 0x4, 0x3, 0x4, 0x6, 0x1b, 0x36, 0x24, 0x48, 0x24, 0xc, 0x60, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x28e3, 0x6, 0x89, 0xf3, 0x9, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x5, 0x5, 0x800, 0x8, 0x8, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0x1b, 0x16, 0x4, 0x9, 0x0, 0x16, 0x36, 0xb, 0xb, 0x5, 0x6c, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0xb, 0x85, 0x9, 0xdc6, 0x800, 0x284b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x800, 0x8, 0x5dec, 0xff01, 0x4, 0x5]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0xffff, 0x1, 0x601, 0xfff, 0x81, 0x3ff]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0xa}, {0x2, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x4}, {}, {0x0, 0x5}, {0x6, 0x1}, {0x1, 0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x1}, {0x7, 0x6}, {0x0, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x4, 0x1}, {0x3, 0xa}, {0x6, 0x1}, {0x5, 0x8}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x8}, {0x7, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x8}, {0x2, 0x7}, {0x5, 0x5}, {0x2, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x7, 0x9}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0xa}, {0x5}, {0x7, 0x2}, {0x7, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x6}, {0x7}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0x3}, {}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x1}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0xc, 0x1, 0x1, 0x7, 0x0, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xd2, 0x8, 0x9, 0xbaa0, 0x2, 0x73ab, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5bd2, 0x0, 0x8001, 0x6, 0xc942, 0x3, 0x401, 0xd61c]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x24, 0x2, 0x35, 0x9, 0x2, 0x1]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x5, 0x6, 0x60, 0x30, 0x2, 0x18, 0x1b, 0x48, 0x6, 0xb, 0x6c, 0x19, 0x3, 0x6, 0x16]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x18, 0x18, 0x48, 0x6c, 0x0, 0x9, 0x60, 0x24, 0x0, 0x30, 0x9, 0xb, 0x60, 0x1b, 0x16, 0x7e, 0x16, 0x60, 0x9, 0x24, 0x18, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xbb04, 0x9df, 0x8, 0xc70, 0xfffe, 0xe, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x401, 0x6, 0x37, 0x3, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xd4f0, 0x5, 0xf, 0x0, 0x1, 0xfff, 0x8]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc6a, 0x61, 0x1, 0x3, 0x6, 0x6, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0xb, 0x72, 0xc, 0x16, 0x1, 0x9, 0x48, 0x4, 0x12, 0x12, 0x60, 0x5, 0xc, 0x5, 0x18, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x6}, {0x6, 0x5}, {0x7, 0x7}, {0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x5}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0x9}, {0x4}, {0x7, 0x8}, {0x5, 0x2}, {0x2, 0x6}, {0x4, 0x7}, {0x7, 0x6}, {0x5, 0x9}, {0x3, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x7, 0x4}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0xa}, {0x0, 0x8}, {0x6, 0x7}, {0x3, 0x5}, {0x3, 0x1}, {0x6, 0x1}, {0x5, 0x4}, {0x6, 0x4}, {0x0, 0x5}, {0x5}, {0x2, 0x8}, {0x2, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x2, 0xa}, {0x4, 0x8}, {0x7, 0x2}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x6}, {0x7, 0x9}, {0x5, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x2, 0xa}, {0x7, 0x7}, {0x3, 0x5}, {0x4}, {0x2}, {0x1}, {0x7, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x600, 0x4e, 0xffff, 0x0, 0x4, 0x0, 0x5, 0x1bc]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc554}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd2}]}]}, @NL80211_ATTR_TID_CONFIG={0x74c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x240, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x194, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0xffff, 0x3, 0xf36a, 0x8001, 0xb0, 0x80, 0x3]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x3, 0x2}, {0x0, 0x3}, {0x2, 0x6}, {0x5, 0x4}, {0x5, 0x1}, {0x2, 0xa}, {0x4, 0x9}, {0x1, 0x7}, {0x2, 0x4}, {0x2, 0x7}, {0x6, 0x8}, {0x3}, {0x0, 0x4}, {0x3, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x3, 0xa}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x1, 0x1}, {0x3}, {0x4, 0x6}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x6, 0xa}, {0x6, 0xa}, {0x2, 0x4}, {0x2, 0x9}, {0x7, 0x7}, {0x3}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x2}, {0x6, 0x8}, {0x7}, {0x4, 0x1}, {0x7, 0x9}, {0x2, 0x9}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x2, 0x3}, {0x4}, {0x3}, {0x5, 0x2}, {0x1}, {0x2, 0x8}, {0x1}, {0x1, 0x2}, {0x3}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x36, 0x5, 0x1b, 0x5, 0x2, 0x4, 0xc, 0xc, 0xc, 0x4, 0x6, 0x5, 0x30, 0xc, 0x60, 0x16, 0x1, 0x2, 0xc, 0x30, 0x48, 0x36, 0x12, 0x30, 0x1b, 0x6, 0x18, 0x30, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x5, 0x30, 0x2, 0x18, 0x9, 0xb, 0x36, 0x3, 0x30, 0x2d, 0x5, 0x3, 0x1, 0x36, 0x1b, 0x1b, 0x6, 0x48, 0x6c, 0x12, 0x30, 0x1, 0x3, 0xb, 0x6, 0x16, 0x30, 0x4, 0x6c, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x9, 0x4, 0x101, 0xfff9, 0x0, 0xffff, 0x23]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11d, 0x7, 0x8, 0xe48, 0x1, 0x0, 0x2, 0xc8]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x8001, 0xb37, 0x8, 0xd, 0x2, 0x2, 0x3e06]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8000, 0xc, 0x5, 0x4, 0x4, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x3, 0x3, 0x8, 0x1, 0x0, 0x400, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x8, 0xc9, 0xfff4, 0x3, 0x3, 0x3704, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x24, 0xc8c58573d5ed88c9, 0x48, 0x30, 0x9, 0x4, 0x5, 0x16, 0x18, 0x48, 0x30, 0x24, 0x17, 0x48, 0x6, 0x36, 0x16, 0xc, 0x3d]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x5}, {0x7, 0x2}, {0x2, 0x1}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {}, {0x7, 0x9}, {0x5, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x1, 0x6}, {}, {0x6, 0x9}, {0x2, 0x6}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x5, 0x4, 0x9, 0x30, 0x6c, 0xb, 0x4, 0x16, 0x3, 0x6c, 0x60, 0x1b, 0x6, 0x6c]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x3, 0x6, 0x6, 0x3, 0xffff, 0x374a, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x97dd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x198, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0x2, 0x4, 0xf, 0xc, 0x3, 0x1]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x1}, {0x2, 0x5}, {0x5}, {0x6, 0x3}, {0x3, 0x1}, {0x1, 0x4}, {0x1, 0x2}, {0x6, 0x5}, {0x4, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0xa}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x2}, {0x5, 0xa}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x7}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0x6}, {0x4, 0x2}, {0x6, 0x3}, {0x1, 0x8}, {0x3, 0x1}, {0x0, 0x9}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x6, 0x6}, {0x5}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x5}, {0x0, 0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0x9}, {0x0, 0x6}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x3, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x4, 0x6}, {0x2, 0x4}, {0x3, 0xa}, {0x1}, {0x5, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x4, 0x7}, {0x6, 0x9}, {0x5, 0xa}, {0x5, 0x5}, {0x0, 0x8}, {0x1}, {0x3, 0x5}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x8}, {0x4, 0x5}, {0x7, 0x5}]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x48, 0x24, 0x48, 0x1, 0x3, 0x36, 0x48, 0xb, 0x2, 0x30, 0x48]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x18, 0x16, 0x4, 0x60, 0x30, 0x12, 0x3, 0x6, 0x48, 0x4, 0x4, 0x48, 0x6, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x4}, {0x5, 0x9}, {0x3, 0x7}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x6, 0xa}, {0x1, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x30, 0x1b, 0x3, 0x2, 0x1b, 0x6c, 0x6, 0x4, 0x24, 0xc, 0x3, 0x30, 0x24, 0x5, 0x6c, 0xc, 0xb, 0x21, 0x3f, 0x16, 0x4, 0x16, 0xc, 0x9, 0x1, 0x24, 0x16, 0x4, 0x3, 0x2]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x2, 0x6c, 0x30, 0x24, 0x60, 0x4, 0x3, 0xc]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7e0, 0x1, 0x1000, 0xff, 0x5, 0xfffb, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7ff, 0x8, 0xfff, 0x3d, 0xa51d, 0x4ea5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x4, 0x4, 0x1, 0x6c, 0x36, 0x6c, 0x4, 0x2, 0x6, 0x48, 0x48, 0x4, 0x30, 0x18, 0x18, 0x30, 0x60, 0xc, 0xb, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff4, 0xff, 0x8, 0x1, 0x0, 0x5, 0x29]}}]}]}]}, {0x1d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x966, 0x0, 0x7, 0xa, 0x8, 0x9a, 0x5369, 0x8]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x2, 0x12, 0x16, 0x48, 0x6, 0x1b]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x48, 0x60, 0x0, 0x5, 0x30, 0x2, 0x18, 0x6, 0x0, 0xb, 0x16, 0x60, 0x4, 0x6c, 0x0, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4f, 0x7, 0x9, 0x1def, 0x3, 0x6fee, 0x5, 0x3]}}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x2}, {0x6, 0x7}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0xe}, {0x5, 0x7}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x7, 0x2}, {0x3}, {0x0, 0x5}, {0x3, 0x4}, {0x6, 0x1}, {0x3, 0x9}, {0x1}, {0x2, 0x6}, {0x4, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x7, 0x2}, {0x1, 0x1}, {0x5, 0x9}, {0x4}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xffff, 0x7fe, 0x7fff, 0xff, 0x8001, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5d, 0x1, 0x6, 0xf8, 0x1ff, 0x5, 0x0, 0x800]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xff00, 0x1000, 0xfffa, 0x5, 0x4, 0x3, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x2}, {0x5, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x5, 0x8000, 0x1, 0x9, 0x7, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x7, 0x4, 0x2, 0xfffd, 0x1, 0x1206, 0x7]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x30, 0x12, 0x36, 0x14, 0x9, 0x30, 0x3, 0x9f454ef1e8626489, 0x1, 0x4, 0x6c, 0xc, 0x6, 0x60, 0x30, 0x1, 0x4, 0x6c, 0x3, 0x60, 0x18, 0x12, 0x6c, 0x4, 0xc, 0x6, 0xe9c1c36f0f12dafc, 0x6, 0xb, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x2, 0xecc, 0x5, 0x2, 0x9, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x3, 0x3, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x8001, 0x30f3, 0x4, 0x7, 0x1000, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb0}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x2, 0x6, 0x3, 0x1, 0x7fff, 0xc]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0xc, 0x6c, 0x2, 0xc, 0x2, 0x30, 0x6c, 0x1, 0x23, 0xc, 0x5, 0x1b, 0x60, 0x36, 0xb, 0x48]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x8, 0x16, 0x0, 0x6c, 0x9, 0x16, 0x6c, 0x6c, 0x36, 0xc, 0x36, 0x24, 0x9, 0x18, 0x1, 0x6]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x2}, {0x3, 0x5}, {0x4, 0x6}, {0x7, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x6, 0x7}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x1, 0x7}, {0x7, 0x9}, {0x4, 0x6}, {0x6, 0xa}, {0x3, 0x6}, {0x7, 0xa}, {0x5}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0x8}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x4, 0x5}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x8}, {0x7, 0x9}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x3fc, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xef}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x98, 