last executing test programs: 8.974374585s ago: executing program 1 (id=59): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001900010026"], 0x50}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x3c) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r8, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) 7.321028382s ago: executing program 1 (id=65): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) pwritev2(r0, 0x0, 0x0, 0x9, 0x1, 0x1c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) open(&(0x7f0000000340)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x80040, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000500)={0xffffffffffffffff, r6, 0xfffffffd}) write(r4, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r3, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xfffffefc, 0xffdffff8, 0x8, 0x15, "000000000000000000000000000000f30200"}) r7 = syz_open_pts(0xffffffffffffffff, 0x61c0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) mount$bpf(0x0, 0x0, 0x0, 0x4905061, &(0x7f0000000100)=ANY=[@ANYBLOB="7569ce8f", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x4000010) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000055}, 0x20040080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000c3000200ffffffff9500000000000000cc608dbf3931298274a4"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 6.30472737s ago: executing program 1 (id=68): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'vlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000004c0)=0x3) r4 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000640)=@svm={0x0, 0x1, 0x1080, {0xffff1000}, {"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"}}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"49841ada71cfe011e10532489ef0a3127f9f67568978975321ebdb7108d333a8df648f920da594ae3a327a3f1292465c016dbc5261414bd85acd87473d61390f4bbded57a902b5deb9c23c641914f6b147db6146e946ce31b52ff43219cbc1574ebc8f47d0d2a02b89dc02c49f25471af4f2435dd40d0481fe6f0124e4aa9849c9b8358074976ba0dd502c77e65623e41c8ce041fe7058274e54be3d84f5aa382e9032df7a279d491a51e7480061ebb983305b23e584f6b47af6d615b2f0a182d7c0095f222a4a176472ebbd1021d2eb285ff99ea7601c4e25ecd4c055c59c3964e30b2f8567d69324b6828cc0e9c3528f1f4e27527d98bca370c165bfd88348ca0eb405029367247b738c6cce89e3efd4479d8f2fc7dbd015046860acb8a71106b920b09e661065bf765a03317feb4f54d4382ac41850982313319363b14557a5b8a18d60e425b3db6bcd35b03c810c9d398c9d91902878258419a4b02fc4bdc3b69da6c5c27f5a507005a24a3fef74f0b287c3a4cd1517537dc8cf5cf0efd75c11e803e972ecc24c500cc49001f231f74f7120f55004d5621655ba535c8c8a91d2fec5656526974aef9f08d835f6c3c7c570d047312da759708349121ee9f7078926baa412b4ae8076f6b7f2bf46ffe08878e0281bb42ace8eca796933daf7f65530e30eb6b0695a450e50aea20fcabb5fca187f8ee62b93dee581774cefb953b396e5b8a1e3cc1062b001082aa5a434d9f03407c4239d0fcb779eba5a32f473d142ac92042c2b140f12a0181a4d98a0a5a1c80de2363a80dfc365d26e0332ee63e84500f086fffded2d72500cfb5b3b16aefef5d5808f29e1c572df8af9ca90b714fe6c71a1097e58ccb7945341445d2a0c271f5d15a1462be10d757de7cfd980459469387c5049cebcdb62a24cf04418634944354b4690d4974a26ca113eefe5a71b23aa2fbd989f7b6fcf490ed465f219e70b3397dbc63e21b9d3998c4580570c40a2e75cb6845b34236f5a38dde94ae6fac7a994b21e829bdb618b0910b71608ed7893bc927afa06b1d08d18f684d7972e5467ddfebe1982924658db3e5aee3e443f1cd7017d7a27e6e2620673e9afd67c69ae555ec3e67863f1a9ac7d653d38125f51db870ffa8887c08c455a536d70ea0cae525218e8d06865b553b17bacd52630e4765af1036c834e96c193523d8b3bc399ac296fbe53ed4bd454c669f01cb0915cf9fc03b54d93fbc37ace112d4643c64842b60ee6b979703b6448fe7ddaab8d2fc2d417a12f138d61cc3ca311aa09adbad1a0647a62208ca7f9f2a9e6a6c42e6ae926b15d094886a7d6ae787c8238ab4c235541b1432b9e9407d18a0399dfa98b8ee84ccbe16bf8c30e7cf7071ab10eb8ffb0334d2b91135e3294efd14dd06db46be1032a472cdd54bd015f2937fe3d7d691fa9d0b55a0d5d17a9"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e0c09031001"], 0xf) 6.163510081s ago: executing program 0 (id=69): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) socket(0x10, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="3f000000010000", 0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe770, 0x80, 0x2, 0x1e9}, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000004c0)=[{&(0x7f0000000300)="2155a33e976a70223d89f35d5d8023494586f4370e5e082213f9d2b8056abc905606160290fdf23ba4e8de2d8e2969d76b65d8313f63ae628f32eb2f6cffe4af09c75e6e685c48b273c7d2d835f8edcdc01073351baadfec8dbda287be2d4b93210a6e24b1124a9ac30965eebb690ad91b79d8a95a323d19c2b99f6ea3f47e5b44d920632c3cdafb276da602ad2f6019a6e2723483151a25a81a5da19f41f750731b980000000000000002ffe6", 0xad}, {&(0x7f0000000280)="be49ab8ec732910597b953ab8e40106e77bcbee533e4a5f0daa4", 0x1a}, {&(0x7f0000000400)="df028194aedf589a815dbd6ccf8151d2fd38a54cd56e4f20c00d25df7501095ebcf421182ecfe881f4073fc7d130a5a18feeee3f381d21058d4d312b6aca56bd245ce6fee3a7dc6cb6aa83661bd755ed87c2058c3a2568ed5c6471b841edbfe26c508d7777ecdac1b86ed5e93935ceb9831d30508aa3e823eccdf159c5ee0956cff06a17935b54e261739af8b81b5ae793d02c4920a994908699237532522c5375674659f3dfb8bb16af81c6fa4bd5", 0xaf}], 0x3, 0xa) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0x980903, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 5.634846918s ago: executing program 2 (id=71): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x387acc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x100089}]}]}]}, 0x40}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000003ffffffffffff86dd60ecff8000481100fe8000000000000000000000000000bbff02000000000000000000000000000100004e220048907804000000000000007d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb0558fc99fa615e832d5f00ce4a5807ebb53fbfc8f4dcf957dbdc946000000000000"], 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x5, r3, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r4, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) 4.93991603s ago: executing program 1 (id=72): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) pwritev2(r0, &(0x7f0000000740)=[{&(0x7f0000000100)="3f6c5b761046b0a77db63c34e13408e27fcea6c7605a226d926b187e4d85c6dc144795bcb7eb57aa924187b4915c60848ced868e669e7383365c1b98ccdf87f4db91bf74c981a25caf0102470956f6b38a96d397cb995a13c9f1c474091c01e8c3c09a356e7dac9e7405acd7d332ba3fbb177cd8b2ffba8cc8d01264085fa41b35c651a946b8f2034baaa01bc5c5b1179e2e6e82dc3f059c52451ba5abc1", 0x9e}, {&(0x7f00000003c0)="87348b520f8a493ad8a047181df6537bdb1a05021f46d8199da66dd518ae99529927d7ba3d466263445843914d169d37b43a394b7f72563bb2b3f4d7d82ce7f5fd8465297d841e964f9ebefcab497fd319e92f52", 0x54}, {&(0x7f00000005c0)="f92c1e79acd0f7cdc8d83328244f9958c71163a4241e65d197e16cc0f83b426f50b2e198556fb3093a6c773014485fa3d250498d3c37886f01e28967891c211476b81d48e0d8c0e00a702dc058b1ea7a3379e60ec24f132994e5e71486e475fbd0bc45120c98a1f481eeed303a49c3715c922f20115a81e65ff34d2b6d903525677b13dc5a7a0dcf0d9fefab6f10ac3943b6fa40", 0x94}, {&(0x7f0000000540)="2f3a267f685a2d1298bed1b1df1e89e1fd29af64d0999594571ec52aa9ef8d2142b7d0ee618cd40d6c820d028cd41af19d307be674027c1096e85f739afb383cde82b296fa62d3e85d13dc0ba6", 0x4d}], 0x4, 0x9, 0x1, 0x1c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) open(&(0x7f0000000340)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x80040, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000500)={0xffffffffffffffff, r6, 0xfffffffd}) write(r4, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r3, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xfffffefc, 0xffdffff8, 0x8, 0x15, "000000000000000000000000000000f30200"}) r7 = syz_open_pts(0xffffffffffffffff, 0x61c0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) mount$bpf(0x0, 0x0, 0x0, 0x4905061, &(0x7f0000000100)=ANY=[@ANYBLOB="7569ce8f", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x4000010) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000055}, 0x20040080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000c3000200ffffffff9500000000000000cc608dbf3931298274a4"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 4.616764799s ago: executing program 0 (id=73): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xd1, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x52, 0x4800, 0x5c07, {0x3, 0x1}, {0x7, 0x2}, @rumble={0x81, 0xd}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x58, 0x0, r2, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000440)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x1, 0x4f4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x20}}}, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0xff600000, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 4.441973814s ago: executing program 3 (id=74): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x17c, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6d}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfffd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xeefb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x98b}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r1 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r1, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x42, '\x00', @buffer={"01bafa6c508131f7c158db180015b4d676632457dad1eea8176fd41e95e7c393", 0x20}, 0x7f}, {0x46, '\x00', @buffer={"f0428f907e136f88feca46b30d8f712e9e82219394541702637c5417d4cab882", 0x20}, 0x3}]}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4040054) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0x0, 0x85, 0x2, 0x0, &(0x7f0000000780), 0x14fffffe) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = open(0x0, 0x642c0, 0x46) truncate(&(0x7f00000000c0)='./bus\x00', 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) set_thread_area(&(0x7f0000000040)={0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) finit_module(r4, 0x0, 0x1) 3.876364328s ago: executing program 0 (id=75): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000808510000006000000180000000000000000000000000200006600020000000000180000000000000000000000000000009500000000000000870300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0x0, 0x0, 0x0, 0xee00, 0x100, 0x1ff}, 0x0, 0x0, 0x8, 0x6, 0x0, 0x6b, 0x3, 0x100, 0x1, 0x5, r2, r2}) r3 = socket(0x1d, 0x2, 0x6) r4 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={[&(0x7f00000000c0)='%]\x00', &(0x7f0000000140)=')/:\x00']}, &(0x7f0000000400)={[&(0x7f0000000280)='\x00', &(0x7f0000000340)='{,\x00', &(0x7f00000003c0)='/dev/snd/timer\x00']}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c0388"]) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r3) 3.784593456s ago: executing program 2 (id=76): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) pwritev2(r0, 0x0, 0x0, 0x9, 0x1, 0x1c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) open(&(0x7f0000000340)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x80040, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000500)={0xffffffffffffffff, r6, 0xfffffffd}) write(r4, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r3, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xfffffefc, 0xffdffff8, 0x8, 0x15, "000000000000000000000000000000f30200"}) r7 = syz_open_pts(0xffffffffffffffff, 0x61c0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) mount$bpf(0x0, 0x0, 0x0, 