0x1, 0x1, 0xffff, 0x8, 0x2, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x8, 0x6, 0x7ff, 0x5, 0x5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x198, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x5, 0x7, 0xfce6, 0xea7, 0xff, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff8, 0x8, 0xfff, 0x6, 0x8, 0x0, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x12, 0xc, 0x60, 0xc, 0x3, 0x1, 0x30, 0x1, 0x16, 0x16, 0x6, 0x5, 0x24, 0x60, 0x36, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7f, 0xa0b, 0x8, 0xfffb, 0x8001, 0x4, 0xfffd]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0xb85c, 0x1, 0x5, 0x16, 0x4, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffff0dc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x8}, {0x5, 0x3}, {0x6, 0xa}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x3}, {0x7, 0x2}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x3}, {0x3, 0x2}, {0x4, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x9}, {0x6}, {0x6}, {0x4, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0x2}, {0x7}, {0x0, 0x4}, {0x3, 0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x5, 0x9}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0x9}, {0x6, 0x3}, {0x3, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x6, 0x9}, {0x3, 0x9}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaa}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x100, 0x9, 0x0, 0x5, 0x6, 0x8, 0x8001]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x3}, {0x4, 0x4}, {0x3, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x3}, {0x2, 0x5}, {0x4}, {0x4, 0x4}, {0x7, 0x8}, {0x5, 0x6}, {0x3, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x1, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x9, 0xea2, 0x11b9, 0x100, 0x40, 0x2adf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd9, 0x2, 0x9fe, 0x80, 0x6, 0xc17d, 0x1, 0xfff9]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x25}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x24, 0x60, 0x60, 0x16, 0x24, 0xb, 0x3, 0x12, 0x12, 0x4, 0x0, 0x10, 0x12, 0x0, 0x1, 0xb, 0xb, 0x1b, 0xc, 0x9, 0x5, 0xb, 0x12, 0x16, 0x2, 0x4, 0x60, 0x41]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x18, 0x48, 0x30, 0x1, 0xa4, 0x1b, 0x4, 0x2, 0x60, 0x1b, 0x30, 0x1f, 0x2, 0x3, 0x48, 0x5, 0x5, 0x24, 0x16, 0x6c, 0x12, 0x24, 0xc, 0xb, 0x4, 0x67, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x5, 0xff, 0x2, 0x8, 0xff, 0xa7, 0x6]}}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x3, 0x6, 0x3, 0x6, 0xffff, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x3, 0xfff9, 0x9, 0x7f, 0x200, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x81, 0x200, 0x5, 0x2, 0x4, 0x5, 0x7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0x36, 0x58, 0x3f, 0x36, 0x1, 0x36, 0x12, 0x6, 0x60, 0x30, 0xc, 0x5, 0xc, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeb27, 0x3992, 0xba, 0x6, 0x1, 0x3c3, 0x0, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x1, 0xf, 0x0, 0x41bc, 0x4, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x3ff, 0x7, 0x60, 0xffff, 0x6, 0x200]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x6, 0x3, 0x66, 0x0, 0x40, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0xfe0}, 0x1, 0x0, 0x0, 0xd8}, 0x4004010) syz_genetlink_get_family_id$ipvs(&(0x7f0000006180), 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000006200)) 446.292063ms ago: executing program 4 (id=118): syz_usb_connect$uac1(0x2, 0xa2, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029000000001020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000050054b57f1cd27cba"], 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002480), 0x20402, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2c020400) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x34}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x101) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r5 = epoll_create(0x7fffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xfffffffa}}, './file0\x00'}) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000280)={0x40000004}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r7) 0s ago: executing program 3 (id=119): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000a40)=""/87) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000c40)={0x20, r6, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) keyctl$session_to_parent(0x12) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r8, 0x0) unshare(0x2c020400) r9 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r9, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 85.776485][ T5820] cgroup: Unknown subsys name 'net' [ 85.905923][ T5820] cgroup: Unknown subsys name 'cpuset' [ 85.915933][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.796266][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.952766][ T43] cfg80211: failed to load regulatory.db [ 92.264161][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.265914][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.272672][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.280027][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.291396][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.293500][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.300754][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.313652][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.314473][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.321827][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.350688][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.361985][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.369654][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.381748][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.390159][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.398092][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.405827][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.413570][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.421663][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.428795][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.455579][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.463764][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.471446][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.479594][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.488978][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.098273][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 93.208887][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 93.418379][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 93.457284][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 93.497217][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 93.509523][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.517762][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.525350][ T5842] bridge_slave_0: entered allmulticast mode [ 93.533740][ T5842] bridge_slave_0: entered promiscuous mode [ 93.593851][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.601560][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.608845][ T5842] bridge_slave_1: entered allmulticast mode [ 93.616875][ T5842] bridge_slave_1: entered promiscuous mode [ 93.653796][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.661005][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.668312][ T5847] bridge_slave_0: entered allmulticast mode [ 93.676304][ T5847] bridge_slave_0: entered promiscuous mode [ 93.731445][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.738611][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.748644][ T5847] bridge_slave_1: entered allmulticast mode [ 93.756175][ T5847] bridge_slave_1: entered promiscuous mode [ 93.850031][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.862868][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.894502][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.959756][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.968405][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.976767][ T5850] bridge_slave_0: entered allmulticast mode [ 93.984668][ T5850] bridge_slave_0: entered promiscuous mode [ 93.996184][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.045797][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.053284][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.060451][ T5850] bridge_slave_1: entered allmulticast mode [ 94.068829][ T5850] bridge_slave_1: entered promiscuous mode [ 94.104977][ T5842] team0: Port device team_slave_0 added [ 94.169267][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.176602][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.184606][ T5846] bridge_slave_0: entered allmulticast mode [ 94.193232][ T5846] bridge_slave_0: entered promiscuous mode [ 94.202674][ T5842] team0: Port device team_slave_1 added [ 94.208689][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.216191][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.223810][ T5846] bridge_slave_1: entered allmulticast mode [ 94.231158][ T5846] bridge_slave_1: entered promiscuous mode [ 94.238050][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.245544][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.252845][ T5848] bridge_slave_0: entered allmulticast mode [ 94.260055][ T5848] bridge_slave_0: entered promiscuous mode [ 94.270649][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.283089][ T5847] team0: Port device team_slave_0 added [ 94.315478][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.323129][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.330525][ T5848] bridge_slave_1: entered allmulticast mode [ 94.338111][ T5848] bridge_slave_1: entered promiscuous mode [ 94.349609][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.360203][ T5834] Bluetooth: hci0: command tx timeout [ 94.368210][ T5847] team0: Port device team_slave_1 added [ 94.431521][ T5834] Bluetooth: hci1: command tx timeout [ 94.459818][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.466971][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.493625][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.501362][ T5834] Bluetooth: hci2: command tx timeout [ 94.504786][ T51] Bluetooth: hci3: command tx timeout [ 94.513357][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.522404][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.548903][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.564686][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.581606][ T51] Bluetooth: hci4: command tx timeout [ 94.607803][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.615121][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.641415][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.662222][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.674008][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.687075][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.699416][ T5850] team0: Port device team_slave_0 added [ 94.710836][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.718103][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.744478][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.792715][ T5850] team0: Port device team_slave_1 added [ 94.816078][ T5848] team0: Port device team_slave_0 added [ 94.825982][ T5848] team0: Port device team_slave_1 added [ 94.903024][ T5846] team0: Port device team_slave_0 added [ 94.944607][ T5842] hsr_slave_0: entered promiscuous mode [ 94.951184][ T5842] hsr_slave_1: entered promiscuous mode [ 94.973385][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.980470][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.007016][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.020426][ T5846] team0: Port device team_slave_1 added [ 95.040515][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.047918][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.074710][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.107426][ T5847] hsr_slave_0: entered promiscuous mode [ 95.113920][ T5847] hsr_slave_1: entered promiscuous mode [ 95.120057][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.128358][ T5847] Cannot create hsr debugfs directory [ 95.149363][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.156403][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.182955][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.208065][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.215211][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.241766][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.292617][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.299607][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.325910][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.339004][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.346113][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.373110][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.627224][ T5850] hsr_slave_0: entered promiscuous mode [ 95.634619][ T5850] hsr_slave_1: entered promiscuous mode [ 95.640994][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.649173][ T5850] Cannot create hsr debugfs directory [ 95.670758][ T5848] hsr_slave_0: entered promiscuous mode [ 95.679227][ T5848] hsr_slave_1: entered promiscuous mode [ 95.685650][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.693306][ T5848] Cannot create hsr debugfs directory [ 95.710563][ T5846] hsr_slave_0: entered promiscuous mode [ 95.718084][ T5846] hsr_slave_1: entered promiscuous mode [ 95.724508][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.732413][ T5846] Cannot create hsr debugfs directory [ 96.031577][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.045984][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.077173][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.126822][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.298531][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.316071][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.329497][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.363788][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.427519][ T51] Bluetooth: hci0: command tx timeout [ 96.449832][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.466744][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.489466][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.501423][ T51] Bluetooth: hci1: command tx timeout [ 96.508279][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.581741][ T51] Bluetooth: hci3: command tx timeout [ 96.582208][ T5834] Bluetooth: hci2: command tx timeout [ 96.630230][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.659350][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.666282][ T5834] Bluetooth: hci4: command tx timeout [ 96.679303][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.690376][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.807201][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.820315][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.841919][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.856364][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.868348][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.943993][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.956311][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.971036][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.978438][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.011078][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.018404][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.072994][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.087744][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.128485][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.135679][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.187421][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.194616][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.218937][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.256873][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.276330][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.283483][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.295106][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.302321][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.345421][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.399146][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.434077][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.441318][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.459765][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.480161][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.487342][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.515411][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.522626][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.547329][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.586003][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.593182][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.705120][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.750563][ T5842] veth0_vlan: entered promiscuous mode [ 97.791090][ T5842] veth1_vlan: entered promiscuous mode [ 97.807150][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.854091][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.887273][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.927401][ T5847] veth0_vlan: entered promiscuous mode [ 97.965827][ T5847] veth1_vlan: entered promiscuous mode [ 97.974193][ T5842] veth0_macvtap: entered promiscuous mode [ 98.006981][ T5842] veth1_macvtap: entered promiscuous mode [ 98.020430][ T5850] veth0_vlan: entered promiscuous mode [ 98.068581][ T5850] veth1_vlan: entered promiscuous mode [ 98.078715][ T5848] veth0_vlan: entered promiscuous mode [ 98.094452][ T5847] veth0_macvtap: entered promiscuous mode [ 98.124469][ T5848] veth1_vlan: entered promiscuous mode [ 98.137203][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.167622][ T5847] veth1_macvtap: entered promiscuous mode [ 98.184685][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.204060][ T5850] veth0_macvtap: entered promiscuous mode [ 98.219051][ T5850] veth1_macvtap: entered promiscuous mode [ 98.229580][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.240265][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.249331][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.258939][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.309296][ T5846] veth0_vlan: entered promiscuous mode [ 98.332956][ T5848] veth0_macvtap: entered promiscuous mode [ 98.353097][ T5846] veth1_vlan: entered promiscuous mode [ 98.360889][ T5848] veth1_macvtap: entered promiscuous mode [ 98.383405][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.429058][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.439444][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.458719][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.495054][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.505122][ T5834] Bluetooth: hci0: command tx timeout [ 98.516860][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.526604][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.537663][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.546825][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.558918][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.568115][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.577886][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.586873][ T5834] Bluetooth: hci1: command tx timeout [ 98.587328][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.608021][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.655532][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.664570][ T5834] Bluetooth: hci3: command tx timeout [ 98.670173][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.680944][ T5834] Bluetooth: hci2: command tx timeout [ 98.685024][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.695326][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.710291][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.714774][ T5846] veth0_macvtap: entered promiscuous mode [ 98.732379][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.742273][ T5834] Bluetooth: hci4: command tx timeout [ 98.762425][ T5846] veth1_macvtap: entered promiscuous mode [ 98.824249][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.833192][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.928866][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.947066][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.979171][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.009122][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.014537][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.026376][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.035472][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.037181][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.051992][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.133162][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.142518][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.257631][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.281648][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.321284][ T30] audit: type=1800 audit(1749091569.988:2): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 99.378089][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.395125][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.412871][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.422732][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.539322][ T5896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.568407][ T5896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.708917][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.742588][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.933493][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.074820][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.601335][ T5834] Bluetooth: hci0: command tx timeout [ 100.662049][ T5834] Bluetooth: hci1: command tx timeout [ 100.751536][ T5834] Bluetooth: hci2: command tx timeout [ 100.756999][ T5834] Bluetooth: hci3: command tx timeout [ 100.831241][ T5834] Bluetooth: hci4: command tx timeout [ 