0x4905061, &(0x7f0000000100)=ANY=[@ANYBLOB="7569ce8f", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x4000010) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000055}, 0x20040080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000c3000200ffffffff9500000000000000cc608dbf3931298274a4"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 3.754553851s ago: executing program 1 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 3.333374096s ago: executing program 1 (id=78): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@rand_addr=0x64010101, @multicast1, 0x0, "c6c0e6ed8755b5dc4e0e000c58ea00000000000600", 0x0, 0xfffffffe, 0x2, 0x4}, 0x3c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)="b2d311af94b883a7c917af570ae7b1e843a0a788f69d7891ade96769393efc8056a6f002e30c8d84568d737b56856a562c77400d2763599c42c39c2c346641f570afdc53d009685de5793fa1d5eece360b7f7647069f8c0e53a28126b06a6b5e797d92fc70f0bbf7cf41ac7523191c55decb8e836ebd8eba368cc270864fb703f797122b8690d189cd617620b20d0a9b8796") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fspick(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x54) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) connect$packet(r5, &(0x7f00000003c0)={0x11, 0x12, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002e00090027bd700000000000040000004500118031f9e05e2f826cfc31dc2af824704f63dac994ce01dc7224e5479795b50d9015743a8b755e02e490bdfc3da898257de5b8996dbc932b5009df63b75f105c53ead0000000acc652da811ec41bc62fcd1ece064007233e937838ec6dd310243bb25df3f3da4035c973b36db7eee41680503e9a85319b6cde33bdcbed0f57b013b4c015dd521107a0df866951fe5769bce047be17f072233a9eb9244fd8d9ecd9ec5c3acf4bf2d9cd7209000000c3eb0e5d2c2ae6227b44019352854167792e1dacdee31a98d2591ced646e3ae8"], 0x5c}, 0x1, 0x0, 0x0, 0x42805}, 0x0) 2.929880309s ago: executing program 0 (id=79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) r3 = socket(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0x42, 0x4, 0x270, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x1dc, 0x1dc, 0x1dc, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x1, {0x2}}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24}}, {{@ip={@broadcast, @remote, 0x0, 0xffff00, 'batadv0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x1231e48dc931f0a2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x25, 0x1}, {0x0, 0xfc}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2cc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = io_uring_setup(0x1781, &(0x7f0000000140)={0x0, 0x5dda, 0x40, 0x0, 0x268}) r5 = socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') read$FUSE(r7, &(0x7f0000003680)={0x2020}, 0x2020) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x9b, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x3000000, 0x10, r4, 0x10000000) socket$key(0xf, 0x3, 0x2) 2.823080492s ago: executing program 2 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f000008c000/0x3000)=nil], 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf25890000000800", @ANYRES32=r1, @ANYBLOB="10001d800c0000800600050095207c00"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24008401) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x48184}, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2300f727102867454d8500010000fddbdf25250000000e0001006e6574646510e1466d0000000f0002006e657464"], 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_io_uring_setup(0x47e0, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0x130}, &(0x7f0000000500), &(0x7f0000000340), &(0x7f0000000640)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x400, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) close(r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x40) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) 2.821945165s ago: executing program 3 (id=81): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) socket(0x10, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="3f000000010000", 0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe770, 0x80, 0x2, 0x1e9}, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000004c0)=[{&(0x7f0000000300)="2155a33e976a70223d89f35d5d8023494586f4370e5e082213f9d2b8056abc905606160290fdf23ba4e8de2d8e2969d76b65d8313f63ae628f32eb2f6cffe4af09c75e6e685c48b273c7d2d835f8edcdc01073351baadfec8dbda287be2d4b93210a6e24b1124a9ac30965eebb690ad91b79d8a95a323d19c2b99f6ea3f47e5b44d920632c3cdafb276da602ad2f6019a6e2723483151a25a81a5da19f41f750731b980000000000000002ffe6", 0xad}, {&(0x7f0000000280)="be49ab8ec732910597b953ab8e40106e77bcbee533e4a5f0daa4", 0x1a}, {&(0x7f0000000400)="df028194aedf589a815dbd6ccf8151d2fd38a54cd56e4f20c00d25df7501095ebcf421182ecfe881f4073fc7d130a5a18feeee3f381d21058d4d312b6aca56bd245ce6fee3a7dc6cb6aa83661bd755ed87c2058c3a2568ed5c6471b841edbfe26c508d7777ecdac1b86ed5e93935ceb9831d30508aa3e823eccdf159c5ee0956cff06a17935b54e261739af8b81b5ae793d02c4920a994908699237532522c5375674659f3dfb8bb16af81c6fa4bd5", 0xaf}], 0x3, 0xa) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0x980903, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 2.744790114s ago: executing program 2 (id=82): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r1, 0x11, 0xd, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x3c, r3, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x4004) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) 2.671853535s ago: executing program 2 (id=83): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001900010026"], 0x50}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x3c) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r8, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) 1.434302593s ago: executing program 3 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) mq_timedsend(r2, &(0x7f0000000dc0)="2437e3486921f15778973ebebd7f54803ef64e6c6bf31be0b5ccce941d4810859b4cab4c02e9955b5997d1d69e221e78d7c39fb2e76869cb52eba1238dcccb1e107283bfe8be17117a286ee102a8a44cb622b44381dad2c38f538552dd325414b0962c3c6a90a291c1a3439fa6addd50231198424ff4ca6b503f06bf205b559d8454dafbf367813f569a51eef23e8029b25e7c9cb36df862da0f9a684916ee7506831ce69d5e8329667ae545a3b66f6e1efa82258e6c7cdec7d254d221002e77e4e42b79e1aa2c701ec909531fe3b2ba0c1723bbe0bf8b0a3d9ce9e34b4e516248b0d10e9b670b3ff8f70f6ddf0ffcf91e668b1c72e95454efcf60bf0c5e1fffda1447ef515d43422b4843dc23f150367f3a7fffb22a0cd0f791e4a5772d4d2e4b685a80e873e871a26de9b21bd14ba463a0e0630dca3d6c69ad49ddb7d369b1ad507a6e2ce7afb7fde0e93ba479fe54bcfd052588abbdeec4144dd2059425175f56ede9dd7b4e7dff2718f6fd3b18a86f0200013e5f69ef5b22ae4045a2cada1afbff81d5fd1580a85b6b109ff1c47766fb1e3a8d55d4cfdec29b2211af8fea33df666b531eb3e97cc9878ba1cb81bd5825af4033cf092c0be0db6c16b61a7fe12a73550e989bea056cd82f52b70fac16067972649d662c7d7c652f281932198e6c8c71ce6081060776c5d311b1edf37e57a72f9940ce8e21b6db2d35e6499e04a68db1d8ab599d9c12fff6828cabab100adfbebae6c2271f2a66ec5fc7d9cace4d461198ed9079231762480bbf989a159273353cb5eaa64926fff1fe92036295b0b1589827aaf77c06241abb6690e5b0e9cb86d4a3db8a47bf97e9e4b05c228ba0456f467a03368503d20a525a14630eadc358dcf85b034acdbc353f0ec0b3f41b4e03ebd4bbc2872cf94c63641aa29db9ade7ea3fc9686b4a7ef8dd6b10d4eae9bb07f8a5664ef74da39ecab5fc450ce823e74525e2433c021c65bef5e0315484611ad1d661cad04e80811af3073e90796dc349d903ec2a0c2bf88ba7559400f0026cdae6ddbcc7ce6a576da942e5780b0840dec6c35c16a2df0eea0027f3779a3e458d1d6a350907fc7ee4a454679986cb1c1e55892070f1e421f7b1038f903b83c169e757e1f1287d86cf1281e5e1f10826d124f8ce150cfbae975d22e04ae7a10f9d48f4e39e5893df00fa8b22c821cc2441ed7b9ac6ddc63079da666af9f8d81de318e607d28b9bbadb34e7dc5c0a9ff799534afbc76aa84a379f8860cc682eabcbc46afd713380d8078bb32454d57f5cce28412570d00ab120cd15c8f31828d9ce99f6c64955862372dbbfccd2ef0e43b3b6932b634520a932efcd5b9bf9d1006294a3e16b54f81aa0d79d50345486a07a3bc5bded7e8ec624e5cd213990fa43c05f5aab47961ccbea4f1ebb8f1f2b90c2aeb6bc7e63f07c07fc9376c5de765c5e92b040259d2e80d96bbd7f1826db721496497516e4741235ff2435920cdbdab4ba3f8e8d492037d9065d1a950aaee85ed014d45e5657a69f022c10526e62d687522a0044dae00c5f8450a038f1163a506bd6169a7986c8c549998fc856d3a4cf9b8a17acc6d448bc24867675d9b69303a63f05313977fb82b4feb529a21c38e52acc6e122ab3b409cf3a9ef3409e6b60b66bb32371247e6a0aed48d4052d18837820bd2b94eac517b0b2c5b1bf9efc7da9233e86e03e6ad3cffe4b6c185e55bdb6ec192e354f73034753db095e52adf8bd97edae278a3828618a916b8258727435fd4ce9e6cbf22a3e886bdbe777e5828ac7c5f5c68ff936fb2308a54b27243528fdae0a2201bb320341a05fe8c6bc8241d6ec424202ed75ba9d11047a41ac4876611ac396668e063c3db5aeffcf25b4b8a76a9ab942abde2e9a5e0b987788cf3c8cdca3c8aec54fe2e7a51b5bae419d4aaf40a224e8ca0d8678c73b7637a358baa0e01d96f86a6d19b132159472f1f958bbfb0891e7cbf9bfb316b2f99a207b5b88302eafbf470d049ae0a731c9ed5cddf8e17a0ed84a112bb0848694503bb355990a0cb7502578f52db669a02a6e05fe12e79af1c563a07e1bacbd8adc821463b0f6ca219b1a9ebbab5b550c10f8a808b1b484d77f87138ca72043370a1e7263ba09202eff91c3db85df67eadf269ab65a6e1df498ebbf3f077b8403c1457f7951101b7be901d5f6c7f6f8b48fdadac95360f32acb34abff5fdd9a30e82850252241413b5ca3c4130ad1668a1bbbe70e334e98525c8a73d45e7745a94290840e63ef00b7842dfafdea2a7d3628393785f80b3f9445b6c1e259ad8392b70dd44d8bd4ded1a4c235ca0590ee16e94c3aa22fb7c491a92d69914f433ef16f27ac39e7494428c8c0d157d9492060e1f9f08f2fe68786555f4a3914ec4f0907504086de3dbc5a1a38ce62cce8769ccfa0a68a6b34839280166f1185f50c3c45f9099016bfad6e3a818826f59185741ee0295468e22f421c1dce9d70d4fe7144f5227577c4de378b89574d2b9a60e2a26ad4de17de7a45ad699cb02459e59402629fbb73860207baaf9c7205b83a23003eefa3b8d7f15ae6bdd1d341340e56094c90c6e38296429ecf7bffdb683cecdee1e5e813d169cb7384044fa57554befc90f0e55b1d35644486c9fb3f3a5fbc8ec41a4cd459b58fb0bb281e069075a45a5e623533022e414f77b90382b8954a4e394eaa3acd16e1be1a7cd2dc090b2fc332c29bbcf34d2b20b06aa747fe430e1623df53a3820286d4a7ef6cb5e4e197e9b0357d6cd3af354ba44232de3048fd4ba59befc78061a42528be4629075fad40275a476a89ca7cfced3021449b8a7f2e3f52c58b1e51953934413c3da78a2095993bb1849791ef892a21687e1705c75fa0d31a57f1d2b7819db407d1b12eb01d55c06ee82395ca6b265fc9678efa0f030861b2a20e78c86b5b2eb81ec24316a515a1a09982f88c7484787c2f97401f4fb255427a685915cab15b231f1f9f460a5045a0f13300685d3660892e0c6033e597464b537812cd5004c6d077c33d20020e3e6b5cefd59e9185b1f014fe44047e3528b596262dfa75fb7619e01ce87e729f5f71eb7c087384822e87a4439426ebab41f5e95545aab69384c91e8ca7869e9b324342a43987b3cea5da97321b0ad120362d89ab67f4ec0d879bdf62c2ff0a1ff226c4a55105675af3c4d7181e48f97ac989fe2f1b74aa667f7f65828cf9a7db78390ed0471a550b8b1b865d086b1985296b980b1de64fd3633655cd210d179f27b157134cedef50ff80f0484efe51c4e02ba26cb616e1da37e5bf73cb40090d9877714f7db349f4812349a43761f7cf690a82c9c415aa4222e9502d0985157128cc06599fe49e21fe87bd800141b1df2f5c7e6b79add2f9e784e313a163958453bad25680cc7dec76cb89b1e63e5ff2b1f6434e49bb5c6259f32423554e510ffb0b372c69cbc9f0fb51811c09c75f5887724254487cf889d1d3fdf90191b6db919c121fb98931808fc4037e49364bb9e7069df734e942dcecab6a0dd776683356692fb7edb76ba6100a5375ac103959c92df3db871020e42dcfcee247e17bbc16867d4c5a3b24140ec67da891a31d862f1cbc11571bc14578400068f5f11c4e03953e4741698b910642669dca6db2b38eef32b9b87115ae9729884ff58e25ab0c4bb46de8b30311fc7c8049f3fa7f5bd22496c3e4b6e78b30bfcad3c4cdfb3281eda213b94e3fcbaba00156f56826e88b7fbed91021815329d038ec311e97714d17801436e4d332c34e13de23a46bf736f5c84a1eec28aba5958eccc88c5300924a783bdabd40d5df898a6442a401a75176749142347c25131b7021631318a5f879a643bda5b2581200e05d2ce729fc27e51525ec0a8df7510688419e4c44892544f67396c56ff4cc01a9af1156ab90e8ec905db162b2e2bff1273bf31faf99cab5a9fc4e0b924e6bd2126209328dbcb100dbc2f711cfa8de2c53252e2f3f50ca71c0f5980aea66200f731b72c612537b8c41a53b2d76122ce5a5289dd58ca5d9539484be20cc08726f41a698ef09ee350b7ad0e29219839161fe0d439ad5f795e1f4dddd3ac273a6b61dd33fde52249e19f9bffa0822a302006e23640d074d9ae3930bc6ff7280d4191886ea82e2789df083362a18bf0b1782c2de1e2cb1046ea84545fe68e1a9ceee39c52ec05cbc0b14143c51840062be30b793ea5815297458d01375e1557badd19c716314f2470177e520f1909f99ddf61481c1c26b7cb7fa3b96f169f604c2dab86f7ffd3ef57f68923f2ef328c9e7f025fffd6365a79c2019fa287b53ae34400d30025377370c0d0af1784695642168cb14f4bf0e1e59c41f954b28915e6ce1aa9d5c79e927566869f4dedae6d6128b1c4b92dbfa68bcab432e5ca7d3861d7f5a5239d72e56d2cd2e1b94de04f9d84052898813ab1f75b257d50b06a7274a0f0a8fb16121041351f24bf99f803ab4a61f12c45c2c55badc613a28859928e6689d389017c0963dcc9c4c7ddcad0aa95c690e15102eeec3525d6ce92e29bb8798ccb5d89d888428046b29fce5f3116899c1fe9229f2deaaad28cd8b9150ab02bf86acfb1040a1a93331e035f6357f4ce5becd90fb86405e828b1c04c4c262e7f0d437262db9a2717f445a8319159b9950a781fbd2fed040f7a46dfd6fc80752725568a3ff0bb71d10b15c2ea4a167c9a56170441af86fb1b250c8962a9ea86501c6f7fb1dbc36036eea0b9fd920e265f42249e9a0020e6b4cdb00ba4ecfb2d8bb3a2ea13d6ce3554d08f5910f89927744bb4e71e970f90c7bc97c27272c6fcbeba35bbb15d05d1f50744fe6daaf85549e3438bff0b1ec76d4468a56e306a04927c291d9d7afa7e2fc829c689f98c60d8b913b0e1dbc9ae9d1515b6c49e52079eb0201fd1eff64f93e2240fe03b2bb1d86a50f50ae941e661de24964bf599ac8856d01dce54e90f7a36d22d6ad3452ab70e2ebba035edb853d3ef8e0a7770999646ba85073732330e2b8b634c4d0dae5aacef264d731284bb7c542c364c3e48ad316d541588f0ae55434f5f1fdd1863709053fc0b9297f0fed24273d84204e386517c5853662fae696d2415835c47b9e798387ba679973303f05db7596dde2bc1d63a24727968276fe8c0af3e217b6a3fdba389107e408036e473071e5bdbdd38575bea1e8207c06166c42c2bc8c4ed797ff971bca3329223ee6c07777381c67ff3b90b2a8170854e0c925653cba182b6672546cd33f6c53252bdf443c26b54568ddca123d738f6718ede53a7043bd61cb748b15a83d741651142d46a62bfcca2716577172b3a86f5868dbe8e5f90d40e798315d083b086d59de96a870d51bbb49a973027a9a9ba7228abbd48eb22166027281b87f6237758e4ea2e55e805872b160a78fec5c5a2cb7e1c228b7762c7e4cd1a9ff333639b80e22bf8642a8d446beb6014f005ad3b241ce5a1e72036c34f733a7c00b77c17c72b3d7061b98ac6b73b1a9b5740a0bf3759a88f58b327733649e5f7545f7d67a1b6b8979bcea6a29f9665e379dbf0219b5ca75d5134c876235f6b9d99a57d12f57df036d6164f1509d8ffbb5d70037980c4a859a98599d118a492431b5b7835430e0837334ef92d466941492d8b695ba5b1bbcefcdce9efa00b64fb383367f0a3194150d66e00fa9042730a0e6065dc48ba0fa08f62c809bff60d547225f297cb6e3bebeee85433403797208", 0xfd1, 0x8000000000000001, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000030c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003080)={&(0x7f0000002480)={0xac8, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_TID_CONFIG={0x4bc, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x6, 0xb, 0x1b, 0x9, 0x6, 0x6c, 0x16, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x16, 0xb, 0x9, 0x1, 0x6c, 0xb, 0x6, 0x36, 0x6c, 0x30, 0x5, 0x0, 0x60, 0x18, 0x60, 0x61, 0xb, 0x60, 0x36, 0x3, 0x9, 0x60, 0x2, 0x0, 0x2, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xbc43, 0xe, 0x9, 0x1, 0x4, 0xf89, 0x8001, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x5, 0x2, 0x24, 0x2, 0x1b, 0x1, 0x18, 0x6c, 0x24, 0x2d, 0x5, 0x6c, 0x48, 0x5, 0xc, 0x12, 0xc, 0x6c, 0x25, 0x5, 0x0, 0x48, 0x79, 0x6, 0x1b, 0x36]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x10, 0xc49, 0x1, 0x5b, 0x2, 0xdd57, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf9, 0x4, 0x0, 0x4, 0x5, 0x1, 0x8]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x36, 0x30, 0x18, 0x12, 0x4, 0x1b, 0xc, 0x0, 0x3, 0x48, 0xc, 0x4, 0x6, 0x0, 0x9]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x8}, {0x4, 0x1d}, {0x3}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x8}, {0x7, 0xa}, {0x6, 0x2}, {0x2, 0x1}, {0x2, 0xa}, {0x2, 0xa}, {0x1, 0x2}, {0x2, 0x6}, {0x5, 0x1}, {0x1, 0x8}, {0x5, 0x1}, {0x6, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x5, 0x2, 0x16, 0x60, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x1, 0x1, 0x8ca3, 0x9, 0x1c9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x5, 0x48, 0x1b, 0x1b, 0x2, 0x48, 0x6c, 0x7c, 0x1b, 0x0, 0x60, 0x1b]}]}]}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x5, 0x48, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xccb9, 0x6, 0x0, 0x1, 0x2, 0xfff, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x9, 0x9, 0xc, 0x0, 0x30, 0x6, 0x48, 0x48, 0x2, 0x1b, 0x0, 0x48, 0x24, 0x2, 0x5, 0x12, 0x12, 0x48, 0x1b, 0x3, 0x1, 0xc]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0x101, 0x0, 0x9, 0x7, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff, 0x3, 0xc, 0x6, 0xeb, 0x3b9b, 0xd488]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x0, 0xfea5, 0x9, 0xff80, 0xded, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc87, 0x4, 0x5, 0x81, 0x5, 0x2, 0x5, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x4, 0x16, 0x6c, 0x16, 0x30, 0x1b, 0xb, 0x12, 0x30, 0x317487b8e5f1660d, 0x2, 0x2, 0x5b, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc5, 0x2, 0x821a, 0x3ff, 0x9, 0x8, 0x5a8a, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x6, 0x2}, {0x7, 0x8}, {0x2}, {0x3, 0x9}, {0x2, 0x8}, {0x7, 0x5}, {0x3, 0x9}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0xa}, {0x2}, {}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x3}, {0x2, 0x4}, {0x4, 0x3}, {0x4, 0x8}, {0x0, 0x2}, {0x6}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x16, 0x5, 0x3, 0x1, 0x6c, 0x3, 0x18, 0x9, 0x12, 0xb, 0x4, 0x2, 0xb, 0x9, 0x0, 0xa, 0x30, 0xb, 0x2f, 0x60, 0x12, 0x6, 0x2, 0x1, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0xc, 0x1e, 0x18, 0x24, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x101, 0x2, 0x7fff, 0x8000, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x3, 0x2}, {0x0, 0x9}, {0x6, 0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0x8}, {0x5, 0x1}, {0x3, 0x5}, {0x7, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x4}, {0x4}, {0x5, 0x5}, {0x3, 0x2}, {0x3, 0x7}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {0x1}, {0x4, 0x5}, {0x2, 0xa}, {0x7, 0xa}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x7, 0x3, 0x0, 0x0, 0x4, 0xff6c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x18, 0x36, 0x5, 0x12, 0x60]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x5, 0x7}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x5}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x2}, {0x4, 0x7}, {0x7, 0x6}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x9}, {}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x6}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x876a, 0x5, 0x4, 0x4, 0x8, 0x400, 0x957e, 0xcf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x85, 0x666, 0xf, 0x5, 0x9e, 0x40d, 0xb8, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0xe2e, 0x3, 0x8, 0x401, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x1, 0x9, 0x6c, 0x29, 0x12, 0x12, 0x3, 0x30, 0x30, 0x16, 0x48, 0x36, 0x36, 0x30, 0x6c, 0x36, 0x48, 0x9, 0x48, 0x24, 0x12, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9e}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x5e0, 0x11d, 0x0, 0x1, [{0x36c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x350, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x2}, {0x7}, {0x4, 0x4}, {0x1, 0x7}, {0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x2, 0xa}, {0x3, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0x7, 0x5}, {0x2, 0x6}, {0x0, 0x1}, {0x5, 0x2}, {0x7, 0x8}, {0x7, 0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x5}, {0x1, 0x9}, {0x3, 0x6}, {}, {0x2, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0x7}, {0x6, 0xa}, {0x5, 0x7}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x4, 0x5}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x0, 0x8}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x5}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x7, 0x5}, {0x6, 0x6}, {0x1, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x30, 0x48, 0xc, 0xc, 0x6, 0x6c, 0x5, 0x2, 0x30, 0x62, 0x16, 0x1b, 0x12, 0x1, 0x24, 0x2, 0x9]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xc000, 0x3, 0x77bf, 0x4, 0x0, 0x2d59, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x1ff, 0x9, 0x6, 0x1, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x800, 0x1, 0x6, 0x6, 0xa7e8, 0x101, 0x40]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x6, 0x2a, 0x5, 0x8, 0x80, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x3}, {0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x2, 0x7}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0xa}, {0x1, 0x4}, {0x3, 0x7}, {0x5}, {0x5, 0x2}, {0x7, 0x1}, {0x4, 0x8}, {0x7, 0x3}, {0x7}, {0x0, 0x8}, {0x1}, {0x1, 0x9}, {0x0, 0x5}, {0x2, 0x2}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0xb, 0x60, 0x1b, 0xb, 0x36, 0x60, 0x2, 0xb, 0x6, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x401, 0x0, 0xb, 0x0, 0x2, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x4}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x9}, {0x3, 0x2}, {0x4, 0x4}, {0x6, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x7, 0x5}, {0x3}, {0x0, 0x3}, {0x4, 0x7}, {0x4, 0x9}, {0x5, 0x1}, {0x7, 0x2}, {0x4, 0xa}, {0x6, 0x1}, {0x7, 0x8}, {0x4, 0x7}, {0x7, 0x1}, {0x3, 0x9}, {0x2, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x7}, {0x4, 0x4}, {0x3, 0x4}, {0x5, 0x1}, {0x4, 0x5}, {0x4, 0x8}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0xa}, {0x0, 0xa}, {0x6, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x2}, {0x1, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xaab381984ff97d9}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x3, 0xa, 0x2, 0x4, 0xa5, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x24, 0x6c, 0x18, 0x3, 0xc, 0x48, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x9}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x5, 0x6, 0x8, 0xbb, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x18, 0x18, 0xb, 0xc, 0x36, 0x60, 0xc, 0x12, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x401, 0x4, 0x2, 0x8, 0x7f, 0xb, 0x27]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1000, 0x9, 0x2, 0x2, 0x1000, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x6}, {0x6, 0x2}, {0x7}, {0x0, 0x6}, {0x4}, {0x6, 0xa}, {0x1, 0xa}, {0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x6}, {0x0, 0xa}, {}, {0x5}, {0x2, 0x4}, {0x7, 0x9}, {0x5, 0x2}, {0x5}, {0x5, 0x4}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x6}, {0x6, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0x2}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0xa}, {0x2, 0x5}, {0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x3, 0x6}, {0x4, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x5, 0x5}, {0x5, 0xa}, {0x6, 0xa}, {0x2, 0xa}, {0x7, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x4}, {0x3, 0x4}, {0x2}, {0x5, 0x7}, {0x3, 0x8}, {0x5, 0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x7}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x6, 0x9}, {0x5, 