100.851644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.860388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.869293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.893712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.081406][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.241557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.351837][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 101.434776][ T43] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 101.452418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.600926][ T43] usb 1-1: config 0 has no interface number 0 [ 101.635117][ T43] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 101.675045][ T43] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 101.732121][ T43] usb 1-1: config 0 interface 41 has no altsetting 0 [ 101.779842][ T43] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 101.852080][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.881697][ T43] usb 1-1: Product: syz [ 101.901275][ T43] usb 1-1: Manufacturer: syz [ 101.919225][ T43] usb 1-1: SerialNumber: syz [ 101.971359][ T43] usb 1-1: config 0 descriptor?? [ 101.980463][ T5917] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.004115][ T5917] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.073951][ T5930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8'. [ 102.261973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.376693][ T5917] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.441821][ T5917] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.681384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.991975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 103.013704][ T5933] vlan2: entered promiscuous mode [ 103.018813][ T5933] erspan0: entered promiscuous mode [ 103.073213][ T5933] vlan2: entered allmulticast mode [ 103.101457][ T43] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 103.111945][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.119356][ T5933] erspan0: entered allmulticast mode [ 103.153886][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.271318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 103.283501][ T5936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10'. [ 103.399035][ T5939] capability: warning: `syz.1.7' uses 32-bit capabilities (legacy support in use) [ 103.598829][ T5945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 104.525804][ T43] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 104.548822][ T43] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 104.815519][ T43] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 104.891025][ T43] usb 1-1: USB disconnect, device number 2 [ 105.748593][ T5964] process 'syz.0.15' launched './file1' with NULL argv: empty string added [ 105.797731][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.055271][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 106.076497][ T5967] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.17' sets config #-1 [ 106.272019][ T30] audit: type=1800 audit(1749091576.948:3): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="file1" dev="tmpfs" ino=39 res=0 errno=0 [ 109.389077][ T6010] pim6reg: entered allmulticast mode [ 109.426298][ T6015] pim6reg: left allmulticast mode [ 109.479949][ T6017] xt_hashlimit: max too large, truncated to 1048576 [ 109.543786][ T6010] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 110.070850][ T5886] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.209833][ T6010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.29'. [ 110.363469][ T6010] team0: Port device geneve0 added [ 110.382839][ T5886] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.409291][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.463798][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.509485][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.540414][ T5886] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 110.569281][ T5886] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 110.596713][ T5886] usb 5-1: Manufacturer: syz [ 110.631711][ T5886] usb 5-1: config 0 descriptor?? [ 110.776899][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'. [ 110.970438][ T6026] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 111.396344][ T5886] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 111.426261][ T5886] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 111.498654][ T5886] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 111.842122][ T5886] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.937833][ T6035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.976842][ T6035] batadv_slave_0: entered promiscuous mode [ 112.017904][ T5886] usb 1-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 112.035542][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.127437][ T5886] usb 1-1: Product: syz [ 112.192334][ T5886] usb 1-1: Manufacturer: syz [ 112.247691][ T5886] usb 1-1: SerialNumber: syz [ 112.287921][ T5886] usb 1-1: config 0 descriptor?? [ 112.354750][ T5886] rndis_host 1-1:0.0: More than one union descriptor, skipping ... [ 112.455054][ T5886] usb 1-1: bad CDC descriptors [ 112.483423][ T5886] cdc_acm 1-1:0.0: More than one union descriptor, skipping ... [ 112.584432][ T5906] usb 5-1: USB disconnect, device number 2 [ 112.794144][ T6037] IPVS: Scheduler module ip_vs_ not found [ 112.847060][ T6045] syzkaller1: entered promiscuous mode [ 112.873995][ T6045] syzkaller1: entered allmulticast mode [ 113.101333][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.113124][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.173654][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.212659][ T6026] netlink: 48 bytes leftover after parsing attributes in process `syz.0.31'. [ 113.487160][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.526930][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.549590][ T43] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 113.574695][ T6059] pim6reg: entered allmulticast mode [ 113.582581][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.597103][ T6059] pim6reg: left allmulticast mode [ 113.616281][ T43] usb 2-1: config 0 descriptor?? [ 113.681681][ T6061] netlink: 'syz.4.41': attribute type 10 has an invalid length. [ 113.787016][ T6061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41'. [ 113.852158][ T6061] team0: Port device geneve0 added [ 114.094616][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 114.104684][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 114.121838][ T43] usb 2-1: USB disconnect, device number 2 [ 114.158066][ T6065] netlink: 72 bytes leftover after parsing attributes in process `syz.4.42'. [ 114.763615][ T5906] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.765237][ T6073] loop6: detected capacity change from 0 to 7 [ 114.809755][ T6073] Dev loop6: unable to read RDB block 7 [ 114.820299][ T6073] loop6: AHDI p1 p2 p3 p4 [ 114.828746][ T6073] loop6: partition table partially beyond EOD, truncated [ 114.842308][ T6073] loop6: p1 start 926365495 is beyond EOD, truncated [ 114.849689][ T6073] loop6: p2 size 47 extends beyond EOD, truncated [ 114.863119][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.873334][ T6073] loop6: p3 start 1886353253 is beyond EOD, truncated [ 114.951333][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 115.006009][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.024112][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.051330][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 115.072917][ T43] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 115.101196][ T5906] usb 4-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.118510][ T43] usb 5-1: config 0 has no interface number 0 [ 115.128424][ T43] usb 5-1: config 0 interface 89 has no altsetting 0 [ 115.136384][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 115.166229][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 115.167070][ T5906] usb 4-1: config 1 interface 0 has no altsetting 0 [ 115.201701][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.235119][ T5906] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.240786][ T6078] syz.2.49 uses obsolete (PF_INET,SOCK_PACKET) [ 115.258430][ T43] usb 5-1: Product: syz [ 115.270453][ T43] usb 5-1: Manufacturer: syz [ 115.277267][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.287942][ T5905] usb 1-1: USB disconnect, device number 3 [ 115.299535][ T6081] Zero length message leads to an empty skb [ 115.307614][ T43] usb 5-1: SerialNumber: syz [ 115.315129][ T5906] usb 4-1: Product: syz [ 115.324037][ T5906] usb 4-1: Manufacturer: syz [ 115.329264][ T5906] usb 4-1: SerialNumber: syz [ 115.402299][ T43] usb 5-1: config 0 descriptor?? [ 115.434053][ T43] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 115.445799][ T43] em28xx 5-1:0.89: Video interface 89 found: bulk [ 115.626909][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.636191][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.669350][ T5906] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 115.723948][ T977] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.804056][ T5906] usb 4-1: USB disconnect, device number 2 [ 115.890177][ T977] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.904506][ T977] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.915373][ T977] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.947161][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.965418][ T6085] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.051493][ T977] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.565198][ T43] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 116.614251][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.682895][ T43] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 116.713456][ T43] em28xx 5-1:0.89: board has no eeprom [ 116.781331][ T43] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 116.806524][ T43] em28xx 5-1:0.89: analog set to bulk mode. [ 116.844678][ T5921] em28xx 5-1:0.89: Registering V4L2 extension [ 117.094304][ T6109] FAULT_INJECTION: forcing a failure. [ 117.094304][ T6109] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.111362][ T5906] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.123928][ T5921] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 117.135181][ T5921] em28xx 5-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 117.142019][ T6109] CPU: 0 UID: 0 PID: 6109 Comm: syz.3.59 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 117.142050][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.142074][ T6109] Call Trace: [ 117.142084][ T6109] [ 117.142095][ T6109] dump_stack_lvl+0x189/0x250 [ 117.142164][ T6109] ? __pfx____ratelimit+0x10/0x10 [ 117.142200][ T6109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.142244][ T6109] ? __pfx__printk+0x10/0x10 [ 117.142287][ T6109] should_fail_ex+0x414/0x560 [ 117.142331][ T6109] _copy_to_user+0x31/0xb0 [ 117.142364][ T6109] simple_read_from_buffer+0xe1/0x170 [ 117.142395][ T6109] proc_fail_nth_read+0x1df/0x250 [ 117.142430][ T6109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.142463][ T6109] ? rw_verify_area+0x258/0x650 [ 117.142500][ T6109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.142530][ T6109] vfs_read+0x1fd/0x980 [ 117.142559][ T6109] ? __pfx___mutex_lock+0x10/0x10 [ 117.142596][ T6109] ? __pfx_vfs_read+0x10/0x10 [ 117.142621][ T6109] ? __fget_files+0x2a/0x420 [ 117.142653][ T6109] ? __fget_files+0x3a0/0x420 [ 117.142679][ T6109] ? __fget_files+0x2a/0x420 [ 117.142717][ T6109] ksys_read+0x145/0x250 [ 117.142737][ T6109] ? __fget_files+0x3a0/0x420 [ 117.142765][ T6109] ? __pfx_ksys_read+0x10/0x10 [ 117.142794][ T6109] ? do_syscall_64+0xbe/0x3b0 [ 117.142845][ T6109] do_syscall_64+0xfa/0x3b0 [ 117.142878][ T6109] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.142912][ T6109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.142935][ T6109] ? clear_bhb_loop+0x60/0xb0 [ 117.142964][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.142986][ T6109] RIP: 0033:0x7f2be138d33c [ 117.143012][ T6109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.143032][ T6109] RSP: 002b:00007f2be21d9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.143057][ T6109] RAX: ffffffffffffffda RBX: 00007f2be15b5fa0 RCX: 00007f2be138d33c [ 117.143075][ T6109] RDX: 000000000000000f RSI: 00007f2be21d90a0 RDI: 0000000000000004 [ 117.143089][ T6109] RBP: 00007f2be21d9090 R08: 0000000000000000 R09: 0000000000000000 [ 117.143110][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.143124][ T6109] R13: 0000000000000000 R14: 00007f2be15b5fa0 R15: 00007f2be16dfa28 [ 117.143160][ T6109] [ 117.316895][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 117.398046][ T5906] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.407706][ T5906] usb 3-1: config 0 has no interface number 0 [ 117.417807][ T5906] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.429222][ T5906] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.439559][ T5906] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 117.478994][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.600576][ T5905] usb 5-1: USB disconnect, device number 3 [ 117.610655][ T5905] em28xx 5-1:0.89: Disconnecting em28xx [ 117.623196][ T43] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 117.648580][ T5906] usb 3-1: config 0 descriptor?? [ 117.820643][ T6115] netlink: 'syz.3.61': attribute type 10 has an invalid length. [ 117.843472][ T5921] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 117.870019][ T5921] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 117.884625][ T6115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.899913][ T6116] netlink: 'syz.3.61': attribute type 10 has an invalid length. [ 117.903399][ T6115] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 117.936476][ T5921] em28xx 5-1:0.89: No AC97 audio processor [ 117.959844][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.61'. [ 117.969029][ T5921] usb 5-1: Decoder not found [ 118.014215][ T6107] batadv0: entered promiscuous mode [ 118.033081][ T5921] em28xx 5-1:0.89: failed to create media graph [ 118.035760][ T6104] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.57'. [ 118.050574][ T6107] vlan2: entered promiscuous mode [ 118.067734][ T5921] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 118.142537][ T5921] em28xx 5-1:0.89: Registering snapshot button... [ 118.233637][ T5921] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input6 [ 118.237261][ T6116] batadv0: entered promiscuous mode [ 118.254875][ T6116] batadv0: entered allmulticast mode [ 118.267296][ T5921] em28xx 5-1:0.89: Remote control support is not available for this card. [ 118.280893][ T5905] em28xx 5-1:0.89: Closing input extension [ 118.289483][ T6116] bond0: (slave batadv0): Releasing backup interface [ 118.310376][ T5905] em28xx 5-1:0.89: Deregistering snapshot button [ 118.322965][ T6116] bridge0: port 3(batadv0) entered blocking state [ 118.344974][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.354553][ T43] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 118.362495][ T43] usb 1-1: can't read configurations, error -71 [ 118.382365][ T6116] bridge0: port 3(batadv0) entered disabled state [ 118.415259][ T5896] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 118.425005][ T5896] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 118.486904][ T5905] em28xx 5-1:0.89: Freeing device [ 118.551412][ T5906] uclogic 0003:28BD:0071.0002: failed retrieving string descriptor #100: -71 [ 118.570291][ T5906] uclogic 0003:28BD:0071.0002: failed retrieving pen parameters: -71 [ 118.610231][ T5906] uclogic 0003:28BD:0071.0002: pen probing failed: -71 [ 118.621978][ T5906] uclogic 0003:28BD:0071.0002: failed probing parameters: -71 [ 118.629691][ T5906] uclogic 0003:28BD:0071.0002: probe with driver uclogic failed with error -71 [ 118.677508][ T5906] usb 3-1: USB disconnect, device number 2 [ 118.715598][ T5921] usb 2-1: USB disconnect, device number 3 [ 118.831427][ T5905] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.883126][ T6124] vlan2: entered promiscuous mode [ 118.888402][ T6124] erspan0: entered promiscuous mode [ 118.897709][ T6124] vlan2: entered allmulticast mode [ 118.903792][ T6124] erspan0: entered allmulticast mode [ 119.011578][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 119.023428][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.061331][ T5886] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.073429][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.085751][ T5905] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.097477][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.142257][ T5905] usb 5-1: config 0 descriptor?? [ 119.153039][ T5905] hub 5-1:0.0: USB hub found [ 119.232639][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 119.241667][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 119.263346][ T5886] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.274092][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.283843][ T5886] usb 4-1: Product: syz [ 119.288159][ T5886] usb 4-1: Manufacturer: syz [ 119.291612][ T5921] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 119.294253][ T5886] usb 4-1: SerialNumber: syz [ 119.309137][ T5886] usb 4-1: config 0 descriptor?? [ 119.331613][ T5886] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 119.366473][ T5905] hub 5-1:0.0: 1 port detected [ 119.372055][ T5886] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 119.421634][ T5906] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 119.476189][ T5921] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 119.485087][ T5921] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 119.493383][ T5921] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 119.502478][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.512773][ T5921] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 119.521749][ T5921] usb 2-1: config 0 has no interface number 0 [ 119.527973][ T5921] usb 2-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.543623][ T5921] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.553082][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.578559][ T5921] usb 2-1: Product: syz [ 119.583742][ T5921] usb 2-1: Manufacturer: syz [ 119.588594][ T5921] usb 2-1: SerialNumber: syz [ 119.602723][ T5921] usb 2-1: config 0 descriptor?? [ 119.643523][ T5906] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 119.652034][ T5906] usb 3-1: config 0 has no interface number 0 [ 119.661807][ T5906] usb 3-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 119.680655][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.690520][ T5906] usb 3-1: Product: syz [ 119.697524][ T5906] usb 3-1: Manufacturer: syz [ 119.702773][ T5906] usb 3-1: SerialNumber: syz [ 119.712858][ T5906] usb 3-1: config 0 descriptor?? [ 120.025119][ T5886] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 120.033748][ T5905] hub 5-1:0.0: activate --> -90 [ 120.053518][ T977] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.111528][ T6144] netlink: 136 bytes leftover after parsing attributes in process `syz.2.68'. [ 120.121100][ T6144] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 120.235107][ T5905] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 120.277276][ T977] usb 1-1: config 0 has no interfaces? [ 120.295845][ T977] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 120.310809][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.345372][ T977] usb 1-1: Product: syz [ 120.360490][ T977] usb 1-1: Manufacturer: syz [ 120.376865][ T977] usb 1-1: SerialNumber: syz [ 120.416862][ T5906] pl2303 3-1:0.161: required interrupt-in endpoint missing [ 120.442037][ T5906] usb 3-1: USB disconnect, device number 3 [ 120.450657][ T977] usb 1-1: config 0 descriptor?? [ 120.902671][ T5886] em28xx 4-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 120.936669][ T5886] em28xx 4-1:0.0: failed to read eeprom (err=-5) [ 120.959736][ T5886] em28xx 4-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 121.051413][ T5886] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 121.067240][ T5886] em28xx 4-1:0.0: dvb set to bulk mode. [ 121.085100][ T5906] em28xx 4-1:0.0: Binding DVB extension [ 121.122245][ T5886] usb 4-1: USB disconnect, device number 3 [ 121.179434][ T5886] em28xx 4-1:0.0: Disconnecting em28xx [ 121.302588][ T5906] em28xx 4-1:0.0: Registering input extension [ 121.324666][ T5886] em28xx 4-1:0.0: Closing input extension [ 121.358259][ T5886] em28xx 4-1:0.0: Freeing device [ 121.510506][ T6149] Unknown options in mask 5 [ 121.518279][ T6149] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.72'. [ 121.528174][ T6149] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.72'. [ 121.741866][ T5906] usb 5-1: USB disconnect, device number 4 [ 122.274875][ T5921] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 122.354673][ T5921] usb 2-1: MIDIStreaming interface descriptor not found [ 122.585114][ T5921] usb 2-1: USB disconnect, device number 4 [ 122.625315][ T6165] IPVS: Scheduler module ip_vs_ not found [ 122.864571][ T977] usb 1-1: USB disconnect, device number 6 [ 122.932605][ T6179] udevd[6179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.066095][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.224974][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 123.234276][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.243408][ T24] usb 4-1: Product: syz [ 123.260740][ T24] usb 4-1: Manufacturer: syz [ 123.286932][ T24] usb 4-1: SerialNumber: syz [ 123.339861][ T24] usb 4-1: config 0 descriptor?? [ 123.611293][ T977] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.761606][ T977] usb 1-1: device descriptor read/64, error -71 [ 124.021292][ T977] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.191327][ T977] usb 1-1: device descriptor read/64, error -71 [ 124.334418][ T977] usb usb1-port1: attempt power cycle [ 124.518476][ T24] usb 4-1: non-Atmel transceiver xxxx0008 [ 124.711396][ T977] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.746765][ T977] usb 1-1: device descriptor read/8, error -71 [ 125.019258][ T977] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 125.072396][ T977] usb 1-1: device descriptor read/8, error -71 [ 125.207665][ T977] usb usb1-port1: unable to enumerate USB device [ 125.279773][ T6212] netlink: 72 bytes leftover after parsing attributes in process `syz.4.91'. [ 125.291844][ T5906] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 125.454089][ T5906] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 125.463262][ T5906] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 125.475493][ T5906] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 125.504517][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.533861][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 125.558287][ T5906] usb 3-1: config 0 has no interface number 0 [ 125.576167][ T5906] usb 3-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.614753][ T5906] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.623814][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 125.623852][ T24] usb 4-1: Please update to version 0.2 or newer [ 125.638527][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.646735][ T5906] usb 3-1: Product: syz [ 125.647039][ T24] usb 4-1: atusb_probe: initialization failed, error = -19 [ 125.685222][ T5906] usb 3-1: Manufacturer: syz [ 125.716062][ T5906] usb 3-1: SerialNumber: syz [ 125.729573][ T5906] usb 3-1: config 0 descriptor?? [ 126.080585][ T5921] usb 4-1: USB disconnect, device number 4 [ 126.316712][ T6223] IPVS: Scheduler module ip_vs_ not found [ 126.523183][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.704991][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 126.741335][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 126.772374][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 126.778696][ T6239] vlan2: entered promiscuous mode [ 126.798995][ T6239] erspan0: entered promiscuous mode [ 126.803652][ T10] usb 2-1: config 220 has no interface number 2 [ 126.810163][ T6239] vlan2: entered allmulticast mode [ 126.815845][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 126.815879][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 126.815899][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 126.815919][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 126.819196][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 126.843590][ T6239] erspan0: entered allmulticast mode [ 126.864376][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.905859][ T10] usb 2-1: Product: syz [ 126.910132][ T10] usb 2-1: Manufacturer: syz [ 126.914842][ T10] usb 2-1: SerialNumber: syz [ 127.169648][ T10] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 127.190366][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 127.206894][ T10] usb 2-1: No valid video chain found. [ 127.218223][ T10] usb 2-1: selecting invalid altsetting 0 [ 127.249334][ T10] usb 2-1: selecting invalid altsetting 0 [ 127.256498][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 127.280119][ T10] usb 2-1: USB disconnect, device number 5 [ 127.302150][ T5921] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.441363][ T24] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 127.461223][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 127.468118][ T5921] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 127.477711][ T5921] usb 5-1: config 0 has no interface number 0 [ 127.483938][ T5921] usb 5-1: config 0 interface 12 has no altsetting 0 [ 127.486347][ T5905] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.493652][ T5921] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 127.507438][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.515645][ T5921] usb 5-1: Product: syz [ 127.519842][ T5921] usb 5-1: Manufacturer: syz [ 127.525228][ T5921] usb 5-1: SerialNumber: syz [ 127.533973][ T5921] usb 5-1: config 0 descriptor?? [ 127.604690][ T24] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 127.617633][ T24] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 127.626302][ T24] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 127.634724][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.644991][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 127.653994][ T24] usb 4-1: config 0 has no interface number 0 [ 127.661867][ T24] usb 4-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.678287][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.681557][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 127.687721][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.711698][ T24] usb 4-1: Product: syz [ 127.716512][ T5905] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 127.719455][ T24] usb 4-1: Manufacturer: syz [ 127.728541][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.743587][ T5905] usb 1-1: Product: syz [ 127.747914][ T5905] usb 1-1: Manufacturer: syz [ 127.756565][ T5905] usb 1-1: SerialNumber: syz [ 127.773344][ T24] usb 4-1: SerialNumber: syz [ 127.792943][ T24] usb 4-1: config 0 descriptor?? [ 127.802547][ T5905] r8152-cfgselector 1-1: Unknown version 0x0000 [ 127.814252][ T5905] r8152-cfgselector 1-1: config 0 descriptor?? [ 128.186276][ T5921] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 128.254490][ T5921] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 128.284776][ T5921] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 128.305204][ T43] r8152-cfgselector 1-1: USB disconnect, device number 11 [ 128.330347][ T5921] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 128.451965][ T5921] usb 5-1: USB disconnect, device number 5 [ 128.778872][ T5906] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 128.804398][ T5906] usb 3-1: MIDIStreaming interface descriptor not found [ 129.203080][ T5906] usb 3-1: USB disconnect, device number 4 [ 129.289969][ T6268] netlink: 72 bytes leftover after parsing attributes in process `syz.4.109'. [ 130.354733][ T5845] udevd[5845]: setting owner of /dev/bus/usb/003/004 to uid=0, gid=0 failed: No such file or directory [ 130.760191][ T6179] udevd[6179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.859096][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.108'. [ 133.585066][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.597281][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.810201][ T24] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 134.838015][ T24] usb 4-1: MIDIStreaming interface descriptor not found [ 135.079704][ T24] usb 4-1: USB disconnect, device number 5 [ 135.186728][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.309856][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 139.676726][ T15] sched: DL replenish lagged too much [ 194.458680][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.473366][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.471083][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 255.478107][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5848/1:b..l P6294/1:b..l P5203/1:b..l P6295/1:b..l [ 255.489845][ C0] rcu: (detected by 0, t=10503 jiffies, g=14573, q=859 ncpus=2) [ 255.497614][ C0] task:syz.0.114 state:R running task stack:28040 pid:6295 tgid:6284 ppid:5846 task_flags:0x400040 flags:0x00004000 [ 255.511914][ C0] Call Trace: [ 255.515234][ C0] [ 255.518204][ C0] __schedule+0x16f5/0x4d00 [ 255.522790][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 255.528131][ C0] ? __pfx___schedule+0x10/0x10 [ 255.533048][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 255.538382][ C0] preempt_schedule_irq+0xb5/0x150 [ 255.543546][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 255.549338][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 255.555206][ C0] irqentry_exit+0x6f/0x90 [ 255.559681][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 255.565279][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 255.570618][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 ab f7 fd 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 255.590291][ C0] RSP: 0018:ffffc9001bf5f4f0 EFLAGS: 00000206 [ 255.596410][ C0] RAX: 00bf454e8b536700 RBX: 0000000000000202 RCX: 00bf454e8b536700 [ 255.604594][ C0] RDX: 0000000000000002 RSI: ffffffff8db66a62 RDI: ffffffff8be27240 [ 255.612603][ C0] RBP: ffff88802fc58b40 R08: ffffc9001bf5f990 R09: 0000000000000000 [ 255.620621][ C0] R10: ffffc9001bf5f678 R11: fffff520037ebed1 R12: 0000000000000002 [ 255.628646][ C0] R13: 0000000000000002 R14: ffffffff8e13f060 R15: ffff88802fc58000 [ 255.636686][ C0] ? unwind_next_frame+0xa5/0x2390 [ 255.641863][ C0] ? unwind_next_frame+0xa5/0x2390 [ 255.647026][ C0] unwind_next_frame+0x19a9/0x2390 [ 255.652201][ C0] ? unwind_next_frame+0xa5/0x2390 [ 255.657374][ C0] ? __put_partials+0x161/0x1c0 [ 255.662272][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 255.668506][ C0] arch_stack_walk+0x11c/0x150 [ 255.673327][ C0] ? put_cpu_partial+0x17c/0x250 [ 255.678322][ C0] stack_trace_save+0x9c/0xe0 [ 255.683042][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 255.688474][ C0] save_stack+0xf5/0x1f0 [ 255.692767][ C0] ? __pfx_save_stack+0x10/0x10 [ 255.697652][ C0] ? __free_frozen_pages+0xc71/0xe70 [ 255.702984][ C0] ? __put_partials+0x161/0x1c0 [ 255.707896][ C0] ? page_ext_put+0x97/0xc0 [ 255.712446][ C0] __reset_page_owner+0x71/0x1f0 [ 255.717441][ C0] __free_frozen_pages+0xc71/0xe70 [ 255.722622][ C0] __put_partials+0x161/0x1c0 [ 255.727381][ C0] put_cpu_partial+0x17c/0x250 [ 255.732194][ C0] ? put_cpu_partial+0x6d/0x250 [ 255.737096][ C0] __slab_free+0x2f7/0x400 [ 255.741570][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 255.747508][ C0] ? __phys_addr+0xd3/0x180 [ 255.752065][ C0] qlist_free_all+0x97/0x140 [ 255.756706][ C0] kasan_quarantine_reduce+0x148/0x160 [ 255.762248][ C0] __kasan_kmalloc+0x22/0xb0 [ 255.766880][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 255.771780][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 255.777552][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 255.783142][ C0] ? tomoyo_domain+0xd9/0x130 [ 255.787876][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 255.793562][ C0] tomoyo_path_number_perm+0x1e8/0x5a0 [ 255.799165][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 255.805202][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 255.810637][ C0] ? __lock_acquire+0xab9/0xd20 [ 255.815568][ C0] ? __fget_files+0x2a/0x420 [ 255.820204][ C0] ? __fget_files+0x2a/0x420 [ 255.824836][ C0] ? __fget_files+0x3a0/0x420 [ 255.829566][ C0] ? __fget_files+0x2a/0x420 [ 255.834208][ C0] security_file_ioctl+0xcb/0x2d0 [ 255.839589][ C0] __se_sys_ioctl+0x47/0x170 [ 255.844385][ C0] do_syscall_64+0xfa/0x3b0 [ 255.848955][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.855067][ C0] ? __switch_to_asm+0x39/0x70 [ 255.859885][ C0] ? clear_bhb_loop+0x60/0xb0 [ 255.864610][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.870615][ C0] RIP: 0033:0x7faa6eb8e52b [ 255.875096][ C0] RSP: 002b:00007faa6f9a1060 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.883563][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faa6eb8e52b [ 255.891681][ C0] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000db [ 255.899784][ C0] RBP: 00007faa6edb6240 R08: 0000000000000000 R09: 00007faa6eedfa27 [ 255.907803][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 00007faa6edb624c [ 255.915816][ C0] R13: 0000000000000001 R14: 00007faa6eedf940 R15: 00007faa6eedfa28 [ 255.923863][ C0] [ 255.926925][ C0] task:udevd state:R running task stack:24680 pid:5203 tgid:5203 ppid:1 task_flags:0x400140 