0xa}, {0x3, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x5}, {0x5, 0x3}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x2}, {0x2, 0x3}, {0x6, 0x3}, {0x7, 0x9}, {0x3, 0x9}, {0x4, 0x4}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x3}, {0x6}, {0x0, 0xa}, {0x4, 0x9}, {0x6, 0x2}, {0x2, 0xa}, {0x6, 0x9}, {0x3, 0x6}, {0x2, 0x1c}, {}, {0x2, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x8}, {0x3, 0x3}, {0x4, 0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x5, 0x1}, {0x3, 0x7}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x1f}, {0x5, 0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0x13}, {0x0, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x7}, {0x4}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0x7}, {0x5, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x37, 0x9, 0x2, 0xb, 0x4, 0xc, 0x1b, 0xc, 0x12, 0x3, 0xc, 0x0, 0x59f5d59cf3d77d5a, 0xb, 0x46, 0x2, 0x0, 0x18, 0x48, 0x12, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x8, 0x8001, 0x2, 0x2, 0xe, 0x4, 0x1200]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb8}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1fc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x1}, {0x6}, {0x6, 0x1}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0x1}, {0x7, 0x2}, {0x0, 0x9}, {0x6, 0x9}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x1}, {0x3, 0xa}, {0x3, 0x7}, {0x2, 0x9}, {0x5, 0x2}, {0x2, 0x1}, {0x3, 0x7}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0x7}, {0x5, 0x2}, {0x6, 0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x4}, {0x0, 0x4}, {0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x14}, {0x6, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x0, 0x2}, {0x5, 0x5}, {0x2, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb9, 0x6, 0x5, 0x7fff, 0x2, 0x7f, 0x2, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x5, 0x5, 0x15, 0x1, 0x7171, 0x2, 0x9e4]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0x5}, {0x7}, {0x3}, {0x7, 0xa}, {0x5, 0x5}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0x1}, {0x2, 0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc4, 0x10, 0x14, 0x0, 0x7f, 0x0, 0x1, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0x50f0, 0x7, 0x5, 0x9, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xc, 0x6c, 0x1, 0x67, 0x24, 0x4, 0x9, 0x6c, 0x1, 0x4, 0x60, 0xc, 0x16, 0x48, 0x1, 0x24, 0x9, 0x4, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x9}, {0x0, 0x1}, {0x7, 0x6}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x6}, {0x7, 0x2}, {0x1, 0x4}, {0x4, 0x6}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x4, 0x5, 0x10, 0x40, 0x31ca, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x9}, {0x0, 0x1}, {0x7}, {0x3, 0x3}, {0x3, 0xa}, {0x1, 0x7}, {0x2}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x9}, {0x1}, {0x7}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x8}, {0x5, 0x6}, {0x4}, {0x7, 0x2}, {0x3, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x1}, {0x2, 0x6}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x6}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x3}, {0x7, 0x3}, {0x1}, {0x1, 0x9}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x6}, {0x6, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf17, 0x3, 0x9, 0xff, 0x0, 0x14fb, 0x4, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x9a4, 0x3, 0x1, 0xaf52, 0x1, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x800, 0x4, 0x401, 0x3, 0x400, 0x1]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xec}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0xac8}, 0x1, 0x0, 0x0, 0x81}, 0x4000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) 1.380970386s ago: executing program 3 (id=85): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001900010026"], 0x50}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x3c) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r8, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) 1.20672357s ago: executing program 0 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 380.043697ms ago: executing program 0 (id=87): ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000840)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) eventfd(0xfffffc00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="6400000001010102000000000000000002000001500002802c00018014000300fe80000000000000000000000000002614000400fc000000000000000000000000000001140001800800010064010101080002000a0101020c000280050001000600000095445a8a6f23dd084d0b0a9ec9f89184908613b29ec280ae36ecf27cdfc4a45d8894f982c3abb98e97e779be18dcd6"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000004c0)={&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10111affffffffff7f000000ffe0ffffd20c596aaa0fdefd5a1a2460b97fb68afdfa35bb19eb5017a3ed8f2e7470b5332751e0423b608c29012bfcec505afdb530aec809485ddba3595b9930554908da6847081b554a"], 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) 330.116138ms ago: executing program 3 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) mq_timedsend(r2, &(0x7f0000000dc0)="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", 0xfd1, 0x8000000000000001, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000030c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003080)={&(0x7f0000002480)={0xac8, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_TID_CONFIG={0x4bc, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x6, 0xb, 0x1b, 0x9, 0x6, 0x6c, 0x16, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x16, 0xb, 0x9, 0x1, 0x6c, 0xb, 0x6, 0x36, 0x6c, 0x30, 0x5, 0x0, 0x60, 0x18, 0x60, 0x61, 0xb, 0x60, 0x36, 0x3, 0x9, 0x60, 0x2, 0x0, 0x2, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xbc43, 0xe, 0x9, 0x1, 0x4, 0xf89, 0x8001, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x5, 0x2, 0x24, 0x2, 0x1b, 0x1, 0x18, 0x6c, 0x24, 0x2d, 0x5, 0x6c, 0x48, 0x5, 0xc, 0x12, 0xc, 0x6c, 0x25, 0x5, 0x0, 0x48, 0x79, 0x6, 0x1b, 0x36]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x10, 0xc49, 0x1, 0x5b, 0x2, 0xdd57, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf9, 0x4, 0x0, 0x4, 0x5, 0x1, 0x8]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x36, 0x30, 0x18, 0x12, 0x4, 0x1b, 0xc, 0x0, 0x3, 0x48, 0xc, 0x4, 0x6, 0x0, 0x9]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x8}, {0x4, 0x1d}, {0x3}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x8}, {0x7, 0xa}, {0x6, 0x2}, {0x2, 0x1}, {0x2, 0xa}, {0x2, 0xa}, {0x1, 0x2}, {0x2, 0x6}, {0x5, 0x1}, {0x1, 0x8}, {0x5, 0x1}, {0x6, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x5, 0x2, 0x16, 0x60, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x1, 0x1, 0x8ca3, 0x9, 0x1c9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x5, 0x48, 0x1b, 0x1b, 0x2, 0x48, 0x6c, 0x7c, 0x1b, 0x0, 0x60, 0x1b]}]}]}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x5, 0x48, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xccb9, 0x6, 0x0, 0x1, 0x2, 0xfff, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x9, 0x9, 0xc, 0x0, 0x30, 0x6, 0x48, 0x48, 0x2, 0x1b, 0x0, 0x48, 0x24, 0x2, 0x5, 0x12, 0x12, 0x48, 0x1b, 0x3, 0x1, 0xc]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0x101, 0x0, 0x9, 0x7, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff, 0x3, 0xc, 0x6, 0xeb, 0x3b9b, 0xd488]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x0, 0xfea5, 0x9, 0xff80, 0xded, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc87, 0x4, 0x5, 0x81, 0x5, 0x2, 0x5, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x4, 0x16, 0x6c, 0x16, 0x30, 0x1b, 0xb, 0x12, 0x30, 0x317487b8e5f1660d, 0x2, 0x2, 0x5b, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc5, 0x2, 0x821a, 0x3ff, 0x9, 0x8, 0x5a8a, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x6, 0x2}, {0x7, 0x8}, {0x2}, {0x3, 0x9}, {0x2, 0x8}, {0x7, 0x5}, {0x3, 0x9}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0xa}, {0x2}, {}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x3}, {0x2, 0x4}, {0x4, 0x3}, {0x4, 0x8}, {0x0, 0x2}, {0x6}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x16, 0x5, 0x3, 0x1, 0x6c, 0x3, 0x18, 0x9, 0x12, 0xb, 0x4, 0x2, 0xb, 0x9, 0x0, 0xa, 0x30, 0xb, 0x2f, 0x60, 0x12, 0x6, 0x2, 0x1, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0xc, 0x1e, 0x18, 0x24, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x101, 0x2, 0x7fff, 0x8000, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x3, 0x2}, {0x0, 0x9}, {0x6, 0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0x8}, {0x5, 0x1}, {0x3, 0x5}, {0x7, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x4}, {0x4}, {0x5, 0x5}, {0x3, 0x2}, {0x3, 0x7}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {0x1}, {0x4, 0x5}, {0x2, 0xa}, {0x7, 0xa}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x7, 0x3, 0x0, 0x0, 0x4, 0xff6c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x18, 0x36, 0x5, 0x12, 0x60]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x5, 0x7}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x5}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x2}, {0x4, 0x7}, {0x7, 0x6}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x9}, {}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x6}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x876a, 0x5, 0x4, 0x4, 0x8, 0x400, 0x957e, 0xcf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x85, 0x666, 0xf, 0x5, 0x9e, 0x40d, 0xb8, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0xe2e, 0x3, 0x8, 0x401, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x1, 0x9, 0x6c, 0x29, 0x12, 0x12, 0x3, 0x30, 0x30, 0x16, 0x48, 0x36, 0x36, 0x30, 0x6c, 0x36, 0x48, 0x9, 0x48, 0x24, 0x12, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9e}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x5e0, 0x11d, 0x0, 0x1, [{0x36c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x350, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x2}, {0x7}, {0x4, 0x4}, {0x1, 0x7}, {0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x2, 0xa}, {0x3, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0x7, 0x5}, {0x2, 0x6}, {0x0, 0x1}, {0x5, 0x2}, {0x7, 0x8}, {0x7, 0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x5}, {0x1, 0x9}, {0x3, 0x6}, {}, {0x2, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0x7}, {0x6, 0xa}, {0x5, 0x7}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x4, 0x5}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x0, 0x8}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x5}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x7, 0x5}, {0x6, 0x6}, {0x1, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x30, 0x48, 0xc, 0xc, 0x6, 0x6c, 0x5, 0x2, 0x30, 0x62, 0x16, 0x1b, 0x12, 0x1, 0x24, 0x2, 0x9]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xc000, 0x3, 0x77bf, 0x4, 0x0, 0x2d59, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x1ff, 0x9, 0x6, 0x1, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x800, 0x1, 0x6, 0x6, 0xa7e8, 0x101, 0x40]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x6, 0x2a, 0x5, 0x8, 0x80, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x3}, {0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x2, 0x7}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0xa}, {0x1, 0x4}, {0x3, 0x7}, {0x5}, {0x5, 0x2}, {0x7, 0x1}, {0x4, 0x8}, {0x7, 0x3}, {0x7}, {0x0, 0x8}, {0x1}, {0x1, 0x9}, {0x0, 0x5}, {0x2, 0x2}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0xb, 0x60, 0x1b, 0xb, 0x36, 0x60, 0x2, 0xb, 0x6, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x401, 0x0, 0xb, 0x0, 0x2, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x4}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x9}, {0x3, 0x2}, {0x4, 0x4}, {0x6, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x7, 0x5}, {0x3}, {0x0, 0x3}, {0x4, 0x7}, {0x4, 0x9}, {0x5, 0x1}, {0x7, 0x2}, {0x4, 0xa}, {0x6, 0x1}, {0x7, 0x8}, {0x4, 0x7}, {0x7, 0x1}, {0x3, 0x9}, {0x2, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x7}, {0x4, 0x4}, {0x3, 0x4}, {0x5, 0x1}, {0x4, 0x5}, {0x4, 0x8}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0xa}, {0x0, 0xa}, {0x6, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x2}, {0x1, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xaab381984ff97d9}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x3, 0xa, 0x2, 0x4, 0xa5, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x24, 0x6c, 0x18, 0x3, 0xc, 0x48, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x9}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x5, 0x6, 0x8, 0xbb, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x18, 0x18, 0xb, 0xc, 0x36, 0x60, 0xc, 0x12, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x401, 0x4, 0x2, 0x8, 0x7f, 0xb, 0x27]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1000, 0x9, 0x2, 0x2, 0x1000, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x6}, {0x6, 0x2}, {0x7}, {0x0, 0x6}, {0x4}, {0x6, 0xa}, {0x1, 0xa}, {0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x6}, {0x0, 0xa}, {}, {0x5}, {0x2, 0x4}, {0x7, 0x9}, {0x5, 0x2}, {0x5}, {0x5, 0x4}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x6}, {0x6, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0x2}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0xa}, {0x2, 0x5}, {0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x3, 0x6}, {0x4, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x5, 0x5}, {0x5, 0xa}, {0x6, 0xa}, {0x2, 0xa}, {0x7, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x4}, {0x3, 0x4}, {0x2}, {0x5, 0x7}, {0x3, 0x8}, {0x5, 0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x7}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x6, 0x9}, {0x5, 0xa}, {0x3, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x5}, {0x5, 0x3}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x2}, {0x2, 0x3}, {0x6, 0x3}, {0x7, 0x9}, {0x3, 0x9}, {0x4, 0x4}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x3}, {0x6}, {0x0, 0xa}, {0x4, 0x9}, {0x6, 0x2}, {0x2, 0xa}, {0x6, 0x9}, {0x3, 0x6}, {0x2, 0x1c}, {}, {0x2, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x8}, {0x3, 0x3}, {0x4, 0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x5, 0x1}, {0x3, 0x7}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x1f}, {0x5, 0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0x13}, {0x0, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x7}, {0x4}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0x7}, {0x5, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x37, 0x9, 0x2, 0xb, 0x4, 0xc, 0x1b, 0xc, 0x12, 0x3, 0xc, 0x0, 0x59f5d59cf3d77d5a, 0xb, 0x46, 0x2, 0x0, 0x18, 0x48, 0x12, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x8, 0x8001, 0x2, 0x2, 0xe, 0x4, 0x1200]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb8}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1fc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x1}, {0x6}, {0x6, 0x1}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0x1}, {0x7, 0x2}, {0x0, 0x9}, {0x6, 0x9}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x1}, {0x3, 0xa}, {0x3, 0x7}, {0x2, 0x9}, {0x5, 0x2}, {0x2, 0x1}, {0x3, 0x7}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0x7}, {0x5, 0x2}, {0x6, 0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x4}, {0x0, 0x4}, {0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x14}, {0x6, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x0, 0x2}, {0x5, 0x5}, {0x2, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb9, 0x6, 0x5, 0x7fff, 0x2, 0x7f, 0x2, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x5, 0x5, 0x15, 0x1, 0x7171, 0x2, 0x9e4]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0x5}, {0x7}, {0x3}, {0x7, 0xa}, {0x5, 0x5}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0x1}, {0x2, 0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc4, 0x10, 0x14, 0x0, 0x7f, 0x0, 0x1, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0x50f0, 0x7, 0x5, 0x9, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xc, 0x6c, 0x1, 0x67, 0x24, 0x4, 0x9, 0x6c, 0x1, 0x4, 0x60, 0xc, 0x16, 0x48, 0x1, 0x24, 0x9, 0x4, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x9}, {0x0, 0x1}, {0x7, 0x6}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x6}, {0x7, 0x2}, {0x1, 0x4}, {0x4, 0x6}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x4, 0x5, 0x10, 0x40, 0x31ca, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x9}, {0x0, 0x1}, {0x7}, {0x3, 0x3}, {0x3, 0xa}, {0x1, 0x7}, {0x2}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x9}, {0x1}, {0x7}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x8}, {0x5, 0x6}, {0x4}, {0x7, 0x2}, {0x3, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x1}, {0x2, 0x6}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x6}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x3}, {0x7, 0x3}, {0x1}, {0x1, 0x9}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x6}, {0x6, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf17, 0x3, 0x9, 0xff, 0x0, 0x14fb, 0x4, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x9a4, 0x3, 0x1, 0xaf52, 0x1, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x800, 0x4, 0x401, 0x3, 0x400, 0x1]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xec}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0xac8}, 0x1, 0x0, 0x0, 0x81}, 0x4000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) 249.911008ms ago: executing program 3 (id=89): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) pwritev2(r0, 0x0, 0x0, 0x9, 0x1, 0x1c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) open(&(0x7f0000000340)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x80040, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000500)={0xffffffffffffffff, r6, 0xfffffffd}) write(r4, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r3, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xfffffefc, 0xffdffff8, 0x8, 0x15, "000000000000000000000000000000f30200"}) r7 = syz_open_pts(0xffffffffffffffff, 0x61c0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) mount$bpf(0x0, 0x0, 0x0, 0x4905061, &(0x7f0000000100)=ANY=[@ANYBLOB="7569ce8f", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x4000010) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000055}, 0x20040080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000c3000200ffffffff9500000000000000cc608dbf3931298274a4"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 0s ago: executing program 2 (id=90): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9028' (ED25519) to the list of known hosts. [ 47.936866][ T5723] cgroup: Unknown subsys name 'net' [ 48.058397][ T5723] cgroup: Unknown subsys name 'cpuset' [ 48.063057][ T5723] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.955630][ T5723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.241248][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.248275][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.250906][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.253916][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.257394][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.260219][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.263909][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.266687][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.270102][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.270600][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.270977][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.271864][ T5757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.272176][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.273196][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.273918][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.277229][ T5757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.279316][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.282889][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.285014][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.288558][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.873411][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.876153][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.878546][ T5742] bridge_slave_0: entered allmulticast mode [ 53.881171][ T5742] bridge_slave_0: entered promiscuous mode [ 53.885272][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.887479][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.889627][ T5742] bridge_slave_1: entered allmulticast mode [ 53.892196][ T5742] bridge_slave_1: entered promiscuous mode [ 53.945280][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.952083][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.955209][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.957846][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.960135][ T5747] bridge_slave_0: entered allmulticast mode [ 53.963342][ T5747] bridge_slave_0: entered promiscuous mode [ 54.022591][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.024907][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.027421][ T5747] bridge_slave_1: entered allmulticast mode [ 54.029974][ T5747] bridge_slave_1: entered promiscuous mode [ 54.032620][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.035218][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.038401][ T5741] bridge_slave_0: entered allmulticast mode [ 54.041053][ T5741] bridge_slave_0: entered promiscuous mode [ 54.050267][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.052517][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.054687][ T5746] bridge_slave_0: entered allmulticast mode [ 54.057533][ T5746] bridge_slave_0: entered promiscuous mode [ 54.061256][ T5742] team0: Port device team_slave_0 added [ 54.064396][ T5742] team0: Port device team_slave_1 added [ 54.071181][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.073531][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.075961][ T5741] bridge_slave_1: entered allmulticast mode [ 54.079021][ T5741] bridge_slave_1: entered promiscuous mode [ 54.087082][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.089487][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.091891][ T5746] bridge_slave_1: entered allmulticast mode [ 54.094404][ T5746] bridge_slave_1: entered promiscuous mode [ 