flags:0x00004002 [ 255.940471][ C0] Call Trace: [ 255.943793][ C0] [ 255.946767][ C0] __schedule+0x16f5/0x4d00 [ 255.951336][ C0] ? unwind_next_frame+0x91/0x2390 [ 255.956506][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 255.961846][ C0] ? __pfx___schedule+0x10/0x10 [ 255.966762][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 255.972103][ C0] preempt_schedule_irq+0xb5/0x150 [ 255.977266][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 255.983050][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 255.988985][ C0] irqentry_exit+0x6f/0x90 [ 255.993449][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.999487][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 256.004823][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b 0a fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 256.024482][ C0] RSP: 0018:ffffc9000f05eef8 EFLAGS: 00000206 [ 256.030602][ C0] RAX: 3247ed2acfc9eb00 RBX: 0000000000000000 RCX: 3247ed2acfc9eb00 [ 256.038618][ C0] RDX: 0000000000000000 RSI: ffffffff8db66a62 RDI: ffffffff8be27240 [ 256.046632][ C0] RBP: ffffffff81729e15 R08: 0000000000000000 R09: ffffffff81729e15 [ 256.054642][ C0] R10: ffffc9000f05f0b8 R11: ffffffff81acf710 R12: 0000000000000002 [ 256.062652][ C0] R13: ffffffff8e13f060 R14: 0000000000000000 R15: 0000000000000246 [ 256.070671][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.075842][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 256.082047][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.087246][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.092410][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 256.098131][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.103295][ C0] unwind_next_frame+0xc2/0x2390 [ 256.108294][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.113475][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.118637][ C0] ? qlist_free_all+0x97/0x140 [ 256.123456][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 256.129667][ C0] arch_stack_walk+0x11c/0x150 [ 256.134487][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 256.140178][ C0] stack_trace_save+0x9c/0xe0 [ 256.144908][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 256.150340][ C0] save_stack+0xf5/0x1f0 [ 256.154627][ C0] ? __pfx_save_stack+0x10/0x10 [ 256.159515][ C0] ? __free_frozen_pages+0xc71/0xe70 [ 256.164841][ C0] ? __put_partials+0x161/0x1c0 [ 256.169733][ C0] ? put_cpu_partial+0x17c/0x250 [ 256.174803][ C0] ? __slab_free+0x2f7/0x400 [ 256.179432][ C0] ? qlist_free_all+0x97/0x140 [ 256.184254][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 256.189951][ C0] ? page_ext_put+0x97/0xc0 [ 256.194592][ C0] __reset_page_owner+0x71/0x1f0 [ 256.199661][ C0] __free_frozen_pages+0xc71/0xe70 [ 256.204826][ C0] __put_partials+0x161/0x1c0 [ 256.209553][ C0] put_cpu_partial+0x17c/0x250 [ 256.214354][ C0] ? put_cpu_partial+0x6d/0x250 [ 256.219258][ C0] __slab_free+0x2f7/0x400 [ 256.223726][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 256.229662][ C0] ? __phys_addr+0xd3/0x180 [ 256.234207][ C0] qlist_free_all+0x97/0x140 [ 256.238857][ C0] kasan_quarantine_reduce+0x148/0x160 [ 256.244371][ C0] __kasan_kmalloc+0x22/0xb0 [ 256.249005][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 256.253896][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 256.259657][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 256.265262][ C0] tomoyo_check_open_permission+0x1c1/0x3b0 [ 256.271203][ C0] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 256.277316][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 256.283833][ C0] ? tomoyo_file_open+0x165/0x220 [ 256.288931][ C0] security_file_open+0xb1/0x270 [ 256.293931][ C0] do_dentry_open+0x35e/0x1970 [ 256.298776][ C0] vfs_open+0x3b/0x340 [ 256.302896][ C0] ? path_openat+0x2ecd/0x3830 [ 256.307714][ C0] path_openat+0x2ee5/0x3830 [ 256.312359][ C0] ? arch_stack_walk+0xfc/0x150 [ 256.317305][ C0] ? __pfx_path_openat+0x10/0x10 [ 256.322306][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.328447][ C0] do_filp_open+0x1fa/0x410 [ 256.333013][ C0] ? __lock_acquire+0xab9/0xd20 [ 256.337931][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 256.343045][ C0] ? _raw_spin_unlock+0x28/0x50 [ 256.347959][ C0] ? alloc_fd+0x64c/0x6c0 [ 256.352356][ C0] do_sys_openat2+0x121/0x1c0 [ 256.357180][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.362443][ C0] ? rcu_is_watching+0x15/0xb0 [ 256.367258][ C0] __x64_sys_openat+0x138/0x170 [ 256.372165][ C0] do_syscall_64+0xfa/0x3b0 [ 256.377297][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.383414][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 256.389632][ C0] ? clear_bhb_loop+0x60/0xb0 [ 256.394370][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.400326][ C0] RIP: 0033:0x7f98e7d15c3a [ 256.404786][ C0] RSP: 002b:00007fffbfd9de18 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 256.413255][ C0] RAX: ffffffffffffffda RBX: 0000559e05bd91c0 RCX: 00007f98e7d15c3a [ 256.421269][ C0] RDX: 0000000000090800 RSI: 0000559e05b80d50 RDI: 00000000ffffff9c [ 256.429366][ C0] RBP: 0000559e05b80d50 R08: 0000000000000000 R09: 0000000000000001 [ 256.437388][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000559e05b73780 [ 256.445505][ C0] R13: 00000000000000ff R14: 0000559df23b8be0 R15: 00007fffbfd9e0b0 [ 256.453541][ C0] [ 256.456600][ C0] task:syz-executor state:R running task stack:27752 pid:6294 tgid:6294 ppid:5847 task_flags:0x400040 flags:0x00004000 [ 256.470162][ C0] Call Trace: [ 256.473487][ C0] [ 256.476450][ C0] __schedule+0x16f5/0x4d00 [ 256.481029][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 256.486367][ C0] ? __pfx___schedule+0x10/0x10 [ 256.491275][ C0] ? __kernel_text_address+0xd/0x40 [ 256.496524][ C0] ? unwind_get_return_address+0x4d/0x90 [ 256.502216][ C0] ? arch_stack_walk+0xfc/0x150 [ 256.507121][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 256.512458][ C0] preempt_schedule_irq+0xb5/0x150 [ 256.517632][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 256.523410][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 256.529268][ C0] irqentry_exit+0x6f/0x90 [ 256.533733][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 256.539756][ C0] RIP: 0010:lock_acquire+0x58/0x360 [ 256.545001][ C0] Code: 8b 05 5c 0b fe 10 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 5f 0b fe 10 83 f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 08 c1 02 0e <73> 16 e8 f1 f1 08 00 84 c0 75 0d f6 05 43 ae ec 0d 01 0f 84 d7 01 [ 256.564658][ C0] RSP: 0018:ffffc9001bf3f3d8 EFLAGS: 00000293 [ 256.570773][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 256.578781][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13f060 [ 256.586801][ C0] RBP: ffffffff81729e15 R08: 0000000000000000 R09: 0000000000000000 [ 256.594820][ C0] R10: ffffc9001bf3f598 R11: ffffffff81acf710 R12: 0000000000000002 [ 256.602838][ C0] R13: ffffffff8e13f060 R14: 0000000000000000 R15: 0000000000000000 [ 256.610950][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.616132][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 256.622363][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.627539][ C0] ? __slab_free+0x2f7/0x400 [ 256.632275][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.637448][ C0] unwind_next_frame+0xc2/0x2390 [ 256.642439][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.647616][ C0] ? unwind_next_frame+0xa5/0x2390 [ 256.652779][ C0] ? put_cpu_partial+0x17c/0x250 [ 256.657772][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 256.663977][ C0] arch_stack_walk+0x11c/0x150 [ 256.668787][ C0] ? __slab_free+0x2f7/0x400 [ 256.673440][ C0] stack_trace_save+0x9c/0xe0 [ 256.678161][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 256.683600][ C0] save_stack+0xf5/0x1f0 [ 256.687888][ C0] ? __pfx_save_stack+0x10/0x10 [ 256.692779][ C0] ? __free_frozen_pages+0xc71/0xe70 [ 256.698115][ C0] ? __put_partials+0x161/0x1c0 [ 256.703041][ C0] ? put_cpu_partial+0x17c/0x250 [ 256.708028][ C0] ? __slab_free+0x2f7/0x400 [ 256.712782][ C0] ? page_ext_put+0x97/0xc0 [ 256.717343][ C0] __reset_page_owner+0x71/0x1f0 [ 256.722429][ C0] __free_frozen_pages+0xc71/0xe70 [ 256.727597][ C0] __put_partials+0x161/0x1c0 [ 256.732331][ C0] put_cpu_partial+0x17c/0x250 [ 256.737144][ C0] ? put_cpu_partial+0x6d/0x250 [ 256.742073][ C0] __slab_free+0x2f7/0x400 [ 256.746547][ C0] ? __phys_addr+0xd3/0x180 [ 256.751104][ C0] qlist_free_all+0x97/0x140 [ 256.755753][ C0] kasan_quarantine_reduce+0x148/0x160 [ 256.761271][ C0] __kasan_slab_alloc+0x22/0x80 [ 256.766199][ C0] __kmalloc_noprof+0x224/0x4f0 [ 256.771102][ C0] ? tomoyo_encode+0x28b/0x550 [ 256.775917][ C0] tomoyo_encode+0x28b/0x550 [ 256.780555][ C0] tomoyo_path_perm+0x2b3/0x4b0 [ 256.785465][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 256.790541][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 256.796011][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 256.802223][ C0] ? lookup_one_qstr_excl_raw+0x126/0x280 [ 256.808013][ C0] tomoyo_path_symlink+0xa3/0xe0 [ 256.812999][ C0] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 256.818681][ C0] ? __pfx_filename_create+0x10/0x10 [ 256.824027][ C0] security_path_symlink+0x177/0x380 [ 256.829366][ C0] do_symlinkat+0x107/0x3f0 [ 256.833933][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 256.839003][ C0] ? getname_flags+0x1e5/0x540 [ 256.843833][ C0] __x64_sys_symlinkat+0x95/0xb0 [ 256.848818][ C0] do_syscall_64+0xfa/0x3b0 [ 256.853381][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.858637][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.864743][ C0] ? clear_bhb_loop+0x60/0xb0 [ 256.869478][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.875511][ C0] RIP: 0033:0x7f2a1198dea7 [ 256.879986][ C0] RSP: 002b:00007f2a11cdfda8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 256.888447][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2a1198dea7 [ 256.896636][ C0] RDX: 00007f2a11a12308 RSI: 00000000ffffff9c RDI: 00007f2a11cdfe40 [ 256.904662][ C0] RBP: 00007f2a11cdfdec R08: 0000000000000017 R09: 00007f2a11cdfaf7 [ 256.912688][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000015 [ 256.920709][ C0] R13: 00000000000927c0 R14: 000000000002106c R15: 00007f2a11cdfe40 [ 256.928749][ C0] [ 256.931806][ C0] task:syz-executor state:R running task stack:21832 pid:5848 tgid:5848 ppid:5829 task_flags:0x400140 flags:0x00004002 [ 256.945407][ C0] Call Trace: [ 256.948727][ C0] [ 256.951703][ C0] __schedule+0x16f5/0x4d00 [ 256.956290][ C0] ? preempt_schedule_common+0x83/0xd0 [ 256.961844][ C0] ? __pfx___schedule+0x10/0x10 [ 256.966754][ C0] ? do_raw_spin_lock+0x121/0x290 [ 256.971857][ C0] ? preempt_schedule+0xae/0xc0 [ 256.976762][ C0] preempt_schedule_common+0x83/0xd0 [ 256.982102][ C0] preempt_schedule+0xae/0xc0 [ 256.986869][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 256.992393][ C0] preempt_schedule_thunk+0x16/0x30 [ 256.997664][ C0] _raw_spin_unlock+0x3f/0x50 [ 257.002573][ C0] ? copy_pmd_range+0x66f1/0x7000 [ 257.007645][ C0] copy_pmd_range+0x6727/0x7000 [ 257.012541][ C0] ? arch_stack_walk+0xfc/0x150 [ 257.017480][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 257.022753][ C0] copy_page_range+0xc46/0x1270 [ 257.027659][ C0] ? __lock_acquire+0xab9/0xd20 [ 257.032591][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 257.038371][ C0] ? up_write+0x1c4/0x420 [ 257.042751][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 257.049574][ C0] dup_mmap+0xf57/0x1ac0 [ 257.053884][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 257.058619][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 257.064552][ C0] ? mm_init+0xd20/0xf50 [ 257.068856][ C0] copy_mm+0x13c/0x4b0 [ 257.072973][ C0] copy_process+0x1706/0x3c00 [ 257.077710][ C0] ? copy_process+0x97f/0x3c00 [ 257.082532][ C0] ? __pfx_copy_process+0x10/0x10 [ 257.087623][ C0] kernel_clone+0x21e/0x870 [ 257.092187][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 257.097290][ C0] __x64_sys_clone+0x18b/0x1e0 [ 257.102132][ C0] ? count_memcg_event_mm+0x21/0x260 [ 257.107645][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 257.113036][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 257.118404][ C0] ? do_syscall_64+0xbe/0x3b0 [ 257.123211][ C0] do_syscall_64+0xfa/0x3b0 [ 257.127771][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.133021][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.139134][ C0] ? clear_bhb_loop+0x60/0xb0 [ 257.143878][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.149815][ C0] RIP: 0033:0x7f2be1385193 [ 257.154270][ C0] RSP: 002b:00007f2be16dfca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 257.162733][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2be1385193 [ 257.170752][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 257.178763][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 257.186777][ C0] R10: 000055556f4ae7d0 R11: 0000000000000246 R12: 0000000000000000 [ 257.194791][ C0] R13: 00000000000927c0 R14: 000000000002107a R15: 00007f2be16dfe40 [ 257.202824][ C0] [ 257.205880][ C0] rcu: rcu_preempt kthread starved for 9851 jiffies! g14573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 257.217025][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 257.227044][ C0] rcu: RCU grace-period kthread stack dump: [ 257.233003][ C0] task:rcu_preempt state:R running task stack:26824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 257.246556][ C0] Call Trace: [ 257.250110][ C0] [ 257.254158][ C0] __schedule+0x16f5/0x4d00 [ 257.258739][ C0] ? schedule+0x165/0x360 [ 257.263124][ C0] ? __pfx___schedule+0x10/0x10 [ 257.268042][ C0] ? schedule+0x91/0x360 [ 257.272351][ C0] schedule+0x165/0x360 [ 257.276647][ C0] schedule_timeout+0x12b/0x270 [ 257.281547][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 257.286966][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 257.292911][ C0] ? __pfx_process_timeout+0x10/0x10 [ 257.298320][ C0] ? prepare_to_swait_event+0x341/0x380 [ 257.303936][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 257.308873][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 257.315103][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 257.320467][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 257.325737][ C0] ? finish_swait+0xcd/0x1f0 [ 257.330392][ C0] rcu_gp_kthread+0x99/0x390 [ 257.335045][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 257.340319][ C0] ? __kthread_parkme+0x7b/0x200 [ 257.345308][ C0] ? __kthread_parkme+0x1a1/0x200 [ 257.350421][ C0] kthread+0x711/0x8a0 [ 257.354641][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 257.359906][ C0] ? __pfx_kthread+0x10/0x10 [ 257.364555][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.369983][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.375268][ C0] ? __pfx_kthread+0x10/0x10 [ 257.379917][ C0] ret_from_fork+0x3f9/0x770 [ 257.384579][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 257.389753][ C0] ? __switch_to_asm+0x39/0x70 [ 257.394561][ C0] ? __switch_to_asm+0x33/0x70 [ 257.399383][ C0] ? __pfx_kthread+0x10/0x10 [ 257.404025][ C0] ret_from_fork_asm+0x1a/0x30 [ 257.408851][ C0] [ 257.411907][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 257.418286][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 257.429613][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.439712][ C0] RIP: 0010:__local_bh_enable_ip+0x135/0x1c0 [ 257.445754][ C0] Code: 8b e8 9f 2e df 09 65 66 8b 05 8f 9b 16 11 66 85 c0 75 5a bf 01 00 00 00 e8 a8 32 0b 00 e8 d3 43 42 00 fb 65 8b 05 6b 9b 16 11 <85> c0 75 05 e8 a2 f1 ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 257.465408][ C0] RSP: 0018:ffffc900000069e0 EFLAGS: 00000282 [ 257.471528][ C0] RAX: 0000000080000101 RBX: 0000000000000200 RCX: cc4624faeb996f00 [ 257.479540][ C0] RDX: 0000000000000000 RSI: ffffffff8d979f2e RDI: ffffffff8be27240 [ 257.487553][ C0] RBP: ffffc90000006a70 R08: ffffffff8fa0f5f7 R09: 1ffffffff1f41ebe [ 257.495567][ C0] R10: dffffc0000000000 R11: fffffbfff1f41ebf R12: ffffffff894c1d1e [ 257.503587][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000000d3c [ 257.511599][ C0] FS: 0000000000000000(0000) GS:ffff888125c5c000(0000) knlGS:0000000000000000 [ 257.520569][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.527283][ C0] CR2: 00007f2a11a4db24 CR3: 00000000310c0000 CR4: 00000000003526f0 [ 257.535385][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.543413][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.551448][ C0] Call Trace: [ 257.554799][ C0] [ 257.557681][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 257.563461][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 257.568617][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 257.573866][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 257.579032][ C0] __dev_queue_xmit+0x1cd7/0x3a70 [ 257.584113][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 257.589282][ C0] ? synproxy_pernet+0x23/0x240 [ 257.594175][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 257.599594][ C0] ? __asan_memset+0x22/0x50 [ 257.604234][ C0] ? ipv6_synproxy_hook+0x297/0xda0 [ 257.609489][ C0] ? __lock_acquire+0xab9/0xd20 [ 257.614399][ C0] ? ip6_finish_output+0x234/0x7d0 [ 257.619554][ C0] ? ip6_finish_output+0x234/0x7d0 [ 257.624714][ C0] ? ip6_finish_output2+0xf99/0x16a0 [ 257.630051][ C0] ip6_finish_output2+0x11bc/0x16a0 [ 257.635305][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 257.640651][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 257.646246][ C0] ? ip6_mtu+0x7d/0x3f0 [ 257.650445][ C0] ? ip6_mtu+0x7d/0x3f0 [ 257.654645][ C0] ip6_finish_output+0x234/0x7d0 [ 257.659632][ C0] synproxy_send_tcp_ipv6+0x4c1/0x680 [ 257.665059][ C0] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 257.671107][ C0] ? __build_skb_around+0x257/0x3e0 [ 257.676454][ C0] ? synproxy_send_client_synack_ipv6+0x34f/0xca0 [ 257.682914][ C0] ? skb_put+0x11b/0x210 [ 257.687204][ C0] synproxy_send_client_synack_ipv6+0x80e/0xca0 [ 257.693510][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 257.700320][ C0] ? nft_tproxy_eval+0x1af4/0x1c00 [ 257.705486][ C0] ? synproxy_pernet+0x45/0x270 [ 257.710409][ C0] nft_synproxy_eval_v6+0x36e/0x560 [ 257.715666][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 257.721441][ C0] ? nf_ip_checksum+0x13c/0x510 [ 257.726353][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 257.731639][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 257.737413][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 257.742855][ C0] nft_do_chain+0x409/0x1920 [ 257.747502][ C0] ? ip6t_do_table+0x1376/0x1560 [ 257.752492][ C0] ? nf_nat_inet_fn+0x924/0xba0 [ 257.757578][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 257.762655][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 257.767582][ C0] ? nf_nat_ipv6_fn+0x21d/0x2d0 [ 257.772488][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 257.777751][ C0] nft_do_chain_inet+0x25d/0x340 [ 257.782734][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 257.788237][ C0] ? nf_nat_ipv6_local_in+0x14f/0x650 [ 257.793671][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 257.799451][ C0] ? NF_HOOK+0x9a/0x3a0 [ 257.803658][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 257.809176][ C0] nf_hook_slow+0xc2/0x220 [ 257.813646][ C0] NF_HOOK+0x206/0x3a0 [ 257.817771][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 257.823193][ C0] ? NF_HOOK+0x9a/0x3a0 [ 257.827412][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 257.832067][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 257.837502][ C0] ip6_input+0x16a/0x270 [ 257.841791][ C0] ? ip6_input+0x23/0x270 [ 257.846175][ C0] NF_HOOK+0x309/0x3a0 [ 257.850287][ C0] ? skb_orphan+0xaf/0xd0 [ 257.854685][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 257.859936][ C0] ? NF_HOOK+0x9a/0x3a0 [ 257.864142][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 257.868794][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 257.874061][ C0] __netif_receive_skb+0xd3/0x380 [ 257.879578][ C0] ? process_backlog+0x2d5/0x14f0 [ 257.884647][ C0] process_backlog+0x60e/0x14f0 [ 257.889553][ C0] ? __pfx_process_backlog+0x10/0x10 [ 257.894982][ C0] ? do_raw_spin_lock+0x121/0x290 [ 257.900142][ C0] __napi_poll+0xc7/0x480 [ 257.904528][ C0] ? net_rx_action+0x46d/0xe30 [ 257.909428][ C0] net_rx_action+0x707/0xe30 [ 257.914082][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 257.919270][ C0] handle_softirqs+0x283/0x870 [ 257.924097][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 257.928923][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 257.934269][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 257.939522][ C0] __irq_exit_rcu+0xca/0x1f0 [ 257.944169][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 257.949434][ C0] irq_exit_rcu+0x9/0x30 [ 257.953725][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 257.959410][ C0] [ 257.962379][ C0] [ 257.965363][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 257.971397][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 257.977178][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 75 23 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 257.996842][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 258.002960][ C0] RAX: cc4624faeb996f00 RBX: ffffffff81976078 RCX: cc4624faeb996f00 [ 258.010975][ C0] RDX: 0000000000000001 RSI: ffffffff8d979f2e RDI: ffffffff8be27240 [ 258.018991][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 258.027005][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0f5f0 [ 258.035053][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 258.043078][ C0] ? do_idle+0x1e8/0x510 [ 258.047466][ C0] default_idle+0x13/0x20 [ 258.051835][ C0] default_idle_call+0x74/0xb0 [ 258.056634][ C0] do_idle+0x1e8/0x510 [ 258.060747][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 258.066944][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.072194][ C0] ? __pfx_do_idle+0x10/0x10 [ 258.076832][ C0] ? do_idle+0xa/0x510 [ 258.080936][ C0] cpu_startup_entry+0x44/0x60 [ 258.085742][ C0] rest_init+0x2de/0x300 [ 258.090029][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 258.095624][ C0] start_kernel+0x47d/0x500 [ 258.100184][ C0] x86_64_start_reservations+0x24/0x30 [ 258.105684][ C0] x86_64_start_kernel+0x143/0x1c0 [ 258.110840][ C0] common_startup_64+0x13e/0x147 [ 258.115841][ C0] [ 260.134353][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.148738][ T1300] ieee802154 phy1 wpan1: encryption failed: -22