54.126149][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.145977][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.150067][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.155220][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.159529][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.161798][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.170109][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.176124][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.190622][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.193888][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.196120][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.203826][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.224252][ T5747] team0: Port device team_slave_0 added [ 54.240866][ T5746] team0: Port device team_slave_0 added [ 54.243617][ T5741] team0: Port device team_slave_0 added [ 54.247551][ T5747] team0: Port device team_slave_1 added [ 54.261872][ T5746] team0: Port device team_slave_1 added [ 54.265472][ T5741] team0: Port device team_slave_1 added [ 54.286090][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.288350][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.296779][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.318815][ T5742] hsr_slave_0: entered promiscuous mode [ 54.322074][ T5742] hsr_slave_1: entered promiscuous mode [ 54.330233][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.332412][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.340320][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.350155][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.352335][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.360270][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.364405][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.366754][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.374616][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.380790][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.383711][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.392194][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.403540][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.405838][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.413470][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.469718][ T5741] hsr_slave_0: entered promiscuous mode [ 54.472049][ T5741] hsr_slave_1: entered promiscuous mode [ 54.474164][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 54.476202][ T5741] Cannot create hsr debugfs directory [ 54.508909][ T5747] hsr_slave_0: entered promiscuous mode [ 54.511530][ T5747] hsr_slave_1: entered promiscuous mode [ 54.514001][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 54.516350][ T5747] Cannot create hsr debugfs directory [ 54.549843][ T5746] hsr_slave_0: entered promiscuous mode [ 54.552023][ T5746] hsr_slave_1: entered promiscuous mode [ 54.554053][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 54.555965][ T5746] Cannot create hsr debugfs directory [ 54.818630][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.826510][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.829702][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.834254][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.837275][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.841173][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.844256][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.847874][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.881078][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.887346][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.889969][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.893646][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.896369][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.901706][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.905288][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.911842][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.977225][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.981787][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.984857][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.990646][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.995022][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.002084][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.013755][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.021648][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.082503][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.089150][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.092254][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.096458][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.107321][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.113117][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.117116][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.122334][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.179368][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.188671][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.220044][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.224664][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.232034][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.242859][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.246228][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.256050][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.258251][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.261374][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.263617][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.284424][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.291302][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.294202][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.311441][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.313919][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.316993][ T5744] Bluetooth: hci1: command tx timeout [ 55.317001][ T5751] Bluetooth: hci0: command tx timeout [ 55.326648][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.328842][ T5744] Bluetooth: hci3: command tx timeout [ 55.329268][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.330228][ T5751] Bluetooth: hci2: command tx timeout [ 55.366167][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.405836][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.420359][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.423614][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.436378][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.439410][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.679245][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.686998][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.700965][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.708529][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.741026][ T5742] veth0_vlan: entered promiscuous mode [ 55.754494][ T5747] veth0_vlan: entered promiscuous mode [ 55.766321][ T5742] veth1_vlan: entered promiscuous mode [ 55.772169][ T5747] veth1_vlan: entered promiscuous mode [ 55.781544][ T5746] veth0_vlan: entered promiscuous mode [ 55.793240][ T5741] veth0_vlan: entered promiscuous mode [ 55.798474][ T5746] veth1_vlan: entered promiscuous mode [ 55.808458][ T5741] veth1_vlan: entered promiscuous mode [ 55.820039][ T5747] veth0_macvtap: entered promiscuous mode [ 55.825252][ T5742] veth0_macvtap: entered promiscuous mode [ 55.830552][ T5747] veth1_macvtap: entered promiscuous mode [ 55.834723][ T5742] veth1_macvtap: entered promiscuous mode [ 55.859311][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.862812][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.866748][ T5746] veth0_macvtap: entered promiscuous mode [ 55.874862][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.879604][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.887867][ T5746] veth1_macvtap: entered promiscuous mode [ 55.893060][ T5741] veth0_macvtap: entered promiscuous mode [ 55.900945][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.907666][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.910386][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.916163][ T5741] veth1_macvtap: entered promiscuous mode [ 55.919853][ T1167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.922724][ T1167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.926120][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.940561][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.943265][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.951455][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.968147][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.976570][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.992663][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.995463][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.005683][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.008447][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.024681][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.046289][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.062877][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.066797][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.073059][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.077755][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.080349][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.081231][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.084428][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.109938][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.113720][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.140534][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.143665][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.164130][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.168106][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.179984][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.197571][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.200063][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.221069][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.226363][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.241318][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.248788][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.369116][ T5893] Bluetooth: MGMT ver 1.23 [ 57.445691][ T5744] Bluetooth: hci3: command tx timeout [ 57.446348][ T5751] Bluetooth: hci1: command tx timeout [ 57.450668][ T5744] Bluetooth: hci2: command tx timeout [ 57.451446][ T5751] Bluetooth: hci0: command tx timeout [ 58.340432][ T5913] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 59.326564][ T5929] ======================================================= [ 59.326564][ T5929] WARNING: The mand mount option has been deprecated and [ 59.326564][ T5929] and is ignored by this kernel. Remove the mand [ 59.326564][ T5929] option from the mount to silence this warning. [ 59.326564][ T5929] ======================================================= [ 59.349054][ T5929] overlayfs: overlapping lowerdir path [ 59.476236][ T5751] Bluetooth: hci2: command tx timeout [ 59.479222][ T62] Bluetooth: hci0: command tx timeout [ 59.481491][ T62] Bluetooth: hci1: command tx timeout [ 59.484415][ T5751] Bluetooth: hci3: command tx timeout [ 61.226476][ T5935] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 61.296605][ T5935] can0: slcan on ttyS3. [ 61.556114][ T5744] Bluetooth: hci1: command tx timeout [ 61.558061][ T5744] Bluetooth: hci3: command tx timeout [ 61.558983][ T5751] Bluetooth: hci0: command tx timeout [ 61.562626][ T62] Bluetooth: hci2: command tx timeout [ 61.796403][ T5935] can0 (unregistered): slcan off ttyS3. [ 62.913145][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 63.194244][ T5968] bond1: Unable to set down delay as MII monitoring is disabled [ 63.808701][ T5968] bond1 (unregistering): Released all slaves [ 64.259194][ T5988] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 64.711097][ T5993] random: crng reseeded on system resumption [ 64.869072][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'. [ 65.426583][ T857] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.612252][ T857] usb 7-1: Using ep0 maxpacket: 32 [ 65.625773][ T857] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 65.631339][ T857] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 65.636290][ T857] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 65.639815][ T857] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 65.643891][ T857] usb 7-1: config 0 interface 0 has no altsetting 0 [ 65.664869][ T857] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 65.726659][ T857] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 65.782158][ T6011] vlan2: entered promiscuous mode [ 65.788331][ T6011] hsr0: entered promiscuous mode [ 65.790070][ T6011] vlan2: entered allmulticast mode [ 65.790759][ T857] usb 7-1: Product: syz [ 65.795813][ T6011] hsr0: entered allmulticast mode [ 65.797813][ T6011] hsr_slave_0: entered allmulticast mode [ 65.806060][ T6011] hsr_slave_1: entered allmulticast mode [ 65.822944][ T857] usb 7-1: Manufacturer: syz [ 65.843507][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 65.879242][ T6011] hsr_slave_0: left promiscuous mode [ 65.891466][ T6011] hsr_slave_1: left promiscuous mode [ 65.941971][ T857] usb 7-1: SerialNumber: syz [ 66.199514][ T857] usb 7-1: config 0 descriptor?? [ 66.246353][ T857] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 66.299330][ T857] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 66.348397][ T6015] gfs2: error -5 reading superblock [ 66.489391][ T6021] IPv6: addrconf: prefix option has invalid lifetime [ 66.551965][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 66.552043][ T5847] usb 7-1: USB disconnect, device number 2 [ 66.572382][ T6003] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 66.576748][ T6021] ldusb: No device or device unplugged -19 [ 66.576751][ T5847] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 68.204723][ T6036] program syz.0.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.375632][ T5937] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.508341][ T6060] can0: slcan on ttyS3. [ 69.555804][ T5937] usb 7-1: Using ep0 maxpacket: 8 [ 69.584176][ T5937] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 69.587240][ T5937] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 69.591121][ T5937] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 69.594487][ T5937] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 69.598445][ T5937] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 69.602063][ T5937] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.606544][ T5937] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.609614][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.786916][ T6060] can0 (unregistered): slcan off ttyS3. [ 69.840638][ T5937] usb 7-1: usb_control_msg returned -32 [ 69.848905][ T5937] usbtmc 7-1:16.0: can't read capabilities [ 70.107670][ T6061] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.609755][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 70.627269][ T6066] warning: `syz.3.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.819883][ T6061] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.295218][ T6061] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.764229][ T6061] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.857333][ T99] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.879204][ T158] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.899007][ T158] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.911475][ T158] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.026367][ T6088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.091653][ T6081] Zero length message leads to an empty skb [ 72.491715][ T857] usb 7-1: USB disconnect, device number 3 [ 75.372256][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 76.286360][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.293441][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.795940][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.956077][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 78.204775][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 78.248803][ T34] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 78.254495][ T34] usb 7-1: can't read configurations, error -71 [ 79.653251][ T6198] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 80.056598][ T6198] can0: slcan on ttyS3. [ 80.428011][ T6198] can0 (unregistered): slcan off ttyS3. [ 80.953879][ T6230] program syz.0.75 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.730617][ T6241] Cannot find add_set index 0 as target [ 81.813497][ T6244] mmap: syz.2.80 (6244) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.050672][ T6243] netlink: 'syz.0.79': attribute type 2 has an invalid length. [ 82.533484][ T5911] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 83.120181][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 83.189669][ T5911] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.192247][ T5911] usb 6-1: config 179 has no interface number 0 [ 83.194206][ T5911] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 83.198019][ T5911] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 83.203641][ T5911] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.207121][ T5911] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 83.210849][ T5911] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 83.214915][ T5911] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 83.217932][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.230881][ T6239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.749585][ T6239] syzkaller1: entered promiscuous mode [ 84.752128][ T6239] syzkaller1: entered allmulticast mode [ 85.107853][ T5847] usb 6-1: USB disconnect, device number 2 [ 85.107872][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.112391][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 85.114889][ C1] ================================================================== [ 85.117131][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 85.119295][ C1] Read of size 4 at addr ffff888060f2605c by task swapper/1/0 [ 85.122349][ C1] [ 85.123258][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 85.123271][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.123278][ C1] Call Trace: [ 85.123283][ C1] [ 85.123287][ C1] dump_stack_lvl+0x100/0x190 [ 85.123306][ C1] print_report+0x13d/0x4b0 [ 85.123321][ C1] ? __virt_addr_valid+0x239/0x430 [ 85.123338][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 85.123349][ C1] kasan_report+0xdf/0x1d0 [ 85.123362][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 85.123375][ C1] do_raw_spin_lock+0x23b/0x260 [ 85.123386][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.123397][ C1] ? kcov_remote_stop+0x201/0x540 [ 85.123411][ C1] ? kcov_remote_stop+0x201/0x540 [ 85.123425][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 85.123439][ C1] ? __wake_up+0x1c/0x60 [ 85.123453][ C1] __wake_up+0x1c/0x60 [ 85.123467][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 85.123484][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 85.123498][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 85.123513][ C1] dummy_timer+0xda1/0x36c0 [ 85.123526][ C1] ? find_held_lock+0x2b/0x80 [ 85.123541][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.123555][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 85.123569][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 85.123583][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 85.123594][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.123606][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.123620][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 85.123631][ C1] __hrtimer_run_queues+0x470/0xa00 [ 85.123645][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 85.123657][ C1] handle_softirqs+0x1ea/0xa00 [ 85.123671][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 85.123684][ C1] ? _raw_spin_unlock+0x28/0x50 [ 85.123696][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 85.123709][ C1] __irq_exit_rcu+0x162/0x210 [ 85.123721][ C1] irq_exit_rcu+0x9/0x30 [ 85.123737][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 85.123752][ C1] [ 85.123755][ C1] [ 85.123759][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.123771][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 85.123786][ C1] Code: b6 95 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 90 24 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 85.123796][ C1] RSP: 0000:ffffc9000046fdf0 EFLAGS: 00000202 [ 85.123806][ C1] RAX: 00000000001f1a1f RBX: ffff88801c332540 RCX: ffffffff8b870225 [ 85.123813][ C1] RDX: 0000000000000000 RSI: ffffffff8df1acd5 RDI: ffffffff8c1c4680 [ 85.123819][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10056667b5 [ 85.123826][ C1] R10: ffff88802b333dab R11: 0000000000000000 R12: 0000000000000001 [ 85.123832][ C1] R13: ffffed10038664a8 R14: 0000000000000001 R15: ffffffff90d74750 [ 85.123840][ C1] ? ct_kernel_exit+0x125/0x180 [ 85.123857][ C1] default_idle+0x9/0x10 [ 85.123865][ C1] default_idle_call+0x6c/0xb0 [ 85.123875][ C1] do_idle+0x464/0x590 [ 85.123887][ C1] ? __pfx_do_idle+0x10/0x10 [ 85.123898][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 85.123913][ C1] cpu_startup_entry+0x4f/0x60 [ 85.123926][ C1] start_secondary+0x21d/0x2d0 [ 85.123943][ C1] ? __pfx_start_secondary+0x10/0x10 [ 85.123960][ C1] common_startup_64+0x13e/0x148 [ 85.123976][ C1] [ 85.123979][ C1] [ 85.216772][ C1] Allocated by task 5911: [ 85.217980][ C1] kasan_save_stack+0x30/0x50 [ 85.219303][ C1] kasan_save_track+0x14/0x30 [ 85.220621][ C1] __kasan_kmalloc+0xaa/0xb0 [ 85.221913][ C1] xpad_probe+0x28e/0x1f60 [ 85.223172][ C1] usb_probe_interface+0x303/0x8f0 [ 85.224601][ C1] really_probe+0x241/0xa60 [ 85.225889][ C1] __driver_probe_device+0x22e/0x480 [ 85.227373][ C1] driver_probe_device+0x4c/0x1b0 [ 85.229003][ C1] __device_attach_driver+0x1df/0x340 [ 85.230504][ C1] bus_for_each_drv+0x159/0x1e0 [ 85.231869][ C1] __device_attach+0x1e4/0x4d0 [ 85.233212][ C1] device_initial_probe+0xaf/0xd0 [ 85.234616][ C1] bus_probe_device+0x64/0x160 [ 85.235969][ C1] device_add+0x1210/0x1950 [ 85.237241][ C1] usb_set_configuration+0xd97/0x1c60 [ 85.238727][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 85.240234][ C1] usb_probe_device+0xef/0x400 [ 85.241576][ C1] really_probe+0x241/0xa60 [ 85.242848][ C1] __driver_probe_device+0x22e/0x480 [ 85.244298][ C1] driver_probe_device+0x4c/0x1b0 [ 85.245744][ C1] __device_attach_driver+0x1df/0x340 [ 85.247248][ C1] bus_for_each_drv+0x159/0x1e0 [ 85.248590][ C1] __device_attach+0x1e4/0x4d0 [ 85.249961][ C1] device_initial_probe+0xaf/0xd0 [ 85.251428][ C1] bus_probe_device+0x64/0x160 [ 85.252793][ C1] device_add+0x1210/0x1950 [ 85.254070][ C1] usb_new_device.cold+0x685/0x115c [ 85.255556][ C1] hub_event+0x314d/0x4af0 [ 85.256820][ C1] process_one_work+0xa0e/0x1980 [ 85.258208][ C1] worker_thread+0x5ef/0xe50 [ 85.259515][ C1] kthread+0x370/0x450 [ 85.260672][ C1] ret_from_fork+0x72b/0xd50 [ 85.261976][ C1] ret_from_fork_asm+0x1a/0x30 [ 85.263791][ C1] [ 85.264491][ C1] Freed by task 5847: [ 85.265644][ C1] kasan_save_stack+0x30/0x50 [ 85.266995][ C1] kasan_save_track+0x14/0x30 [ 85.268422][ C1] kasan_save_free_info+0x3b/0x70 [ 85.269860][ C1] __kasan_slab_free+0x5f/0x80 [ 85.271241][ C1] kfree+0x223/0x6c0 [ 85.272391][ C1] xpad_disconnect+0x1cf/0x530 [ 85.273767][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 85.275295][ C1] device_remove+0x12a/0x180 [ 85.276644][ C1] device_release_driver_internal+0x44e/0x620 [ 85.278387][ C1] bus_remove_device+0x2bc/0x560 [ 85.279847][ C1] device_del+0x376/0x9b0 [ 85.281095][ C1] usb_disable_device+0x367/0x810 [ 85.282531][ C1] usb_disconnect+0x2e2/0x9a0 [ 85.283899][ C1] hub_event+0x1d0c/0x4af0 [ 85.285210][ C1] process_one_work+0xa0e/0x1980 [ 85.286635][ C1] worker_thread+0x5ef/0xe50 [ 85.288069][ C1] kthread+0x370/0x450 [ 85.289255][ C1] ret_from_fork+0x72b/0xd50 [ 85.290604][ C1] ret_from_fork_asm+0x1a/0x30 [ 85.292038][ C1] [ 85.292734][ C1] The buggy address belongs to the object at ffff888060f26000 [ 85.292734][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 85.296695][ C1] The buggy address is located 92 bytes inside of [ 85.296695][ C1] freed 1024-byte region [ffff888060f26000, ffff888060f26400) [ 85.301137][ C1] [ 85.301822][ C1] The buggy address belongs to the physical page: [ 85.303653][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60f20 [ 85.306107][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.308531][ C1] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 85.310695][ C1] page_type: f5(slab) [ 85.311870][ C1] raw: 04fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 85.314318][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 85.316721][ C1] head: 04fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 85.319164][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 85.321600][ C1] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 85.324021][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 85.326391][ C1] page dumped because: kasan: bad access detected [ 85.328194][ C1] page_owner tracks the page as allocated [ 85.329736][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u32:0), ts 81990635265, free_ts 81795075714 [ 85.335418][ C1] post_alloc_hook+0xfd/0x120 [ 85.337077][ C1] get_page_from_freelist+0x11a6/0x3410 [ 85.338666][ C1] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 85.340394][ C1] new_slab+0xa6/0x6c0 [ 85.341575][ C1] refill_objects+0x277/0x420 [ 85.342929][ C1] __pcs_replace_empty_main+0x375/0x650 [ 85.344518][ C1] __kmalloc_noprof+0x688/0x850 [ 85.345958][ C1] ieee802_11_parse_elems_full+0x177/0x37f0 [ 85.347666][ C1] ieee80211_inform_bss+0x159/0x1150 [ 85.349187][ C1] cfg80211_inform_single_bss_data+0x8a1/0x1de0 [ 85.350998][ C1] cfg80211_inform_bss_data+0x237/0x3a00 [ 85.352628][ C1] cfg80211_inform_bss_frame_data+0x247/0x780 [ 85.354333][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 85.355988][ C1] ieee80211_ibss_rx_queued_mgmt+0x1922/0x2f80 [ 85.357765][ C1] ieee80211_iface_work+0xbff/0x13e0 [ 85.359317][ C1] cfg80211_wiphy_work+0x410/0x570 [ 85.360777][ C1] page last free pid 5745 tgid 5745 stack trace: [ 85.362574][ C1] __free_frozen_pages+0x794/0x10a0 [ 85.364069][ C1] qlist_free_all+0x47/0xf0 [ 85.365385][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 85.366953][ C1] __kasan_slab_alloc+0x69/0x90 [ 85.368377][ C1] kmem_cache_alloc_noprof+0x241/0x6e0 [ 85.369928][ C1] do_getname+0x35/0x390 [ 85.371140][ C1] do_sys_openat2+0xc5/0x1e0 [ 85.372521][ C1] __x64_sys_openat+0x12d/0x210 [ 85.373921][ C1] do_syscall_64+0x115/0x840 [ 85.375499][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.377199][ C1] [ 85.377901][ C1] Memory state around the buggy address: [ 85.379527][ C1] ffff888060f25f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.381778][ C1] ffff888060f25f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.384045][ C1] >ffff888060f26000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.386344][ C1] ^ [ 85.388352][ C1] ffff888060f26080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.390608][ C1] ffff888060f26100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.392896][ C1] ================================================================== [ 85.395171][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.397297][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 85.399800][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.402646][ C1] Call Trace: [ 85.403623][ C1] [ 85.404473][ C1] dump_stack_lvl+0x100/0x190 [ 85.405859][ C1] vpanic+0x552/0x970 [ 85.407018][ C1] ? __pfx_vpanic+0x10/0x10 [ 85.408485][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 85.409934][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 85.411397][ C1] panic+0xd1/0xe0 [ 85.412506][ C1] ? __pfx_panic+0x10/0x10 [ 85.414265][ C1] ? end_report.part.0+0x23/0x90 [ 85.415702][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.417083][ C1] ? end_report.part.0+0x23/0x90 [ 85.418544][ C1] ? check_panic_on_warn+0x1f/0x90 [ 85.420022][ C1] check_panic_on_warn.cold+0x19/0x34 [ 85.421539][ C1] end_report.part.0+0x3a/0x90 [ 85.422929][ C1] kasan_report.cold+0xe/0x18 [ 85.424288][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 85.425747][ C1] do_raw_spin_lock+0x23b/0x260 [ 85.427140][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.428717][ C1] ? kcov_remote_stop+0x201/0x540 [ 85.430151][ C1] ? kcov_remote_stop+0x201/0x540 [ 85.431600][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 85.433151][ C1] ? __wake_up+0x1c/0x60 [ 85.434379][ C1] __wake_up+0x1c/0x60 [ 85.435579][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 85.437129][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 85.438705][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 85.440193][ C1] dummy_timer+0xda1/0x36c0 [ 85.441490][ C1] ? find_held_lock+0x2b/0x80 [ 85.442835][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.444530][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 85.446139][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 85.447908][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 85.449320][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.450691][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.452440][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 85.454350][ C1] __hrtimer_run_queues+0x470/0xa00 [ 85.455868][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 85.457336][ C1] handle_softirqs+0x1ea/0xa00 [ 85.458736][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 85.460244][ C1] ? _raw_spin_unlock+0x28/0x50 [ 85.461633][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 85.463267][ C1] __irq_exit_rcu+0x162/0x210 [ 85.464611][ C1] irq_exit_rcu+0x9/0x30 [ 85.465837][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 85.467465][ C1] [ 85.468343][ C1] [ 85.469207][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.470917][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 85.472549][ C1] Code: b6 95 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 90 24 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 85.477999][ C1] RSP: 0000:ffffc9000046fdf0 EFLAGS: 00000202 [ 85.479721][ C1] RAX: 00000000001f1a1f RBX: ffff88801c332540 RCX: ffffffff8b870225 [ 85.481958][ C1] RDX: 0000000000000000 RSI: ffffffff8df1acd5 RDI: ffffffff8c1c4680 [ 85.484212][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10056667b5 [ 85.486469][ C1] R10: ffff88802b333dab R11: 0000000000000000 R12: 0000000000000001 [ 85.488752][ C1] R13: ffffed10038664a8 R14: 0000000000000001 R15: ffffffff90d74750 [ 85.491012][ C1] ? ct_kernel_exit+0x125/0x180 [ 85.492457][ C1] default_idle+0x9/0x10 [ 85.493675][ C1] default_idle_call+0x6c/0xb0 [ 85.495530][ C1] do_idle+0x464/0x590 [ 85.496725][ C1] ? __pfx_do_idle+0x10/0x10 [ 85.498076][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 85.499769][ C1] cpu_startup_entry+0x4f/0x60 [ 85.501163][ C1] start_secondary+0x21d/0x2d0 [ 85.502530][ C1] ? __pfx_start_secondary+0x10/0x10 [ 85.504050][ C1] common_startup_64+0x13e/0x148 [ 85.505479][ C1] [ 85.507736][ C1] Kernel Offset: disabled [ 85.509014][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:14:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000178efd RBX=ffffffff8e4955c0 RCX=ffffffff8b870225 RDX=0000000000000000 RSI=ffffffff8df1acd5 RDI=ffffffff8c1c4680 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed10056467b5 R10=ffff88802b233dab R11=0000000000000000 R12=0000000000000000 R13=fffffbfff1c92ab8 R14=0000000000000000 R15=ffffffff90d74750 RIP=ffffffff8b86e87f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809718e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033bb9ff8 CR3=000000006bf35000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857c4655 RDI=ffffffff9b449300 RBP=ffffffff9b4492c0 RSP=ffffc900005904e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000062 R14=0000000000000010 R15=ffffffff857c45f0 RIP=ffffffff857c467f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809728e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000033bc6ff8 CR3=000000006ce3a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff888027ed8558 RCX=00000013d1a8b7f8 RDX=1ffff11005687876 RSI=ffffffff8def57c3 RDI=ffff88802b43c3b0 RBP=ffffc9000047fde0 RSP=ffffc9000047fc80 R8 =0000000000000000 R9 =fffffbfff21ae8ea R10=ffffffff90d74757 R11=0000000000000002 R12=000000000001659f R13=00000013d1aa1d97 R14=ffff88802b43b5c0 R15=ffff888027ed8000 RIP=ffffffff8b87d038 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809738e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002000 CR3=00000000742f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802b43b608 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88802b43b60a RBP=dffffc0000000000 RSP=ffffc900005df7f8 R8 =0000000000000001 R9 =ffffed10056876c1 R10=ffff88802b43b60b R11=0000000000000000 R12=0000000000007e77 R13=ffffed10056876c1 R14=ffff88802b53c580 R15=0000000000000000 RIP=ffffffff8b89f9d5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809748e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033b15ff8 CR3=00000000742f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000